Docker Registry安装 - 容器相关

##Docker Registry安装

>###方式一：容器运行

docker run -itd -p 5000:5000 --restart=always --name registry -v /home/user/registry-conf/config.yaml:/etc/docker/registry/config.yaml -v /opt/data/registry:/var/lib/registry registry
	
	#注意：
	#/etc/docker/registry/config.yaml为容器内默认的配置文件
	#/var/lib/registry为容器内默认的存储位置

>###测试：
	curl -i http://192.168.31.192:5000/v2/
	HTTP/1.1 200 OK
	
---
>###开启SSL
https://www.cnblogs.com/jpfss/p/10948256.html

#1.制作证书
	openssl req -newkey rsa:2048 -nodes -sha256 -keyout certs/ca.key -x509 -days 365 -out certs/domain.crt
	
	#2.启动带证书的Registry
	docker run -d -p 5000:5000 --restart=always --name registry \
	  -v `pwd`/data:/var/lib/registry \
	  -v `pwd`/certs:/certs \
	  -e REGISTRY_HTTP_TLS_CERTIFICATE=/certs/domain.crt \
	  -e REGISTRY_HTTP_TLS_KEY=/certs/ca.key \
	  registry
	
	#3.修改客户端host文件
	由于证书的CN是mydockerhub.com，我们需要修改一下/etc/hosts文件:
	vim /etc/hosts
	10.10.105.71 mydockerhub.com
	
	#4.客户端创建证书目录
	mkdir -p /etc/docker/certs.d/mydockerhub.com:5000
	cp certs/domain.crt /etc/docker/certs.d/mydockerhub.com:5000/
	cp certs/domain.key /etc/docker/certs.d/mydockerhub.com:5000/
	cp certs/domain.crt /etc/docker/certs.d/mydockerhub.com:5000/ca.crt		#改名
	mv domain.crt domain.cert		#改名
	systemctl restart docker
---