一、docker仓库说明
Docker registries 可以上传和下载image，有共有和私有两种。共有就是Docker Hub，私有就是自建一个仓库使用。
二、docker hub使用
2.1.注册用户
注册地址:https://hub.docker.com
2.2.登陆上传镜像
2.2.1.查看镜像
# docker images REPOSITORY TAG IMAGE ID CREATED SIZE nginx-centos latest d6f680e9e2f5 3 hours ago 442MB cent-ckl-http latest d3ec54e41d03 2 days ago 443MB centos-ckl-ng latest 248da05fb49e 2 days ago 333MB centos-vim latest 82fd472e3387 2 days ago 327MB cent-vim latest 4659d1ec001d 2 days ago 225MB centos latest 1e1148e4cc2c 11 days ago 202MB nginx latest 568c4670fa80 2 weeks ago 109MB ubuntu latest 93fd78260bd1 3 weeks ago 86.2MB busybox latest 59788edf1f3e 2 months ago 1.15MB
2.2.2.上传之前自定义的镜像
命令补全：yum install bash-completion
登陆docker hub：
# docker login Login with your Docker ID to push and pull images from Docker Hub. If you don't have a Docker ID, head over to https://hub.docker.com to create one. Username: ckl Password: WARNING! Your password will be stored unencrypted in /root/.docker/config.json. Configure a credential helper to remove this warning. See https://docs.docker.com/engine/reference/commandline/login/#credentials-store Login Succeeded
为镜像打tag，为了区分不同的用户镜像，docker hub使用 '用户名/镜像名' 的格式，否则上传失败：
# docker push nginx-centos The push refers to repository [docker.io/library/nginx-centos] 910b14919137: Preparing 64f9c904f716: Preparing e7ae32451785: Preparing 25a6d58a35a2: Preparing 0d57e2a37c8a: Preparing 071d8bd76517: Waiting denied: requested access to the resource is denied
打镜像tag：
docker tag nginx-centos ckl893/nginx-centos
上传镜像：
[root@localhost ~]# docker push ckl893/nginx-centos The push refers to repository [docker.io/ckl893/nginx-centos] 910b14919137: Pushed 64f9c904f716: Pushed e7ae32451785: Pushed 25a6d58a35a2: Pushed 0d57e2a37c8a: Pushed 071d8bd76517: Pushed latest: digest: sha256:52ae885b133c966a059bcb9cf8031dd264c75c0ad5f4d08a8599aad6dcb85952 size: 1577
2.2.3.删除本地镜像，下载上传的镜像
删除本地镜像：
docker rmi d6f680e9e2f5
# docker images REPOSITORY TAG IMAGE ID CREATED SIZE cent-ckl-http latest d3ec54e41d03 2 days ago 443MB centos-ckl-ng latest 248da05fb49e 2 days ago 333MB centos-vim latest 82fd472e3387 2 days ago 327MB cent-vim latest 4659d1ec001d 3 days ago 225MB centos latest 1e1148e4cc2c 11 days ago 202MB nginx latest 568c4670fa80 2 weeks ago 109MB ubuntu latest 93fd78260bd1 3 weeks ago 86.2MB busybox latest 59788edf1f3e 2 months ago 1.15MB
下载已经上传的镜像：
docker pull ckl893/nginx-centos Using default tag: latest latest: Pulling from ckl893/nginx-centos a02a4930cb5d: Already exists b4294eb07bed: Pull complete b81c82ea9ee0: Pull complete d505886c9b92: Pull complete 56a178b649f6: Pull complete 7653590c7334: Pull complete Digest: sha256:52ae885b133c966a059bcb9cf8031dd264c75c0ad5f4d08a8599aad6dcb85952 Status: Downloaded newer image for ckl893/nginx-centos:latest
# docker images REPOSITORY TAG IMAGE ID CREATED SIZE ckl893/nginx-centos latest d6f680e9e2f5 5 hours ago 442MB cent-ckl-http latest d3ec54e41d03 2 days ago 443MB centos-ckl-ng latest 248da05fb49e 2 days ago 333MB centos-vim latest 82fd472e3387 2 days ago 327MB cent-vim latest 4659d1ec001d 3 days ago 225MB centos latest 1e1148e4cc2c 11 days ago 202MB nginx latest 568c4670fa80 2 weeks ago 109MB ubuntu latest 93fd78260bd1 3 weeks ago 86.2MB busybox latest 59788edf1f3e 2 months ago 1.15MB
三、私有仓库(本地仓库)
3.1.下载registry镜像
# docker search registry NAME DESCRIPTION STARS OFFICIAL AUTOMATED registry The Docker Registry 2.0 implementation for s… 2363 [OK] konradkleine/docker-registry-frontend Browse and modify your Docker registry in a … 211 [OK] hyper/docker-registry-web Web UI, authentication service and event rec… 156 [OK] atcol/docker-registry-ui A web UI for easy private/local Docker Regis… 111 [OK] distribution/registry WARNING: NOT the registry official image!!! … 56 [OK] ....
