Docker构建私有registry

## 9.1  启动registry

docker run -d -p 5000:5000 --restart=always --name registry -v /opt/registry:/var/lib/registry registry

## 9.2  修改配置文件

{
“registry-mirrors”: [“https://68rmyzg7.mirror.aliyuncs.com”],
“insecure-registries”: [“10.0.0.100:5000”]
}

[root@docker docker]# systemctl restart docker

## 9.3 制作本地镜像并push到

[root@docker ~]# docker tag nginx 10.0.0.100:5000/oldguo/nginx:v1
[root@docker ~]# docker images
[root@docker ~]# docker push 10.0.0.100:5000/oldguo/nginx:v1

## 9.4 异地进行pull镜像

[root@docker ~]# docker pull 10.0.0.100:5000/oldguo/nginx:v1

## 9.5 本地仓库加安全认证

生成密码:
yum install httpd-tools -y
mkdir /opt/registry-auth/ -p
htpasswd -Bbn oldguo 123 > /opt/registry-auth/htpasswd

##  9.6 重新启动带有秘钥功能的registry容器

docker rm -f docker ps -aq
docker run -d -p 5000:5000 -v /opt/registry-auth/:/auth/ -v /opt/registry:/var/lib/registry --name register-auth -e “REGISTRY_AUTH=htpasswd” -e “REGISTRY_AUTH_HTPASSWD_REALM=Registry Realm” -e “REGISTRY_AUTH_HTPASSWD_PATH=/auth/htpasswd” registry

## 9.7 push镜像,需要进行login

[root@oldboy ~]# docker login 10.0.0.100:5000
Username: oldguo
Password:

## 10. 重启docker服务，容器全部退出的解决办法

方法一：docker run --restart=always

方法二：“live-restore”: true
docker server配置文件/etc/docker/daemon.json参考
{
…
…
“live-restore”: true
}