解决http协议的问题：
方法一：解决HTTPS问题
安装nginx，配置HTTPS协议
方法二：修改docker的配置文件
vim /etc/default/docker增加
OPTIONS="--insecure-registry 192.168.10.249:5000"
准备配置环境：
| 主机名 | 主机IP | 服务 |
| docker-p_w_picpaths | 10.0.0.5 | docker 私有库库配置 |
| 10.0.0.6 | docker 客户端 |
[root@docker-p_w_picpaths ~]# cat /etc/redhat-release CentOS Linux release 7.2.1511 (Core) [root@docker-p_w_picpaths ~]# uname -r 3.10.0-327.el7.x86_64 [root@docker-p_w_picpaths ~]# uname -m x86_64 [root@docker-p_w_picpaths ~]# uname -a Linux docker-p_w_picpaths 3.10.0-327.el7.x86_64 #1 SMP Thu Nov 19 22:10:57 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux [root@docker-p_w_picpaths ~]#
开始配置（镜像库）
1、关闭防火墙和selinux
[root@docker-p_w_picpaths ~]# systemctl stop firewalld [root@docker-p_w_picpaths ~]# systemctl disable firewalld #永久 [root@docker-p_w_picpaths ~]# setenforce 0 [root@docker-p_w_picpaths ~]# getenforce Permissive [root@docker-p_w_picpaths ~]#
2、安装docker
yum install docker [root@docker-p_w_picpaths ~]# systemctl enable docker #加入开机自启动 [root@docker-p_w_picpaths ~]# systemctl start docker #开启服务
3、下载本地私有库registry
[root@docker-p_w_picpaths ~]# docker pull registry #默认下载最新版 [root@docker-p_w_picpaths ~]# docker p_w_picpaths #查看下载的镜像 REPOSITORY TAG IMAGE ID CREATED SIZE docker.io/registry latest 047218491f8c 10 days ago 33.17 MB [root@docker-p_w_picpaths ~]#
4、基于私有仓库镜像运行容器
[root@docker-p_w_picpaths ~]# docker run -d -p 5000:5000 -v /opt/data/registry:/tmp/registry docker.io/registry #默认仓库创建在/tmp/registry，用-v参数指定仓库存放位置 1e8b1a03013ee66034b40aee1820000a2ccf026a3b1e43606f3e4007b2a9d455 [root@docker-p_w_picpaths ~]# [root@docker-p_w_picpaths ~]# docker ps #查看运行容器 CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 1e8b1a03013e docker.io/registry "/entrypoint.sh /etc/" 35 seconds ago Up 32 seconds 0.0.0.0:5000->5000/tcp goofy_mcnulty [root@docker-p_w_picpaths ~]#
5、访问私有仓库
[root@docker-p_w_picpaths ~]# curl 127.0.0.1:5000/v2 <a href="/v2/">Moved Permanently</a>. [root@docker-p_w_picpaths ~]# #说明registry部署成功
6、为基础镜像打标签
[root@docker-p_w_picpaths ~]# docker search docker.io/fedora/ssh|grep docker.io/fedora/ssh docker.io docker.io/fedora/ssh 20 [OK] [root@docker-p_w_picpaths ~]# docker pull docker.io/fedora/ssh #下载镜像 [root@docker-p_w_picpaths ~]# docker p_w_picpaths REPOSITORY TAG IMAGE ID CREATED SIZE docker.io/registry latest 047218491f8c 10 days ago 33.17 MB docker.io/fedora/ssh latest ad6a3ff29626 4 weeks ago 396.7 MB [root@docker-p_w_picpaths ~]# docker tag docker.io/fedora/ssh 127.0.0.1:5000/ssh #打标签 [root@docker-p_w_picpaths ~]# docker p_w_picpaths REPOSITORY TAG IMAGE ID CREATED SIZE docker.io/registry latest 047218491f8c 10 days ago 33.17 MB 127.0.0.1:5000/ssh latest ad6a3ff29626 4 weeks ago 396.7 MB docker.io/fedora/ssh latest ad6a3ff29626 4 weeks ago 396.7 MB [root@docker-p_w_picpaths ~]# [root@docker-p_w_picpaths ~]# vim /etc/sysconfig/docker OPTIONS="--selinux-enabled --insecure-registry 10.0.0.5:5000" #定制私有仓库URL [root@docker-p_w_picpaths ~]# systemctl restart docker
