Nginx+Portus+Registry搭建Docker私有镜像仓库

# pwd
 /root/Portus/nginx/conf.dPortus反向代理配置文件
 # vi portus.conf
 server {
 listen 0.0.0.0:80;
 server_name portus.onlyeric.com;
location / {
proxy_set_header Host $host;
 proxy_set_header X-Forwarded-Proto $scheme;
 proxy_set_header X-Forwarded-Host $http_host;
 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 proxy_redirect off;
 proxy_pass http://web:3000/;
 proxy_http_version 1.1;
 proxy_set_header Upgrade $http_upgrade;
 proxy_set_header Connection "upgrade";
 proxy_read_timeout 900s;
 }
access_log /var/log/nginx/portus.access.log main;
 error_log /var/log/nginx/portus.error.log error;
 }
registry反向代理配置文件
 # vi registry.conf
 upstream onlyeric.reg {
 server registry:5000;
 }
map $upstream_http_docker_distribution_api_version $docker_distribution_api_version {
 'registry/2.0' '';
 default registry/2.0;
 }
server {
 listen 80;
 server_name onlyeric.reg;
 client_max_body_size 0;
 chunked_transfer_encoding on;
location /v2/ {
 if ($http_user_agent ~ "^(docker\/1\.(3|4|5(?!\.[0-9]-dev))|Go ).*$" ) {
 return 404;
 }
add_header 'Docker-Distribution-Api-Version' $docker_distribution_api_version always;
proxy_pass                          http://onlyeric.reg;
 proxy_set_header  Host              $http_host;
 proxy_set_header  X-Real-IP         $remote_addr;
 proxy_set_header  X-Forwarded-For   $proxy_add_x_forwarded_for;
 proxy_set_header  X-Forwarded-Proto $scheme;
 proxy_read_timeout                  900;
 }
 }

(配置文件中使用到的registry和web会在后续的compose文件中做link)

修改compose文件

# pwd
 /root/Portus/compose
# vi docker-compose.yml.template
 web:
 build: .
 command: puma -b tcp://0.0.0.0:3000 -w 3
 environment:
 - PORTUS_MACHINE_FQDN_VALUE=EXTERNAL_IP
 - PORTUS_DB_HOST=portus_db_1
 volumes:
 - .:/portus
 ports:
 - 3000:3000
 links:
 - db
 extra_hosts:
 - "onlyeric.reg:192.168.2.14"
 - "portus.onlyeric.com:192.168.2.14"
crono:
 image: portus_web
 entrypoint: bin/crono
 environment:
 - PORTUS_MACHINE_FQDN=EXTERNAL_IP
 - PORTUS_DB_HOST=portus_db_1
 volumes:
 - .:/portus
 links:
 - db
 extra_hosts:
 - "onlyeric.reg:192.168.2.14"
 - "portus.onlyeric.com:192.168.2.14"
db:
 image: library/mariadb:10.0.23
 environment:
 MYSQL_ROOT_PASSWORD: portus
 extra_hosts:
 - "onlyeric.reg:192.168.2.14"
 - "portus.onlyeric.com:192.168.2.14"
registry:
 image: library/registry:2.3.1
 volumes:
 - /registry:/registry_data
 - ./compose/registry/portus.crt:/etc/docker/registry/portus.crt:ro
 - ./compose/registry/config.yml:/etc/docker/registry/config.yml:ro
 ports:
 - 5000:5000
 - 5001:5001 # required to access debug service
 links:
 - web
 extra_hosts:
 - "onlyeric.reg:192.168.2.14"
 - "portus.onlyeric.com:192.168.2.14"
nginx:
 image: nginx:1.10.1
 links:
 - registry
 - web
 volumes:
 - ./nginx/conf.d:/etc/nginx/conf.d
 ports:
 - 80:80
 extra_hosts:
 - "onlyeric.reg:192.168.2.14"
 - "portus.onlyeric.com:192.168.2.14"