# docker pull registry Using default tag: latest latest: Pulling from library/registry d6a5679aa3cf: Pull complete ad0eac849f8f: Pull complete 2261ba058a15: Pull complete f296fda86f10: Pull complete bcd4a541795b: Pull complete Digest: sha256:5a156ff125e5a12ac7fdec2b90b7e2ae5120fa249cf62248337b6d04abc574c8 Status: Downloaded newer image for registry:latest
3.2.搭建本地仓库
3.2.1.搭建仓库
# docker run -d -v /home/ckl/registry:/var/lib/registry -p 5000:5000 --restart=always --privileged=true --name ckl-registry registry:latest -v /home/ckl/registry:/var/lib/registry 默认情况下，会将仓库存放于容器内的/var/lib/registry目录下，指定本地目录挂载到容器。 -p 5000:5000 端口映射 --restart=always1 在容器退出时总是重启容器,主要应用在生产环境 --privileged=true 在CentOS7中的安全模块selinux把权限禁掉了，参数给容器加特权，不加上传镜像会报权限错误OSError: [Errno 13] Permission denied: ‘/tmp/registry/repositories/liibrary’)或者（Received unexpected HTTP status: 500 Internal Server Error）错误 --name ckl-registry 指定容器的名称 COMMAND_FAILED: '/sbin/iptables -t nat -A DOCKER -p tcp -d 0/0 --dport 8111 -j DNAT --to-destination 172.17.0.6:8111 ! -i docker0' failed: iptables: No chain/target/match by that name.
解决：
pkill docker iptables -t nat -F ifconfig docker0 down brctl delbr docker0 service docker restart
再次运行成功：
# docker ps CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 37803352e3fa registry:latest "/entrypoint.sh /etc…" 4 seconds ago Up 2 seconds 0.0.0.0:5000->5000/tcp ckl-registry
3.2.2.为想上传的镜像打tag：
# docker tag cent-ckl-http 192.168.2.120:5000/cent-ckl-http #一定要带端口，不然，不知道传哪里
3.2.3.上传镜像到本地仓库：
# docker push 192.168.2.120:5000/cent-ckl-http The push refers to repository [192.168.2.120:5000/cent-ckl-http] Get https://192.168.2.120:5000/v2/: dial tcp 192.168.2.120::5000: connect: connection refused
解决：
# vim /usr/lib/systemd/system/docker.service ExecStart=/usr/bin/dockerd --insecure-registry 192.168.2.120:5000 -H unix://
重启docker：
# systemctl daemon-reload # systemctl restart docker.service
再次上传成功：
# docker push 192.168.2.120:5000/cent-ckl-http The push refers to repository [192.168.2.120:5000/cent-ckl-http] 99bfa91f28fa: Pushed dd54c57d2f82: Pushed 56a34fc853e9: Pushed 071d8bd76517: Pushed latest: digest: sha256:70cf9a97343265e191054268245fd77b18c5da7a8fe66168702c96711ba4ef0e size: 1163
3.2.4.删除本地镜像测试
# docker images REPOSITORY TAG IMAGE ID CREATED SIZE ckl893/nginx-centos latest d6f680e9e2f5 6 hours ago 442MB 192.168.2.120:5000/cent-ckl-http latest d3ec54e41d03 2 days ago 443MB cent-ckl-http latest d3ec54e41d03 2 days ago 443MB centos-ckl-ng latest 248da05fb49e 3 days ago 333MB centos-vim latest 82fd472e3387 3 days ago 327MB cent-vim latest 4659d1ec001d 3 days ago 225MB centos latest 1e1148e4cc2c 11 days ago 202MB nginx latest 568c4670fa80 2 weeks ago 109MB ubuntu latest 93fd78260bd1 3 weeks ago 86.2MB busybox latest 59788edf1f3e 2 months ago 1.15MB registry latest 2e2f252f3c88 3 months ago 33.3MB
删除本地镜像：
