{"id":11160,"date":"2023-05-21T13:01:59","date_gmt":"2023-05-21T05:01:59","guid":{"rendered":"http:\/\/123.57.164.21\/?p=11160"},"modified":"2023-05-21T13:01:59","modified_gmt":"2023-05-21T05:01:59","slug":"docker-registry%e9%83%a8%e7%bd%b2%e9%95%9c%e5%83%8f%e7%a7%81%e6%9c%89%e4%bb%93%e5%ba%93%e5%8f%8a%e9%89%b4%e6%9d%83%e8%ae%a4%e8%af%81","status":"publish","type":"post","link":"https:\/\/92it.top\/?p=11160","title":{"rendered":"Docker Registry\u90e8\u7f72\u955c\u50cf\u79c1\u6709\u4ed3\u5e93\u53ca\u9274\u6743\u8ba4\u8bc1"},"content":{"rendered":"\n<p><strong>\u4e00\u3001Docker Registry\u662f\u4ec0\u4e48\uff1f<\/strong><\/p>\n\n\n\n<hr class=\"wp-block-separator\"\/>\n\n\n\n<p>Docker Registry \u662f\u4e00\u4e2a\u65e0\u72b6\u6001\u3001\u9ad8\u5ea6\u53ef\u6269\u5c55\u7684\u670d\u52a1\u5668\u7aef\u5e94\u7528\u7a0b\u5e8f\uff0c\u7528\u4e8e\u5b58\u50a8\u548c\u5206\u53d1 Docker\u955c\u50cf\u3002Docker Registry\u662f\u57fa\u4e8eApache \u8bb8\u53ef\u8bc1\u5f00\u6e90\u7684\uff0c\u5b83\u662f\u76ee\u524d\u5e94\u7528\u6700\u5e7f\u6cdb\u7684\u955c\u50cf\u4ed3\u5e93\u7ba1\u7406\u7a0b\u5e8f\uff0c\u6240\u6709\u7684\u6e90\u7801\u5728github\u4e0a\u5f00\u6e90\uff0c\u5982\u679c\u611f\u5174\u8da3\u7684\u8bdd\u53ef\u4ee5clone\u76f8\u5173\u7684\u4ee3\u7801\u8fdb\u884c\u6df1\u5c42\u6b21\u7684\u5b66\u4e60\u3002<\/p>\n\n\n\n<p>\u4e3a\u4ec0\u4e48\u9700\u8981\u4f7f\u7528Docker Registry\uff1f<\/p>\n\n\n\n<ol><li>\u9700\u8981\u5bf9\u955c\u50cf\u8fdb\u884c\u4e25\u683c\u7edf\u4e00\u7ba1\u7406\uff1b<\/li><li>\u9700\u8981\u62e5\u6709\u955c\u50cf\u7684\u5206\u53d1\u6e20\u9053\uff1b<\/li><li>\u5e76\u4e14\u5c06\u955c\u50cf\u7ba1\u7406\u548c\u5206\u53d1\u96c6\u6210\u5230\u5185\u90e8\u7edf\u4e00\u5f00\u53d1\u6d41\u7a0b\u4e2d\u3002<\/li><\/ol>\n\n\n\n<p><br>\u4f8b\u5982\u642d\u5efa\u5185\u90e8CI\u5e73\u53f0\uff0c\u81ea\u52a8\u6784\u5efa\u955c\u50cf\u3001\u5b58\u50a8\u955c\u50cf\u548c\u5206\u53d1\u955c\u50cf\uff0c\u5b9e\u73b0\u4e00\u952e\u6784\u5efa\uff0c\u6253\u901a\u4ece\u5f00\u53d1\u6d4b\u8bd5\u73af\u5883\u5230\u751f\u4ea7\u73af\u5883\u3002<\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/123.57.164.21\/wp-content\/uploads\/2023\/05\/\u56fe\u7247-102-1024x651.png\" alt=\"\" class=\"wp-image-11161\" width=\"418\" height=\"266\" srcset=\"https:\/\/92it.top\/wp-content\/uploads\/2023\/05\/\u56fe\u7247-102-1024x651.png 1024w, https:\/\/92it.top\/wp-content\/uploads\/2023\/05\/\u56fe\u7247-102-300x191.png 300w, https:\/\/92it.top\/wp-content\/uploads\/2023\/05\/\u56fe\u7247-102-768x488.png 768w, https:\/\/92it.top\/wp-content\/uploads\/2023\/05\/\u56fe\u7247-102-1536x976.png 1536w, https:\/\/92it.top\/wp-content\/uploads\/2023\/05\/\u56fe\u7247-102-830x528.png 830w, https:\/\/92it.top\/wp-content\/uploads\/2023\/05\/\u56fe\u7247-102-230x146.png 230w, https:\/\/92it.top\/wp-content\/uploads\/2023\/05\/\u56fe\u7247-102-350x223.png 350w, https:\/\/92it.top\/wp-content\/uploads\/2023\/05\/\u56fe\u7247-102-480x305.png 480w, https:\/\/92it.top\/wp-content\/uploads\/2023\/05\/\u56fe\u7247-102.png 1746w\" sizes=\"(max-width: 418px) 100vw, 418px\" \/><\/figure><\/div>\n\n\n\n<p><strong>\u4e8c\u3001Docker