[root@xuegod64 ~]# systemctl restart docker

net.bridge.bridge-nf-call-ip6tables = 1 net.bridge.bridge-nf-call-iptables = 1

modprobe br_netfilter

registry[?red??stri]记录，登记；pull 拉 ； push 推

[root@xuegod64 ~]# docker load -iregistry.tar

2. 查看registry镜像

[root@xuegod64 ~]# docker images REPOSITORYTAGIMAGE IDCREATEDSIZE registrylatest047218491f8c3 weeks ago33.17 MB

3. 实战：使用registry镜像搭建一个私有仓库
   使用registry镜像搭建一个私有仓库。 registry镜像中已经把搭建私有库程序安装好了，我只需要使用registry镜像运行一个docker实例就可以了。

[root@xuegod64~]# docker run -d --name registry -p 5000:5000 -v /opt/registry:/var/lib/registryregistry:latest e4698f625a56661edd2678269215ba42d4fa41c2da881768a741a72b4a3d0c60

[root@xuegod64~]# ls/opt/registry# 这个目录会自动创建 [root@xuegod64~]# docker ps CONTAINER IDIMAGECOMMANDCREATEDSTATUSPORTSNAMES 90cc7afb477eregistry:latest"/entrypoint.sh /etc…"34 seconds agoUp 33 seconds0.0.0.0:5000->5000/tcpregistry [root@xuegod63 ~]# netstat-antup | grep 5000 tcp600 :::5000:::*LISTEN4032/docker-proxy

curl http://192.168.1.64:5000/v2/_catalog {"repositories":[]}

[root@xuegod63 ~]# vim/etc/docker/daemon.json

{ "registry-mirrors":["https://rsbud4vc.mirror.aliyuncs.com","https://registry.docker- cn.com","https://docker.mirrors.ustc.edu.cn","https://dockerhub.azk8s.cn","http://hub- mirror.c.163.com","http://qtid6917.mirror.aliyuncs.com","https://rncxm540.mirror.aliyuncs.com" ,"https://e9yneuy4.mirror.aliyuncs.com"], "insecure-registries": [ "192.168.1.64:5000" ] }

[root@xuegod63 ~]# systemctl daemon-reload

[root@xuegod63 ~]# systemctl restart docker

1. 从Docker HUB 上拉取一个测试镜像，名字： busybox
   本地导入
   上传busybox.tar镜像到xuegod63上，作为测试镜像。

[root@xuegod63 ~]# docker load -ibusybox.tar [root@xuegod63 ~]# docker images REPOSITORYTAGIMAGE IDCREATEDSIZE busyboxlatest00f017a8c2a62 weeks ago1.11 MB

[root@xuegod63 ~]# docker tag busybox:latest 192.168.1.64:5000/busybox:latest

[root@xuegod63 ~]# docker images REPOSITORYTAGIMAGE IDCREATEDSIZE 192.168.1.64:5000/busyboxlatest00f017a8c2a64 years ago1.11MB

[root@xuegod63 ~]#docker push 192.168.1.64:5000/busybox

[root@xuegod64 ~]# yum install tree -y [root@xuegod64 ~]# tree /opt/registry/docker/registry/v2/repositories/ /opt/registry/docker/registry/v2/repositories/ └── busybox#可以看到上传的镜像

{"repositories":["busybox"]}

"insecure-registries": [ "192.168.1.64:5000" ]

"insecure-registries": [ "192.168.1.64:5000" ]

[root@xuegod64 ~]# mkdir /data/ssl -p [root@xuegod64 ~]# cd /data/ssl/

[root@xuegod64 ssl]# openssl genrsa -out ca.key 3072

[root@xuegod64 ssl]# openssl req -new -x509 -days 3650 -key ca.key -out ca.pem

[root@xuegod64 ssl]# openssl req -new -x509 -days 3650 -key ca.key -out ca.pem You are about to be asked to enter information that will be incorporated into your certificate request. What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter '.', the field will be left blank. ----- Country Name (2 letter code) [XX]:CN State or Province Name (full name) []:BJ Locality Name (eg, city) [Default City]:BJ Organization Name (eg, company) [Default Company Ltd]:xuegod Organizational Unit Name (eg, section) []:CA Common Name (eg, your name or your server's hostname) []:xuegod64.cn Email Address []:mk@163.com