7、提交镜像到本地私有库
[root@docker-p_w_picpaths ~]# docker start 1e8 #开启本地库 1e8 [root@docker-p_w_picpaths ~]# docker ps CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 1e8b1a03013e docker.io/registry "/entrypoint.sh /etc/" 4 hours ago Up 3 seconds 0.0.0.0:5000->5000/tcp goofy_mcnulty [root@docker-p_w_picpaths ~]# [root@docker-p_w_picpaths ~]# docker push 127.0.0.1:5000/ssh #上传打好标签的库 The push refers to a repository [127.0.0.1:5000/ssh] 482d621bda33: Pushed 510f15c27a8b: Pushed e4f86288aaf7: Pushed latest: digest: sha256:5ad5aec14bb7aa63fdcea1772db6ab5b5de99b0a023d234e61f5aa8c9435e8ff size: 948 [root@docker-p_w_picpaths ~]#
8、查看已经上传好的镜像
[root@docker-p_w_picpaths ~]# curl 10.0.0.5:5000/v2/_catalog
{"repositories":["ssh"]}
[root@docker-p_w_picpaths ~]#浏览器中查看已经上传的镜像
http://10.0.0.5:5000/v2/_catalog
9、测试库是否可用，在准备好环境的另一台测试机上面下载上传的镜像
[root@centos7 ~]# vim /etc/sysconfig/docker #加入私有仓库地址 OPTIONS="--selinux-enabled --insecure-registry 10.0.0.5:5000" [root@centos7 ~]# systemctl restart docker [root@centos7 ~]# docker pull 10.0.0.5:5000/ssh
可以看到已经可以下载镜像，证明私有仓库创建成功
[root@centos7 ~]# docker p_w_picpaths REPOSITORY TAG IMAGE ID CREATED SIZE 10.0.0.5:5000/ssh latest ad6a3ff29626 4 weeks ago 396.7 MB [root@centos7 ~]#
接下来通过自己的私有库运行一个centos7容器
1、从其他的数据库上save一个centos镜像推送到私有库服务器上
[root@docker-p_w_picpaths ~]# ls anaconda-ks.cfg centos.tar [root@docker-p_w_picpaths ~]# docker load < centos.tar #将镜像导入docker 34e7b85d83e4: Loading layer [==================================================>] 199.9 MB/199.9 MB Loaded p_w_picpath: docker.io/centos:latest ] 557.1 kB/199.9 MB [root@docker-p_w_picpaths ~]# docker p_w_picpaths REPOSITORY TAG IMAGE ID CREATED SIZE docker.io/registry latest 047218491f8c 10 days ago 33.17 MB 127.0.0.1:5000/ssh latest ad6a3ff29626 4 weeks ago 396.7 MB docker.io/fedora/ssh latest ad6a3ff29626 4 weeks ago 396.7 MB docker.io/centos latest 67591570dd29 12 weeks ago 191.8 MB [root@docker-p_w_picpaths ~]#
2、再次打上自己的标签
[root@docker-p_w_picpaths ~]# docker tag docker.io/centos:latest 10.0.0.5:5000/lcentos #为了区别前面的，我将centos做了其他标记 [root@docker-p_w_picpaths ~]# docker p_w_picpaths REPOSITORY TAG IMAGE ID CREATED SIZE docker.io/registry latest 047218491f8c 10 days ago 33.17 MB 127.0.0.1:5000/ssh latest ad6a3ff29626 4 weeks ago 396.7 MB docker.io/fedora/ssh latest ad6a3ff29626 4 weeks ago 396.7 MB docker.io/centos latest 67591570dd29 12 weeks ago 191.8 MB 10.0.0.5:5000/lcentos latest 67591570dd29 12 weeks ago 191.8 MB [root@docker-p_w_picpaths ~]#
3、上传标记好的镜像到自己的私有库
[root@docker-p_w_picpaths ~]# docker push 10.0.0.5:5000/lcentos
4、查看上传好的镜像
[root@docker-p_w_picpaths ~]# curl http://10.0.0.5:5000/v2/_catalog
