【Docker】4.Docker私库Registry及Harbor搭建

1
2
$ sudo docker pull registry

1
2
$ sudo docker run -d -p 8100:5000 -v /opt/registry:/var/lib/registry --restart=always --name registry registry:latest

1
2
3
4
[wxt@localhost ~]$ sudo docker ps
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS              PORTS                    NAMES
7d56c5eae33d        registry:latest     "/entrypoint.sh /e..."   15 seconds ago      Up 14 seconds       0.0.0.0:8100->5000/tcp   registry

1
2
3
[wxt@localhost ~]$ curl  http://10.168.xx.xx:8100/v2/_catalog
{"repositories":[]}

1
2
3
4
5
6
7
8
9
#在本地host上面，给jdk-8u201添加新的tag
[wxt@localhost ~]$ sudo docker tag f1ee62462c0d 10.168.14.40:8100/jdk_8u201
[wxt@localhost ~]$ sudo docker images
REPOSITORY                    TAG                 IMAGE ID            CREATED             SIZE
10.168.xx.xx:8100/jdk_8u201   latest              f1ee62462c0d        23 hours ago        598 MB
jdk-8u201                     1.0                 f1ee62462c0d        23 hours ago        598 MB
docker.io/registry            latest              d0eed8dad114        3 weeks ago         25.8 MB
docker.io/centos              7                   1e1148e4cc2c        2 months ago        202 MB

1
2
3
#docker push <registry_ip>:<registry_port>/<image_name>:<image_tag>
sudo docker push 10.168.xx.xx:8100/jdk_8u201

1
2
3
[wxt@localhost ~]$ curl  http://10.168.xx.xx:8100/v2/_catalog
{"repositories":["jdk_8u201"]}

1
2
3
# docker pull <registry_ip>:<registry_port>/<image_name>:<image_tag>
sudo docker pull 10.168.xx.xx:8100/jdk_8u201

1
2
$ sudo docker container stop registry && docker container rm -v registry

1
2
3
4
$ tar -zxvf harbor-online-installer-v1.5.0.tgz
$ cd harbor
$ vi harbor.cfg

1
2
hostname = 10.168.xx.xx

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
$ sudo ./prepare

Generated and saved secret to file: /data/secretkey
Generated configuration file: ./common/config/nginx/nginx.conf
Generated configuration file: ./common/config/adminserver/env
Generated configuration file: ./common/config/core/env
Generated configuration file: ./common/config/registry/config.yml
Generated configuration file: ./common/config/db/env
Generated configuration file: ./common/config/jobservice/env
Generated configuration file: ./common/config/jobservice/config.yml
Generated configuration file: ./common/config/log/logrotate.conf
Generated configuration file: ./common/config/registryctl/env
Generated configuration file: ./common/config/core/app.conf
Generated certificate, key file: ./common/config/core/private_key.pem, cert file: ./common/config/registry/root.crt
The configuration files are ready, please use docker-compose to start the service.

1
2
3
4
5
6
7
[wxt@localhost harbor]$ sudo ./install.sh

[Step 0]: checking installation environment ...

Note: docker version: 1.13.1
✖ Need to install docker-compose(1.7.1+) by yourself first and run this script again.

1
2
3
4
5
$ sudo curl -L "https://github.com/docker/compose/releases/download/1.23.2/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose
$ sudo chmod +x /usr/local/bin/docker-compose
$ docker-compose --version
docker-compose version 1.23.2, build 1110ad01

1
2
3
ERROR: Couldn't connect to Docker daemon at http+docker://localhost - is it running?
If it's at a non-standard location, specify the URL with the DOCKER_HOST environment variable.

1
2
$ sudo chmod 666 /var/run/docker.sock

1
2
3
4
5
6
7
8
9
10
11
12
13
[wxt@localhost harbor]$ docker-compose up -d
Creating network "harbor_harbor" with the default driver
Pulling log (goharbor/harbor-log:v1.5.0)...
Trying to pull repository docker.io/goharbor/harbor-log ... 
sha256:27f9e24f28393a6052b71c93b1571f2269e1d3c489f4081996a099ac88ff56ff: Pulling from docker.io/goharbor/harbor-log
51be32cd3c9d: Downloading [==================================>                ] 34.06 MB/49.28 MB
fd9cdcfcef45: Download complete
4167b797c339: Download complete
b22d11b0e478: Download complete
d5aad3df7cee: Download complete
bd43de1bbd44: Download complete
7494eff3da48: Download complete