[root@xuegod64 ssl]# openssl genrsa -out harbor.key3072

[root@xuegod64 ssl]# openssl req -new -key harbor.key -out harbor.csr

[root@xuegod64 ssl]#openssl req -new -key harbor.key -out harbor.csr You are about to be asked to enter information that will be incorporated into your certificate request. What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter '.', the field will be left blank. ----- Country Name (2 letter code) [XX]:CN State or Province Name (full name) []:BJ Locality Name (eg, city) [Default City]:BJ Organization Name (eg, company) [Default Company Ltd]:xuegod Organizational Unit Name (eg, section) []:CA Common Name (eg, your name or your server's hostname) []:xuegod64.cn Email Address []:mk@163.comPlease enter the following 'extra' attributes to be sent with your certificate request A challenge password []: An optional company name []:

[root@xuegod64 ssl]# openssl x509 -req -in harbor.csr -CA ca.pem -CAkey ca.key -CAcreateserial -out harbor.pem -days 3650

openssl x509 -noout -text -in harbor.pem

Certificate: Data: Version: 1 (0x0) Serial Number: cd:21:3c:44:64:17:65:40 Signature Algorithm: sha256WithRSAEncryption Issuer: C=CH, ST=BJ, L=BJ, O=Default Company Ltd Validity Not Before: Dec 26 09:29:19 2020 GMT Not After : Dec 24 09:29:19 2030 GMT Subject: C=CH, ST=BJ, L=BJ, O=Default Company Ltd, CN=harbor Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (3072 bit) Modulus: 00:b0:60:c3:e6:35:70:11:c8:73:83:38:9a:7e:b8: 。。。

[root@xuegod64 ssl]# docker rm -f registry

[root@xuegod64 ssl]# mkdir /data/install -p [root@xuegod64 ssl]# cd /data/install/

ca.keyca.pemca.srlharbor.csrharbor.keyharbor.pem[root@xuegod64 install]# cd /data/install/

[root@xuegod64 install]# tar zxvf harbor-offline-installer-v1.5.0.tgz [root@xuegod64 install]# cd harbor [root@xuegod64 harbor]# ls

[root@xuegod64 harbor]# vim harbor.cfg hostname = xuegod64

ui_url_protocol = https

ssl_cert = /data/ssl/harbor.pem ssl_cert_key = /data/ssl/harbor.key

[root@xuegod63 ~]# rz

[root@xuegod63 ~]# mv docker-compose-Linux-x86_64 /usr/local/bin/docker-compose

[root@xuegod63 ~]# chmod +x /usr/local/bin/docker-compose

[root@xuegod63 ~]# curl -L https://github.com/docker/compose/releases/download/1.26.2/docker-compose-`uname -s`-`uname -m` > /usr/local/bin/docker-compose

[root@xuegod63 ~]# chmod +x /usr/local/bin/docker-compose

[root@xuegod64 ~]#docker load -i docker-harbor.tar.gz [root@xuegod64 install]# cd /data/install/harbor [root@xuegod64 harbor]# ./install.sh --with-notary --with-clair

192.168.1.64xuegod64

[root@xuegod64 harbor]# cd /data/install/harbor [root@xuegod64 harbor]# docker-compose stop 或：docker-compose stop-f /data/install/docker-compose.yml

[root@xuegod64 harbor]# cd /data/install/harbor [root@xuegod64 harbor]# docker-compose start docker-compose start

[root@xuegod63 ~]# vim /etc/docker/daemon.json{ "registry-mirrors":["https://rsbud4vc.mirror.aliyuncs.com","https://registry.docker-cn.com","https://docker.mirrors.ustc.edu.cn","https://dockerhub.azk8s.cn","http://hub-mirror.c.163.com","http://qtid6917.mirror.aliyuncs.com","https://rncxm540.mirror.aliyuncs.com","https://e9yneuy4.mirror.aliyuncs.com"], "insecure-registries": ["192.168.1.64"] }

