源码网商城,靠谱的源码在线交易网站 我的订单 购物车 帮助

源码网商城

Centos 7中Docker私有仓库的搭建方法

  • 时间:2021-03-05 10:53 编辑: 来源: 阅读:
  • 扫一扫,手机访问
摘要:Centos 7中Docker私有仓库的搭建方法
系统配置: [code]CentOS 7 [/code]内核[code] 3.10.0-229.20.1.el7.x86_64 [/code], [code]Docker version 1.8.2[/code] [b]运行 docker registry[/b] 执行下列命令:
[url=https://192.168.100.9:5000/v1/_ping]https://192.168.100.9:5000/v1/_ping[/url]: tls: oversized record received with length 20527/.  If this private registry supports only HTTP or HTTPS with an unknown CA certificate,please add  `--insecure-registry 192.168.100.9:5000` to the daemon's arguments. In the case of HTTPS, if you have access to the registry's CA certificate, no need for the flag; simply place the CA certificate at /etc/docker/certs.d/192.168.100.9:5000/ca.crt
最简单的解决方法是修改[code] /etc/sysconfig/docker [/code]文件添加 [code]INSECURE_REGISTRY='--insecure-registry 192.168.100.9:5000' [/code], Ubuntu 14.04 的配置文件在 [code]/etc/default/docker [/code]在该文件里添加 [code]DOCKER_OPTS="--insecure-registry 192.168.100.9:5000" [/code],添加过之后重启 docker ,重新运行 docker registry 即可生效。这样做的缺点是你的私有仓库不安全,其次,其他要下载或者上传镜像的机器都要修改相应的配置文件。 安全的做法是去认证机构购买签名证书,在此我们使用自认证的方式。 [b]自签名认证[/b] 首先执行:
[url=https://192.168.100.9:5000/v0/]https://192.168.100.9:5000/v0/[/url] v2 ping attempt failed with error: Get [url=https://192.168.100.9:5000/v2/]https://192.168.100.9:5000/v2/[/url]: x509: cannot validate certificate for 192.168.100.9 because it doesn't contain any IP SANs v1 ping attempt failed with error: Get [url=https://192.168.100.9:5000/v1/_ping]https://192.168.100.9:5000/v1/_ping[/url]: x509: cannot validate certificate for 192.168.100.9 because it doesn't contain any IP SANs
解决方法:修改 /etc/pki/tls/openssl.cnf 配置,在该文件中找到 [ v3_ca ] ,在它下面添加如下内容:
[url=https://192.168.100.9:5000/v0/]https://192.168.100.9:5000/v0/[/url] v2 ping attempt failed with error: Get [url=https://192.168.100.9:5000/v2/]https://192.168.100.9:5000/v2/[/url]: x509: certificate signed by unknown authority  v1 ping attempt failed with error: Get [url=https://192.168.100.9:5000/v1/_ping]https://192.168.100.9:5000/v1/_ping[/url]: x509: certificate signed by unknown authority
仔细分析错误信息,发现是没有证书,将在 192.168.100.9 上生成的证书拷贝到相应的目录下 [code]/etc/docker/certs.d/192.168.100.9:5000/ca.crt [/code],拷贝之后重启 docker ,再次执行:
[url=https://github.com/docker/distribution/blob/master/docs/configuration.md]Registry Configuration Reference[/url]。 以上就是本文的全部内容,希望对大家的学习有所帮助,也希望大家多多支持编程素材网。
  • 全部评论(0)
联系客服
客服电话:
400-000-3129
微信版

扫一扫进微信版
返回顶部