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
$ vi docker-compose.yml

proxy:
    image: goharbor/nginx-photon:v1.5.0
    container_name: nginx
    restart: always
    volumes:
      - ./common/config/nginx:/etc/nginx:z
    networks:
      - harbor
    ports:
      - 8101:80
      - 443:443
      - 4443:4443
    depends_on:
      - postgresql
      - registry
      - ui
      - log

1
2
3
4
5
6
7
8
 $ vi common/templates/registry/config.yml
 auth:
  token:
    issuer: harbor-token-issuer
    realm: $public_url:8101/service/token
    rootcertbundle: /etc/registry/root.crt
    service: harbor-registry

1
2
3
 $ docker-compose start
 $ docker-compose stop

1
2
3
#docker tag SOURCE_IMAGE[:TAG] 10.168.xx.xx/yrz/IMAGE[:TAG]
$ sudo docker tag jdk-8u201:1.0 10.168.xx.xx/yrz/jdk-8u201:1.0

1
2
3
# docker push 10.168.xx.xx/yrz/IMAGE[:TAG]
$ sudo docker push 10.168.xx.xx:8101/yrz/jdk-8u201:1.0

1
2
3
4
5
The push refers to a repository [10.168.xx.xx:8101/yrz/jdk-8u201]
35b842b71126: Preparing 
071d8bd76517: Preparing 
denied: requested access to the resource is denied

1
2
3
4
5
$ docker login 10.168.xx.xx:8101
Username: admin
Password: 
Login Succeeded

1
2
Get https://10.168.xx.xx:8101/v1/_ping: http: server gave HTTP response to HTTPS client

1
2
{ "insecure-registries":["10.168.xx.xx:8101"] }

1
2
3
4
5
6
7
8
9
ExecStart=/usr/bin/dockerd-current 
          --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current 
          --default-runtime=docker-runc 
          --exec-opt native.cgroupdriver=systemd 
          --userland-proxy-path=/usr/libexec/docker/docker-proxy-current 
          --init-path=/usr/libexec/docker/docker-init-current 
          --seccomp-profile=/etc/docker/seccomp.json 
          --insecure-registry 10.168.xx.xx:8101

1
2
$ sudo docker push 10.168.xx.xx:8101/yrz/jdk-8u201:1.0

1
2
3
4
$ sudo docker login 10.168.14.40:8101

$ sudo docker pull 10.168.14.40:8101/yrz/jdk-8u201:1.0

1
2
3
4
5
6
7
8
9
10
$ sudo docker-compose stop

#通过带有–dry-run选项，可以查看到将要删除的镜像文件
$ docker run -it --name gc --rm --volumes-from registry docker.io/vmware/registry-photon:v2.6.2-v1.5.0 garbage-collect --dry-run /etc/registry/config.yml

#不带–dry-run选项，直接执行删除
$ docker run -it --name gc --rm --volumes-from registry docker.io/vmware/registry-photon:v2.6.2-v1.5.0 garbage-collect  /etc/registry/config.yml

$ sudo docker-compose start

1
2
3
4
5
6
7
8
9
10
11
12
13
14
[wxt@localhost ~]$ sudo docker images
REPOSITORY                            TAG                 IMAGE ID            CREATED             SIZE
10.168.xx.xx:8101/yrz/centos          7                   1e1148e4cc2c        2 months ago        202 MB
docker.io/centos                      7                   1e1148e4cc2c        2 months ago        202 MB
docker.io/goharbor/registry-photon    v2.6.2-v1.6.0       1ec7d8d4f0fd        5 months ago        201 MB
docker.io/vmware/redis-photon         v1.5.0              7c03076402d9        9 months ago        207 MB
docker.io/vmware/registry-photon      v2.6.2-v1.5.0       3059f44f4b9a        9 months ago        198 MB
docker.io/vmware/nginx-photon         v1.5.0              e100456182fc        9 months ago        135 MB
docker.io/vmware/harbor-log           v1.5.0              62bb6b8350d9        9 months ago        200 MB
docker.io/vmware/harbor-jobservice    v1.5.0              aca9fd2e867f        9 months ago        194 MB
docker.io/vmware/harbor-ui            v1.5.0              1055166068d0        9 months ago        212 MB
docker.io/vmware/harbor-adminserver   v1.5.0              019bc4544829        9 months ago        183 MB
docker.io/vmware/harbor-db            v1.5.0              82354dcf564f        9 months ago        526 MB