系统配置: [code]CentOS 7 [/code]内核[code] 3.10.0-229.20.1.el7.x86_64 [/code], [code]Docker version 1.8.2[/code]
[b]运行 docker registry[/b]
执行下列命令:
[url=https://192.168.100.9:5000/v1/_ping]https://192.168.100.9:5000/v1/_ping[/url]: tls: oversized record received with length 20527/. If this private registry supports only HTTP or HTTPS with an unknown CA certificate,please add `--insecure-registry 192.168.100.9:5000` to the daemon's arguments. In the case of HTTPS, if you have access to the registry's CA certificate, no need for the flag; simply place the CA certificate at /etc/docker/certs.d/192.168.100.9:5000/ca.crt
最简单的解决方法是修改[code] /etc/sysconfig/docker [/code]文件添加 [code]INSECURE_REGISTRY='--insecure-registry 192.168.100.9:5000' [/code], Ubuntu 14.04 的配置文件在 [code]/etc/default/docker [/code]在该文件里添加 [code]DOCKER_OPTS="--insecure-registry 192.168.100.9:5000" [/code],添加过之后重启 docker ,重新运行 docker registry 即可生效。这样做的缺点是你的私有仓库不安全,其次,其他要下载或者上传镜像的机器都要修改相应的配置文件。
安全的做法是去认证机构购买签名证书,在此我们使用自认证的方式。
[b]自签名认证[/b]
首先执行:
[url=https://192.168.100.9:5000/v0/]https://192.168.100.9:5000/v0/[/url] v2 ping attempt failed with error: Get [url=https://192.168.100.9:5000/v2/]https://192.168.100.9:5000/v2/[/url]: x509: cannot validate certificate for 192.168.100.9 because it doesn't contain any IP SANs v1 ping attempt failed with error: Get [url=https://192.168.100.9:5000/v1/_ping]https://192.168.100.9:5000/v1/_ping[/url]: x509: cannot validate certificate for 192.168.100.9 because it doesn't contain any IP SANs
解决方法:修改 /etc/pki/tls/openssl.cnf 配置,在该文件中找到 [ v3_ca ] ,在它下面添加如下内容:
[url=https://192.168.100.9:5000/v0/]https://192.168.100.9:5000/v0/[/url] v2 ping attempt failed with error: Get [url=https://192.168.100.9:5000/v2/]https://192.168.100.9:5000/v2/[/url]: x509: certificate signed by unknown authority v1 ping attempt failed with error: Get [url=https://192.168.100.9:5000/v1/_ping]https://192.168.100.9:5000/v1/_ping[/url]: x509: certificate signed by unknown authority
仔细分析错误信息,发现是没有证书,将在 192.168.100.9 上生成的证书拷贝到相应的目录下 [code]/etc/docker/certs.d/192.168.100.9:5000/ca.crt [/code],拷贝之后重启 docker ,再次执行:
[url=https://github.com/docker/distribution/blob/master/docs/configuration.md]Registry Configuration Reference[/url]。
以上就是本文的全部内容,希望对大家的学习有所帮助,也希望大家多多支持编程素材网。