Eigenes repo: Unterschied zwischen den Versionen

Aus Xinux Wiki
Zur Navigation springen Zur Suche springen
 
(14 dazwischenliegende Versionen desselben Benutzers werden nicht angezeigt)
Zeile 1: Zeile 1:
=unfertig=
+
=vorbereitung=
 
*[[ubuntu paket von docker installieren]]  
 
*[[ubuntu paket von docker installieren]]  
 +
=nginx installieren=
 +
* # apt-get install nginx git apache2-utils
 +
* # git clone https://github.com/docker/docker-registry
 +
* # cp docker-registry/contrib/nginx/nginx_1-3-9.conf /etc/nginx/conf.d/
 +
* # cp docker-registry/contrib/nginx/docker-registry.conf /etc/nginx/
  
=auf den clients=
+
=nginx user anlegen=
REPOSITORY="tic:5000"
+
* # touch /etc/nginx/docker-registry.htpasswd
*echo DOCKER_OPTS="\"\$DOCKER_OPTS --insecure-registry $REPOSITORY\"">> /etc/default/docker
+
* # htpasswd -b /etc/nginx/docker-registry.htpasswd USERNAME-X PASSWORD-X
*service docker restart
+
* # htpasswd -b /etc/nginx/docker-registry.htpasswd USERNAME-Y PASSWORD-Y
 +
=zertifkate für rechner besorgen=
 +
* # cat ca.pem >> /etc/ssl/certs/ca-certificates.crt
 +
* # cp server-cert.pem /etc/ssl/certs/docker-registry  
 +
* # cp server-key.pem /etc/ssl/private/docker-registry
 +
* # sed -ie "s/my.docker.registry.com/yourhost.yourdomain.com/" /etc/nginx/conf.d/nginx_1-3-9.conf
 +
* # service nginx restart
 +
=docker registry starten=
 +
* # docker run -d --name my-registry -e  GUNICORN_OPTS=[--preload] -e STORAGE_PATH=/registry -p 127.0.0.1:5000:5000 -v  /registry:/registry registry
 +
GUNICORN_OPTS=[--preload] nur beim ersten start nötig
  
*docker run -d -e GUNICORN_OPTS=[--preload] -p 5000:5000 registry
+
=der login=
 +
* # docker login https://yourhost.yourdomain.com
 +
=image tagen=
 +
* # docker tag own-image kara.tuxmen.de/own-image
 +
=image pushen=
 +
* # docker push yourhost.yourdomain.com/own-image
  
 +
=links=
 
*http://java.dzone.com/articles/create-your-own-private-docker
 
*http://java.dzone.com/articles/create-your-own-private-docker
 
*http://blog.docker.com/2013/07/how-to-use-your-own-registry/
 
*http://blog.docker.com/2013/07/how-to-use-your-own-registry/
 +
*http://stackoverflow.com/questions/24990784/docker-what-is-the-simplest-way-to-secure-a-private-registry
 +
*https://medium.com/@deeeet/building-private-docker-registry-with-basic-authentication-with-self-signed-certificate-using-it-e6329085e612

Aktuelle Version vom 6. März 2015, 12:02 Uhr

vorbereitung

nginx installieren

  • # apt-get install nginx git apache2-utils
  • # git clone https://github.com/docker/docker-registry
  • # cp docker-registry/contrib/nginx/nginx_1-3-9.conf /etc/nginx/conf.d/
  • # cp docker-registry/contrib/nginx/docker-registry.conf /etc/nginx/

nginx user anlegen

  • # touch /etc/nginx/docker-registry.htpasswd
  • # htpasswd -b /etc/nginx/docker-registry.htpasswd USERNAME-X PASSWORD-X
  • # htpasswd -b /etc/nginx/docker-registry.htpasswd USERNAME-Y PASSWORD-Y

zertifkate für rechner besorgen

  • # cat ca.pem >> /etc/ssl/certs/ca-certificates.crt
  • # cp server-cert.pem /etc/ssl/certs/docker-registry
  • # cp server-key.pem /etc/ssl/private/docker-registry
  • # sed -ie "s/my.docker.registry.com/yourhost.yourdomain.com/" /etc/nginx/conf.d/nginx_1-3-9.conf
  • # service nginx restart

docker registry starten

  • # docker run -d --name my-registry -e GUNICORN_OPTS=[--preload] -e STORAGE_PATH=/registry -p 127.0.0.1:5000:5000 -v /registry:/registry registry
GUNICORN_OPTS=[--preload] nur beim ersten start nötig

der login

image tagen

  • # docker tag own-image kara.tuxmen.de/own-image

image pushen

  • # docker push yourhost.yourdomain.com/own-image

links