用DockerFile 构建私有的registry

1.安装openssl

yum install openssl -y

2.修改  /etc/hosts（使用域名）

192.168.72.136 registry.xx.com

3.mkdir -p ～/registry/certs.d/ && cd ~/registry/certs.d/

4.生成key

openssl genrsa -out registry.xx.com.key 2048

openssl req -newkey rsa:4096 -nodes -sha256 -keyout registry.xx.com.key -x509 -days 365 -out registry.xx.com.crt

6.创建RegistryFile

Dockerfile文件内容为：

FROM registry:2.6.1MAINTAINER xiaolong@xx.comENV REGISTRY_HTTP_TLS_CERTIFICATE /opt/registry/certs/registry.xx.com.crtENV REGISTRY_HTTP_TLS_KEY /opt/registry/certs/registry.xx.com.keyRUN set -ex \&& mkdir -p /opt/registry/certsCOPY registry.xx.com.crt /opt/registry/certsCOPY registry.xx.com.key /opt/registry/certsVOLUME ["/var/lib/registry"]EXPOSE 5000

mkdir -p /etc/docker/certs.d/registry.xx.com/

8.把生成的密钥文件拷贝到新增目录

cp registry.xx.com.crt /etc/docker/certs.d/registry.xx.com/

9.构建镜像

docker build -t registry2 -f ~/registry/certs.d/RegistryFile .

10.启动容器

docker run -d -p 443:5000 --restart=always --name registry2 -v /opt/registry/:/var/lib/registry registry2

11.针对镜像打tag标签

docker tag centos registry.xx.com/centos

12.上传docker镜像

docker push registry.xx.com/centos

13.下载docker镜像

docker pull registry.xx.com/centos