Docker搭建本地私有仓库

一 环境准备

docker 环境配置，参考docker官网

二 部署Registry

docker pull registry
// 启动容器
sudo docker run -d -p 15000:5000 -v /opt/registry:/var/lib/registry --restart=always --name registry registry

三 Nginx代理配置

upstream api_backend {
    ip_hash;
    server 127.0.0.1:15000;
}
server {
    listen       5000 ssl;
    server_name  api.z7zba.com;

    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
    ssl_prefer_server_ciphers On; 
    ssl_certificate /etc/letsencrypt/live/api.z7zba.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/api.z7zba.com/privkey.pem;
    ssl_session_cache shared:SSL:128m;
    add_header Strict-Transport-Security "max-age=31557600; includeSubDomains";
    ssl_stapling on; 
    ssl_stapling_verify on; 

    client_max_body_size 0; # disable any limits to avoid HTTP 413 for large image uploads
    chunked_transfer_encoding on; 
    add_header 'Docker-Distribution-Api-Version' 'registry/2.0' always; 

    location / { 
        auth_basic              "Restricted";
        auth_basic_user_file    /usr/local/nginx/conf/auth/htpasswd.txt;
        proxy_pass http://api_backend;   #来自jsp请求交给tomcat处理
        proxy_set_header  Host              $http_host;   # required for docker client's sake
        proxy_set_header  X-Real-IP         $remote_addr; # pass on real client's IP
        proxy_set_header  X-Forwarded-For   $proxy_add_x_forwarded_for;
        proxy_set_header  X-Forwarded-Proto $scheme;
        proxy_read_timeout                  900;
    }   

    location /_ping {
        auth_basic off;
        proxy_pass http://api_backend;
    }   

    location /v2/_ping {
        auth_basic off;
        proxy_pass http://api_backend;
    }   

    location /v2/_catalog {
        auth_basic off;
        #auth_basic              "Restricted";
        #auth_basic_user_file    /usr/local/nginx/conf/auth/htpasswd.txt;
        proxy_pass http://api_backend;
    }
}

四 配置帐号

htpasswd /usr/local/nginx/conf/auth/htpasswd.txt docker docker