上一篇講了怎麼部署Nexus,及用Nexus部署yum源,如今講一下使用Nexus部署docker倉庫,爲之後部署k8s等作本地倉庫。php
下面安裝docker。html
環境:centos7nginx
yum -y install dockergit
yum -y install nginxredis
由於docker在傳輸的過程當中默認使用的是https,在網上搜了一下有些說能夠把它取消掉,作了一下測試,發如今上傳的時候仍是有問題,所以我仍是使用https的方式,因此在本地搭建了一個nginx用來作反向代理。docker
nginx配置:vim
[root@yangdong ~]# cat /usr/local/nginx/conf/conf.d/nexus.conf upstream nexus_docker_get { server 192.168.105.233:8082; } upstream nexus_docker_put { server 192.168.105.233:8083; } server { listen 80; listen 443 ssl; server_name idocker.yangdong.com; access_log /var/log/nginx/idocker.io.log; ssl_certificate certs/server.crt; ssl_certificate_key certs/server.key; ssl_protocols TLSv1.1 TLSv1.2; ssl_ciphers '!aNULL:kECDH+AESGCM:ECDH+AESGCM:RSA+AESGCM:kECDH+AES:ECDH+AES:RSA+AES:'; ssl_prefer_server_ciphers on; ssl_session_cache shared:SSL:10m; client_max_body_size 0; chunked_transfer_encoding on; if ( $request_method ~* 'GET') { set $upstream "nexus_docker_get"; } index index.html index.htm index.php; if ( $request_method != 'GET' ) { set $upstream "nexus_docker_put"; } location / { proxy_pass http://$upstream; proxy_set_header Host $host; proxy_connect_timeout 3600; proxy_send_timeout 3600; proxy_read_timeout 3600; proxy_set_header X-Real-IP $remote_addr; proxy_buffering off; proxy_request_buffering off; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto http; } }
#證書須要本身簽發一個,我這裏是本身簽發了一個idocker.yangdong.com的證書。由於這是本地簽發的所以須要在客戶端上作一下hosts解析。centos
vim /etc/hosts 192.168.105.233 idocker.yangdong.com
這時候還須要作一下docker的證書認證:session
[root@yangdong certs.d]# cd /etc/docker/certs.d/ [root@yangdong certs.d]# ls idocker.yangdong.com/ ca.crt #在docker的證書目錄下新建一個目錄,把自簽發的crt證書拷貝過來,記住必定要把名字改成ca.crt
重啓docker:gitlab
systemctl restart docker
驗證:
[root@yangdong ~]# docker login -uadmin -padmin123 idocker.yangdong.com Login Succeeded [root@yangdong ~]# docker images REPOSITORY TAG IMAGE ID CREATED SIZEdocker.io/nginx latest 5a3221f0137b 5 days ago 126 MBfdfsimg.vip.test.suixinhuan.com/nginx latest 5a3221f0137b 5 days ago 126 MBidocker.yangdong.com/nginx-v1 latest 5a3221f0137b 5 days ago 126 MB192.168.105.233:8084/redis latest f7302e4ab3a8 6 days ago 98.2 MBdocker.io/redis latest f7302e4ab3a8 6 days ago 98.2 MBfdfsimg.vip.test.suixinhuan.com/redis-v1 latest f7302e4ab3a8 6 days ago 98.2 MBfdfsimg.vip.test.suixinhuan.com/redis latest f7302e4ab3a8 6 days ago 98.2 MBfdfsimg.vip.test.suixinhuan.com/gitlab/gitlab-ce latest eb85f9e7e4b4 8 days ago 1.84 GB[root@yangdong ~]# docker login -uadmin -padmin123 idocker.yangdong.com Login Succeeded [root@yangdong ~]# docker tag docker.io/redis idocker.yangdong.com/redis [root@yangdong ~]# docker push idocker.yangdong.com/redis The push refers to a repository [idocker.yangdong.com/redis] 567b5c120525: Layer already exists 56f790a1596e: Layer already exists 07c26782b55f: Layer already exists 57ad49a0010c: Layer already exists 00ac47184776: Layer already exists 1c95c77433e8: Layer already exists latest: digest: sha256:0e67625224c1da47cb3270e7a861a83e332f708d3d89dde0cbed432c94824d9a size: 1572
這時候咱們去Nexus上查看能夠發現redis已經上傳到本地倉庫了。
同理docker pull you_want_images也能夠下載下來。