修改registry配置文件

# pwd
 /root/Portus/compose/registry# vi config.yml.template
 version: 0.1
 storage:
 filesystem:
 rootdirectory: /registry_data
 delete:
 enabled: true
 http:
 addr: 0.0.0.0:5000
 debug:
 addr: 0.0.0.0:5001
 auth:
 token:
 realm: http://EXTERNAL_IP:3000/v2/token
 service: EXTERNAL_IP
 issuer: EXTERNAL_IP
 rootcertbundle: /etc/docker/registry/portus.crt
 notifications:
 endpoints:
 - name: portus
 url: http://EXTERNAL_IP:3000/v2/webhooks/events
 timeout: 500ms
 threshold: 5
 backoff: 1s

运行compose-setup.sh自动部署脚本,-e参数后接Registry的Alias

# pwd
 /root/Portus# ./compose-setup.sh -e onlyeric.reg
 ###########
 # WARNING #
 ###########This deployment method is intended for testing/development purposes.
 To deploy Portus on production please take a look at: http://port.us.org/documentation.htmlThe setup will destroy the containers used by Portus, removing also their volumes.
 Are you sure to delete all the data? (Y/N) [Y] Y
.
 .
 .###################
 #     SUCCESS     #
 ###################
Make sure port 3000 and 5000 are open on host onlyeric.reg
Open http://onlyeric.reg:3000 with your browser and perform the following steps:
1. Create an admin account
 2. You will be redirected to a page where you have to register the registry. In this form:
 - Choose a custom name for the registry.
 - Enter onlyeric.reg:5000 as the hostname.
 - Do *not* check the "Use SSL" checkbox, since this setup is not using SSL.
Perform the following actions on the docker hosts that need to interact with your registry:
- Ensure the docker daemon is started with the '--insecure-registry onlyeric.reg:5000'
 - Perform the docker login.
To authenticate against your registry using the docker cli do:
$ docker login -u <portus username> -p <password> -e <email> onlyeric.reg:5000
To push an image to the private registry:
$ docker pull busybox
 $ docker tag busybox onlyeric.reg:5000/<username>busybox
 $ docker push onlyeric.reg:5000/<username>busybox

# docker login -u onlyeric -p zaq12wsx! onlyeric.reg
 Login Succeeded
 (登录成功)

# docker tag busybox:latest onlyeric.reg/onlyeric/busybox:latest
 (Tag测试所需镜像，REGISTRY_NAME/USERNAME/IMAGE_NAME/IMAGE_TAG)# docker push onlyeric.reg/onlyeric/busybox:latest
 The push refers to a repository [onlyeric.reg/onlyeric/busybox]
 5f70bf18a086: Pushed
 8ac8bfaff55a: Pushed
 latest: digest: sha256:507bc9f5e7844d90c630f141a93b073473e24bd0b27daef574ffa93f97d01181 size: 733
 (镜像上传成功)

# docker rmi onlyeric.reg/onlyeric/busybox:latest
Untagged: onlyeric.reg/onlyeric/busybox:latest
(删除原有镜像)# docker pull onlyeric.reg/onlyeric/busybox:latest
latest: Pulling from onlyeric/busybox
Digest: sha256:507bc9f5e7844d90c630f141a93b073473e24bd0b27daef574ffa93f97d01181
Status: Downloaded newer image for onlyeric.reg/onlyeric/busybox:latest
(镜像下载成功)

# docker login -u test -p zaq12wsx! onlyeric.reg
Login Succeeded
(登陆成功)# docker pull onlyeric.reg/onlyeric/busybox:latest
latest: Pulling from onlyeric/busybox
8ddc19f16526: Pull complete
a3ed95caeb02: Pull complete
Digest: sha256:507bc9f5e7844d90c630f141a93b073473e24bd0b27daef574ffa93f97d01181
Status: Downloaded newer image for onlyeric.reg/onlyeric/busybox:latest# docker images|grep busybox
onlyeric.reg/onlyeric/busybox   latest              332de81782ef        3 weeks ago         1.093 MB
(下载镜像成功)