docker私有倉庫操做(搭建、運行、添加、刪除)

目錄

• 運行私有倉庫
  • TIPS:
• 上傳
  • 把鏡像放入私有倉庫
  • 驗證
• 查看
  • TIPS：
• 垃圾回收
• 問題排查

參考：https://yeasy.gitbooks.io/docker_practice/content/repository/registry.html

運行私有倉庫

直接用docker的方式運行registry鏡像省了搭建步驟

$ docker run -d \
    -p 5000:5000 \
    -v /opt/data/registry:/var/lib/registry \
    registry

---

TIPS:

數據目錄和庫文件目錄能夠本身設置，甚至能夠給私有倉庫取名字,以下：

$ docker run -d -p 5000:5000 --privileged=true -v /home/.registry/data:/home/.registry/lib  --restart=always --name pirvi_registry registry

指定了名字以後，若是想重啓，可使用命令：

$ docker restart pirvi_registry

若是是執行run的話至關於啓動了一個新的容器，容器ID就會變，若是仍是使用剛纔的參數而且--name相同，那麼會報以下錯誤：

docker: Error response from daemon: Conflict. The container name "/pirvi_registry" is already in use by container "194a22f33b1af366f036cc7691a1d1d918e55150bbc170e8e8fd171e52f0f273". You have to remove (or rename) that container to be able to reuse that name.

所以若是要從新啓動容器請使用docker restart [name]命令。

---

上傳

把鏡像放入私有倉庫

$ docker image ls
REPOSITORY                        TAG                 IMAGE ID            CREATED             VIRTUAL SIZE
ubuntu                            latest              ba5877dc9bec        6 weeks ago         192.7 MB
$ docker tag ubuntu:latest 127.0.0.1:5000/ubuntu:latest
$ docker image ls
REPOSITORY                        TAG                 IMAGE ID            CREATED             VIRTUAL SIZE
ubuntu                            latest              ba5877dc9bec        6 weeks ago         192.7 MB
127.0.0.1:5000/ubuntu:latest      latest              ba5877dc9bec        6 weeks ago         192.7 MB

驗證

$ docker image rm 127.0.0.1:5000/ubuntu:latest

$ docker pull 127.0.0.1:5000/ubuntu:latest
Pulling repository 127.0.0.1:5000/ubuntu:latest
ba5877dc9bec: Download complete
511136ea3c5a: Download complete
9bad880da3d2: Download complete
25f11f5fb0cb: Download complete
ebc34468f71d: Download complete
2318d26665ef: Download complete

$ docker image ls
REPOSITORY                         TAG                 IMAGE ID            CREATED             VIRTUAL SIZE
127.0.0.1:5000/ubuntu:latest       latest              ba5877dc9bec        6 weeks ago         192.7 MB

查看

查看私有倉庫中的鏡像

$ curl 127.0.0.1:5000/v2/_catalog
{"repositories":["ubuntu","nginx"]}

查看具體的某個鏡像的版本

[root@kub2 ~]# curl 127.0.0.1:5000/v2/nginx/tags/list
{"name":"nginx","tags":["1.7.9"]}

有人寫了現成的腳本:查看倉庫鏡像腳本

查看某個鏡像的sha256值：

curl -v --silent "127.0.0.1:5000/v2/nginx/manifests/1.7.9" 2>&1 | grep Docker-Content-Digest | awk '{print ($3)}'

刪除私有倉庫的鏡像

$ curl -I -X DELETE http://127.0.0.1:5000/v2/fbgweb/manifests/sha256:6a67ba482a8dd4f8143ac96b1dcffa5e45af95b8d3e37aeba72401a5afd7ab8e

---

TIPS：

這裏須要注意：
1 這裏的刪除鏡像只是刪除了一些元數據，須要執行下面的垃圾回收才能真正地從硬盤上刪除鏡像數據。
2 由於缺省Docker private registry不容許刪除鏡像，若是遇到「405 Unsupported」 錯誤，須要在運行registry容器時設置REGISTRY_STORAGE_DELETE_ENABLED環境變量或參數爲true。
錯誤信息以下：

HTTP/1.1 405 Method Not Allowed
Content-Type: application/json; charset=utf-8
Docker-Distribution-Api-Version: registry/2.0
X-Content-Type-Options: nosniff
Date: Wed, 28 Aug 2019 07:31:34 GMT
Content-Length: 78

docker-compose.yaml 例子：

environment:
    REGISTRY_STORAGE_DELETE_ENABLED: "true"

docker run 例子：

-e REGISTRY_STORAGE_DELETE_ENABLED="true"

另外, 要刪除的鏡像的sha256也能夠從docker pull該鏡像以後的打印中得到：

$ docker push 127.0.0.1:5000/radial/busyboxplus:curl
The push refers to repository [127.0.0.1:5000/radial/busyboxplus]
5f70bf18a086: Mounted from nginx 
430380561a4f: Pushed 
165264a81ac2: Pushed 
curl: digest: sha256:ef538eae80f40015736f1ee308d74b4f38f74e978c65522ce64abdf8c8c5e0d6 size: 1765

---

垃圾回收

查看私有倉庫的容器

$ docker ps
CONTAINER ID        IMAGE                  COMMAND                  CREATED             STATUS              PORTS                    NAMES
194a22f33b1a        registry               "/entrypoint.sh /etc…"   4 days ago          Up 4 days           0.0.0.0:5000->5000/tcp   pirvi_registry

用tty登陸到容器

$ docker exec -it 194a22f33b1a /bin/sh

執行垃圾回收命令

~ # registry garbage-collect /etc/docker/registry/config.yml 
31 blobs marked, 5 blobs eligible for deletion
blob eligible for deletion: sha256:5e7cf06c8745d0985f94191c60aad8b87371c8a674162525bff0efccdb805931
INFO[0000] Deleting blob: /docker/registry/v2/blobs/sha256/5e/5e7cf06c8745d0985f94191c60aad8b87371c8a674162525bff0efccdb805931  go.version=go1.7.6 instance.id=c38f4c35-9914-4b77-a59f-ea584137fae0
...

問題排查

1. push到127.0.0.1:500/XXX沒有問題，可是別的服務器push到私服報錯：「The push refers to repository [192.168.15.175:5000/centos]
   Get https://192.168.15.175:5000/v2/: http: server gave HTTP response to HTTPS client」
   解決辦法：
   在/etc/docker/daemon.json文件中添加" "insecure-registries": ["192.168.15.175:5000"]"一句

{
  ......
  "insecure-registries": ["192.168.15.175:5000"],
 ......
}

而後重啓docker

$ systemctl restart docker.service