Docker仓库

Posted zhujingzhi

tags:

篇首语:本文由小常识网(cha138.com)小编为大家整理,主要介绍了Docker仓库相关的知识,希望对你有一定的参考价值。

一、什么是仓库

  仓库就是集中存放镜像的地方,分为公共仓库和私有仓库,一个容易混淆的概念是注册服务器,实际上注册服务器是存放仓库的具体服务器,一个注册服务器可以有多个仓库,而每个仓库下面有多个镜像

二、使用Docker官方公共仓库

  官方仓库地址:DockerHub

2.1. 登录仓库

  使用docker login 命令来登录官方的公共仓库

[[email protected] ~]# docker login
Login with your Docker ID to push and pull images from Docker Hub. If you don‘t have a Docker ID, head over to https://hub.docker.com to create one.
Username: brianzjz
Password:
Login Succeeded

没有用户名密码的可以去官方注册一个

2.2. 下载镜像

  使用docker pull 命令下载镜像

[[email protected] ~]# docker pull nginx
Using default tag: latest
Trying to pull repository docker.io/library/nginx ...
latest: Pulling from docker.io/library/nginx
802b00ed6f79: Pull complete
e9d0e0ea682b: Pull complete
d8b7092b9221: Pull complete
Digest: sha256:24a0c4b4a4c0eb97a1aabb8e29f18e917d05abfe1b7a7c07857230879ce7d3d3
Status: Downloaded newer image for docker.io/nginx:latest

2.3. 推送镜像

  使用docker push 命令推送镜像

[[email protected] ~]# docker push brianzjz/nginx:v1.0
The push refers to a repository [docker.io/brianzjz/nginx]
579c75bb43c0: Mounted from library/nginx
67d3ae5dfa34: Mounted from library/nginx
8b15606a9e3e: Mounted from library/nginx
v1.0: digest: sha256:c0b69559d28fb325a64c6c8f47d14c26b95aa047312b29c699da10380e90b4d7 size: 948

三、国内第三方公共仓库

  使用国内的仓库就是为了能提高下载的速度:想要达到火箭的速度 请点击:火箭加速器

四、搭建自己的本地仓库

  这个私有仓库才是重点,在我们的企业中很多都会是自己去定制自己的镜像文件,有一些还必须不能对外开放的,也是能够为了提高在内网的下载速度,这样我们就要搭建自己的私有仓库了

4.1. 使用registry镜像创建私有仓库

  安装docker后,可以通过官方提供的registry镜像来简单的搭建一套本地的私有仓库

[[email protected] ~]# mkdir -p /opt/data/docker/                                                  # 创建存放镜像的目录
[[email protected] ~]# docker run -it -d -p 5000:5000 -v /opt/data/docker:/tmp/registry registry   # 创建容器 -p指定端口 -v数据卷挂载
Unable to find image ‘registry:latest‘ locally
Trying to pull repository docker.io/library/registry ...
latest: Pulling from docker.io/library/registry
d6a5679aa3cf: Pull complete
ad0eac849f8f: Pull complete
2261ba058a15: Pull complete
f296fda86f10: Pull complete
bcd4a541795b: Pull complete
Digest: sha256:5a156ff125e5a12ac7fdec2b90b7e2ae5120fa249cf62248337b6d04abc574c8
Status: Downloaded newer image for docker.io/registry:latest
6df20cdacf8d4a40ad3cbd3d310299650d41d0757b535130a0daa19f21ee1901
[[email protected] ~]# docker ps
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS              PORTS                    NAMES
6df20cdacf8d        registry            "/entrypoint.sh /e..."   8 seconds ago       Up 7 seconds        0.0.0.0:5000->5000/tcp   dazzling_golick

 

4.2. 管理私有仓库

  用另一台机器来测试上传下载私有仓库

[[email protected] ~]# docker images
REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
[[email protected] ~]# docker pull nginx
Using default tag: latest
Trying to pull repository docker.io/library/nginx ...
latest: Pulling from docker.io/library/nginx
802b00ed6f79: Pull complete
e9d0e0ea682b: Pull complete
d8b7092b9221: Pull complete
Digest: sha256:24a0c4b4a4c0eb97a1aabb8e29f18e917d05abfe1b7a7c07857230879ce7d3d3
Status: Downloaded newer image for docker.io/nginx:latest
[[email protected] ~]# docker tag nginx 192.168.73.131:5000/nginx_test
[[email protected] ~]# docker images
REPOSITORY                       TAG                 IMAGE ID            CREATED             SIZE
192.168.73.131:5000/nginx_test   latest              06144b287844        2 weeks ago         109 MB
docker.io/nginx                  latest              06144b287844        2 weeks ago         109 MB
=================================================
[[email protected] ~]# docker push 192.168.73.131:5000/nginx_test
The push refers to a repository [192.168.73.131:5000/nginx_test]
Get https://192.168.73.131:5000/v1/_ping: http: server gave HTTP response to HTTPS client

这里执行的时候报错了,原因就是新版本的docker对安全性要求高了,会要求仓库支持SSL/TLS证书

解决方法:
修改daemon配置文件
[[email protected] ~]# vim /etc/sysconfig/docker
OPTIONS=‘--selinux-enabled --log-driver=journald --signature-verification=false  # 原来的配置
修改为:
OPTIONS=‘--selinux-enabled --log-driver=journald --signature-verification=false --insecure-registry 192.168.73.131:5000‘
保存后,重启docker
[[email protected] ~]# systemctl restart docker

=================================================
# 重新执行push
[[email protected] ~]# docker push 192.168.73.131:5000/nginx_test
The push refers to a repository [192.168.73.131:5000/nginx_test]
579c75bb43c0: Pushed
67d3ae5dfa34: Pushed
8b15606a9e3e: Pushed
latest: digest: sha256:c0b69559d28fb325a64c6c8f47d14c26b95aa047312b29c699da10380e90b4d7 size: 948


# curl 测试
# 温馨提示:下面的执行是错的 因为registry现在已经是2.0版本了
[[email protected] ~]# curl http://192.168.73.131:5000/v1/search
404 page not found

# 正确的方式
[[email protected] ~]# curl -X GET http://192.168.73.131:5000/v2/_catalog
{"repositories":["nginx_test"]}

# 下载私有仓库镜像
[[email protected] ~]# docker pull 192.168.73.131:5000/nginx_test
Using default tag: latest
Trying to pull repository 192.168.73.131:5000/nginx_test ...
latest: Pulling from 192.168.73.131:5000/nginx_test
Digest: sha256:c0b69559d28fb325a64c6c8f47d14c26b95aa047312b29c699da10380e90b4d7
Status: Downloaded newer image for 192.168.73.131:5000/nginx_test:latest
[[email protected] ~]# docker images
REPOSITORY                       TAG                 IMAGE ID            CREATED             SIZE
192.168.73.131:5000/nginx_test   latest              06144b287844        2 weeks ago         109 MB
docker.io/nginx                  latest              06144b287844        2 weeks ago         109 MB

  

以上是关于Docker仓库的主要内容,如果未能解决你的问题,请参考以下文章

docker--docker仓库

gitlab私人代码仓库搭建(docker)

Docker企业级私有仓库

百余 Docker 注册表配置出错,数千代码仓库遭暴露

Docker私有仓库Registry的搭建验证

docker学习11-上传本地镜像到镜像仓库