# docker rmi 192.168.2.120:5000/cent-ckl-http Untagged: 192.168.2.120:5000/cent-ckl-http:latest Untagged: 192.168.2.120:5000/cent-ckl-http@sha256:70cf9a97343265e191054268245fd77b18c5da7a8fe66168702c96711ba4ef0e
# docker images REPOSITORY TAG IMAGE ID CREATED SIZE ckl893/nginx-centos latest d6f680e9e2f5 6 hours ago 442MB cent-ckl-http latest d3ec54e41d03 2 days ago 443MB centos-ckl-ng latest 248da05fb49e 3 days ago 333MB centos-vim latest 82fd472e3387 3 days ago 327MB cent-vim latest 4659d1ec001d 3 days ago 225MB centos latest 1e1148e4cc2c 11 days ago 202MB nginx latest 568c4670fa80 2 weeks ago 109MB ubuntu latest 93fd78260bd1 3 weeks ago 86.2MB busybox latest 59788edf1f3e 2 months ago 1.15MB registry latest 2e2f252f3c88 3 months ago 33.3MB
从本地仓库拉取镜像：
# docker pull 192.168.2.120:5000/cent-ckl-http Using default tag: latest latest: Pulling from cent-ckl-http Digest: sha256:70cf9a97343265e191054268245fd77b18c5da7a8fe66168702c96711ba4ef0e Status: Downloaded newer image for 192.168.2.120:5000/cent-ckl-http:latest
# docker images REPOSITORY TAG IMAGE ID CREATED SIZE ckl893/nginx-centos latest d6f680e9e2f5 6 hours ago 442MB 192.168.2.120:5000/cent-ckl-http latest d3ec54e41d03 2 days ago 443MB cent-ckl-http latest d3ec54e41d03 2 days ago 443MB centos-ckl-ng latest 248da05fb49e 3 days ago 333MB centos-vim latest 82fd472e3387 3 days ago 327MB cent-vim latest 4659d1ec001d 3 days ago 225MB centos latest 1e1148e4cc2c 11 days ago 202MB nginx latest 568c4670fa80 2 weeks ago 109MB ubuntu latest 93fd78260bd1 3 weeks ago 86.2MB busybox latest 59788edf1f3e 2 months ago 1.15MB registry latest 2e2f252f3c88 3 months ago 33.3MB
3.2.4.非本机上传镜像到私有registry
为镜像打tag：
# docker tag mysql:5.6 192.168.2.120:5000/mysql:5.6
上传镜像：
# docker push 192.168.2.120:5000/mysql:5.6 The push refers to a repository [192.168.2.120:5000/mysql] Get https://192.168.2.120:5000/v1/_ping: http: server gave HTTP response to HTTPS client
解决：
# vim /etc/docker/key.json
{ "insecure-registries":["192.168.2.120:5000"] }
重启docker：
# systemctl restart docker.service
再次上传成功：
# docker push 192.168.2.120:5000/mysql:5.6 The push refers to a repository [192.168.2.120:5000/mysql] 119c93d6ccc5: Pushed 1dadbfda87dc: Pushed 89bb4ce949c4: Pushed 46ecad004d82: Pushed dae415ebeca7: Pushed 3c392b9bb7a4: Pushed 2566141f200b: Pushed 0ad177796f33: Pushed 0f1205f1cd43: Pushed a588c986cf97: Pushed ef68f6734aa4: Pushed 5.6: digest: sha256:91651561a6bc037926b3ff5b1eed80d3c6c2a53064414b8e11a8d14317d5de56 size: 2621