[root@xuegod63 ~]# systemctl daemon-reload && systemctl restart docker

[root@xuegod63 ~]# systemctl status docker

Active: active (running) since Fri … ago

"insecure-registries":["192.168.1.64"],

[root@xuegod63]# docker login 192.168.1.64Username：admin Password:Harbor12345

Login Succeeded

[root@xuegod63 ~]# docker load -i tomcat.tar.gz

[root@xuegod63 ~]# docker tag tomcat:latest192.168.1.64/test/tomcat:v1

[root@xuegod63 ~]# docker push 192.168.1.64/test/tomcat:v1

[root@xuegod63 ~]# docker rmi -f 192.168.1.64/test/tomcat:v1

[root@xuegod63 ~]#docker pull 192.168.1.64/test/tomcat:v1

[root@xuegod63]# mkdir -p /etc/docker/certs.d/xuegod64

[root@xuegod64 ~]# cd /data/ssl [root@xuegod64 ~]# scp ca.pem xuegod63:/etc/docker/certs.d/xuegod64/

[root@xuegod63]# mv/etc/docker/certs.d/xuegod64 [root@xuegod64 ~]# mv ca.pem ca.crt

[root@xuegod63 ~]# vim /etc/docker/daemon.json{ "registry-mirrors":["https://rsbud4vc.mirror.aliyuncs.com","https://registry.docker-cn.com","https://docker.mirrors.ustc.edu.cn","https://dockerhub.azk8s.cn","http://hub-mirror.c.163.com","http://qtid6917.mirror.aliyuncs.com","https://rncxm540.mirror.aliyuncs.com","https://e9yneuy4.mirror.aliyuncs.com"], }

[root@xuegod63]# systemctl restart docker [root@xuegod63]# docker login https://xuegod64Username：admin Password:Harbor12345

[root@xuegod63 ~]# docker login --username=lucky6a6aregistry.cn-hangzhou.aliyuncs.com

docker load-i tomcat.tar.gz

[root@xuegod63 ~]# docker tag tomcat registry.cn-hangzhou.aliyuncs.com/testxuegod1/test:v1

[root@xuegod63 ~]# docker push registry.cn-hangzhou.aliyuncs.com/testxuegod1/test:v1

[root@xuegod64 ~]# docker login --username=lucky6a6aregistry.cn-hangzhou.aliyuncs.com

[root@xuegod64 ~]# docker pull registry.cn-hangzhou.aliyuncs.com/testxuegod1/test:v1 [root@xuegod64 ~]# docker images

https://cr.console.aliyun.com/cn-hangzhou/instances/mirrors

想要获取原文当和学习视频的
添加好友回复“docker”即可

文章图片

推荐阅读

• 

  冬天去三亚好玩吗 三亚冬天去哪里旅游便宜又好玩
• 

  管理模式
• 

  股票的当前价格，隆平高科股票
• 

  肺癌|患上肺癌，什么时候会感觉到疼痛？哪些部位较为明显？
• 

  南极又出现西瓜雪是怎么回事 南极出现西瓜雪意味着什么
• 

  c语言如何表示三角函数 c语言中三角函数怎么表示出来
• 

  林内壁挂炉采暖温度显示Lo原因介绍！
• 

  吸脂后多久消肿
• 

  行政机关中止执行条件是怎么规定的
• 

  给朋友圣诞节祝福语简短
• 

  sqlserver添加权限设置，sql server添加用户名和密码
• 

  嘉兴三星冰箱售后电话,嘉兴三星冰箱售后电话地址
• 

  《情了辞》
• 

  虚拟键安卓版,导航键功能介绍一文看懂
• 

  月饼是越到中秋节越贵吗
• 

  刑法放纵制售伪劣商品犯罪行为罪司法规定重要内容有哪些
• 

  成长笔记|成长笔记 | 最爱你的人让你没心没肺，你最爱的人让你撕心裂肺
• 

  豪猪和刺猬有什么区别 有多少人知道
• 

  云顶之弈8天神天使阵容推荐 云顶之弈手游11.7天神天使运营搭配
• 

  庆东锅炉代码13出现这种故障的3种解决步骤？

• 基于微信小程序带后端ssm接口小区物业管理平台设计
• CET4听力微技能一
• 微习惯复盘
• 社保代缴公司服务费包含哪些
• 员工的微信朋友圈是公司的宣传阵地吗（）
• 私有化轻量级持续集成部署方案--03-部署web服务（下）
• FBI怎么和恐怖分子谈判
• 探索免费开源服务器tomcat的魅力
• 微雨中的东湖
• 小醉微记|小醉微记|心不安处皆动荡