{"repositories":["lcentos","ssh"]}
[root@docker-p_w_picpaths ~]#浏览器查看
5、再次到准备好环境的那台测试机上面pull
[root@centos7 ~]# docker pull 10.0.0.5:5000/lcentos [root@centos7 ~]# docker p_w_picpaths REPOSITORY TAG IMAGE ID CREATED SIZE 10.0.0.5:5000/ssh latest ad6a3ff29626 4 weeks ago 396.7 MB 10.0.0.5:5000/lcentos latest 67591570dd29 12 weeks ago 191.8 MB [root@centos7 ~]#
6、创建并运行一个容器
[root@centos7 ~]# docker run -d -it --privileged=false -p 80:80 --name abccentos 10.0.0.5:5000/lcentos /bin/bash 15b9f42b3d63846085664139bff0c041f614bc2b717787686d23785d98b37160 [root@centos7 ~]# docker ps -a CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 15b9f42b3d63 10.0.0.5:5000/lcentos "/bin/bash" 16 seconds ago Up 13 seconds 0.0.0.0:80->80/tcp abccentos [root@centos7 ~]#
7、进入容器查看，可以看到centos的版本等信息
[root@centos7 ~]# docker attach 15b9f42b3d63 [root@15b9f42b3d63 /]# cat /etc/redhat-release CentOS Linux release 7.3.1611 (Core) [root@15b9f42b3d63 /]# uname -r 3.10.0-327.el7.x86_64 [root@15b9f42b3d63 /]# uname -a Linux 15b9f42b3d63 3.10.0-327.el7.x86_64 #1 SMP Thu Nov 19 22:10:57 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux [root@15b9f42b3d63 /]#
8、还可以在此操作系统中安装部署nginx。
[root@15b9f42b3d63 yum.repos.d]# yum -y install wget #安装wget，方便安装epel源 [root@15b9f42b3d63 yum.repos.d]# mv CentOS-Base.repo CentOS-Base.repo.bak [root@15b9f42b3d63 yum.repos.d]# wget -O /etc/yum.repos.d/CentOS-Base.repo [root@15b9f42b3d63 yum.repos.d]# wget -O /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-7.repo [root@15b9f42b3d63 yum.repos.d]# yum clean all [root@15b9f42b3d63 yum.repos.d]# yum makecache [root@15b9f42b3d63 yum.repos.d]# yum -y install nginx [root@15b9f42b3d63 yum.repos.d]# rpm -qa|grep nginx nginx-filesystem-1.10.2-1.el7.noarch nginx-mod-http-xslt-filter-1.10.2-1.el7.x86_64 nginx-mod-mail-1.10.2-1.el7.x86_64 nginx-mod-stream-1.10.2-1.el7.x86_64 nginx-mod-http-perl-1.10.2-1.el7.x86_64 nginx-mod-http-geoip-1.10.2-1.el7.x86_64 nginx-mod-http-p_w_picpath-filter-1.10.2-1.el7.x86_64 nginx-1.10.2-1.el7.x86_64 nginx-all-modules-1.10.2-1.el7.noarch [root@15b9f42b3d63 yum.repos.d]#
9、查看服务
[root@15b9f42b3d63 yum.repos.d]# nginx #开启服务 [root@15b9f42b3d63 yum.repos.d]# ps -ef|grep nginx root 143 1 0 20:48 ? 00:00:00 nginx: master process nginx nginx 144 143 0 20:48 ? 00:00:00 nginx: worker process nginx 145 143 0 20:48 ? 00:00:00 nginx: worker process nginx 146 143 0 20:48 ? 00:00:00 nginx: worker process nginx 147 143 0 20:48 ? 00:00:00 nginx: worker process root 153 1 0 20:49 ? 00:00:00 grep --color=auto nginx
10、查看端口
[root@15b9f42b3d63 /]# netstat -lntup|grep nginx tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 20/nginx: master pr tcp6 0 0 :::80 :::* LISTEN 20/nginx: master pr [root@15b9f42b3d63 /]#
11、浏览器访问
以上就是整个创建私有镜像库的过程，欢迎一起交流学习。
