Distribution

约 290 字小于 1 分钟

DockerRegistry

2025-10-15

安装部署

docker-compose.yaml

services:

  registry:
    image: docker.io/registry:3
    container_name: registry
    hostname: registry
    restart: unless-stopped
    ports:
      - "15000:5000"
      - "15001:5001"
    volumes:
      - /path/to/registry/config.yml:/etc/docker/registry/config.yml:ro
      - /path/to/registry/data:/var/lib/registry
    environment:
      OTEL_TRACES_EXPORTER: none

  registry-ui:
    image: docker.io/quiq/registry-ui
    container_name: registry-ui
    hostname: registry-ui
    restart: unless-stopped
    ports:
      - "18000:8000"
    environment:
      REGISTRY_HOSTNAME: registry.example.com:15000
      REGISTRY_INSECURE: true

config.yml

version: 0.1

log:
  accesslog:
    disabled: true
  level: info
  formatter: text
  fields:
    service: registry
    environment: prod

storage:
  filesystem:
    rootdirectory: /var/lib/registry
    maxthreads: 100
  tag:
    concurrencylimit: 8
  delete:
    enabled: false
  redirect:
    disable: false
  cache:
    blobdescriptor: redis
    blobdescriptorsize: 10000
  maintenance:
    uploadpurging:
      enabled: true
      age: 168h
      interval: 24h
      dryrun: false
    readonly:
      enabled: false

http:
  addr: 0.0.0.0:5000
  debug:
    addr: 0.0.0.0:5001
    prometheus:
      enabled: true
      path: /metrics
  headers:
    X-Content-Type-Options: [nosniff]

redis:
  addrs: [192.168.1.x:6379]
  password: pass
  db: 0
  dialtimeout: 10ms
  readtimeout: 10ms
  writetimeout: 10ms
  maxidleconns: 16
  poolsize: 64
  connmaxidletime: 300s

proxy:
  remoteurl: https://docker.example.com
  ttl: 168h

部署应用

docker compose up -d

使用说明

在客户端上配置

{
  "insecure-registries": [
    "http://registry.example.com:15000"
  ]
}

vim /etc/docker/daemon.json
systemctl restart docker

在客户端上测试

# 拉取镜像用于测试
docker pull hello-world

# 将测试镜像打上标签
docker tag hello-world localhost:5000/my-hello-world
# 推送已经打标签的测试镜像到仓库
docker push localhost:5000/my-hello-world

# 删除本地镜像
docker image remove hello-world
docker image remove localhost:5000/my-hello-world

# 验证从仓库拉取镜像
docker pull localhost:5000/my-hello-world