Registry\u90e8\u7f72\u79c1\u6709\u4ed3\u5e93<\/strong><\/p>\n\n\n\n<hr class=\"wp-block-separator\"\/>\n\n\n\n<p>\u90e8\u7f72Docker Registry\u4e4b\u524d\u5148\u5b89\u88c5Docker\uff0c\u6211\u7684\u73af\u5883\u662fCentos\uff0c\u76f4\u63a5\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\uff1a<\/p>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">[root@node1 docker]# yum update\n[root@node1 docker]# yum install docker\n[root@node1 docker]# docker version\nClient:\n Version:         1.13.1\n API version:     1.26\n Package version:\nCannot connect to the Docker daemon at unix:\/\/\/var\/run\/docker.sock. Is the docker daemon running?\n<\/pre>\n\n\n\n<p>\u4f60\u53ef\u4ee5\u521b\u5efa\u4e13\u95e8\u7684docker\u7528\u6237\u8fdb\u884c\u64cd\u4f5c\uff0c\u66f4\u52a0\u5b89\u5168\uff0c\u521a\u521b\u5efa\u7684\u7528\u6237\u4e0d\u5728sudo user\u91cc\u9762\uff0c\u53ef\u4ee5\u901a\u8fc7\u4ee5\u4e0b\u65b9\u5f0f\u8bbe\u7f6e,\u8fd9\u91cc\u4e3a\u4e86\u65b9\u4fbf\uff0c\u6211\u4f7f\u7528\u4e86root\u7528\u6237\u3002<\/p>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">chmod u+w \/etc\/sudoers\nvim \/etc\/sudoers\n\/\/\u586b\u5165\u4ee5\u4e0b\u5185\u5bb9\ndocker ALL=(ALL) ALL\n<\/pre>\n\n\n\n<p>\u5b89\u88c5\u5b8c\u6bd5\u4ee5\u540e\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u67e5\u770bdocker\u8fd0\u884c\u72b6\u6001\uff1a<\/p>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">[root@node1 docker]# sudo systemctl status docker\n\u25cf docker.service - Docker Application Container Engine\n   Loaded: loaded (\/usr\/lib\/systemd\/system\/docker.service; disabled; vendor preset: disabled)\n   Active: active (running) since Fri 2023-03-10 18:03:18 CST; 11s ago\n     Docs: http:\/\/docs.docker.com\n Main PID: 47284 (dockerd-current)\n   CGroup: \/system.slice\/docker.service\n           \u251c\u250047284 \/usr\/bin\/dockerd-current --add-runtime docker-runc=\/usr\/li...\n           \u2514\u250047290 \/usr\/bin\/docker-containerd-current -l unix:\/\/\/var\/run\/dock...\n\nMar 10 18:03:17 node1 dockerd-current[47284]: time=\"2023-03-10T18:03:17.8383...\"\nMar 10 18:03:17 node1 dockerd-current[47284]: time=\"2023-03-10T18:03:17.8422...\"\nMar 10 18:03:17 node1 dockerd-current[47284]: time=\"2023-03-10T18:03:17.8484...\"\nMar 10 18:03:17 node1 dockerd-current[47284]: time=\"2023-03-10T18:03:17.8776...\"\nMar 10 18:03:18 node1 dockerd-current[47284]: time=\"2023-03-10T18:03:18.0211...\"\nMar 10 18:03:18 node1 dockerd-current[47284]: time=\"2023-03-10T18:03:18.0656...\"\nMar 10 18:03:18 node1 dockerd-current[47284]: time=\"2023-03-10T18:03:18.0906...\"\nMar 10 18:03:18 node1 dockerd-current[47284]: time=\"2023-03-10T18:03:18.0917...1\nMar 10 18:03:18 node1 dockerd-current[47284]: time=\"2023-03-10T18:03:18.1144...\"\nMar 10 18:03:18 node1 systemd[1]: Started Docker Application Container Engine.\nHint: Some lines were ellipsized, use -l to show in full.\n<\/pre>\n\n\n\n<p>\u4ee5\u4e0a\u53ef\u4ee5\u770b\u5230\u72b6\u6001\u662factive\u3002<\/p>\n\n\n\n<p>\u8981\u90e8\u7f72\u4e00\u4e2aDocker Registry\uff0c\u5982\u679c\u4f7f\u7528\u5bb9\u5668\u90e8\u7f72\uff0c\u4e14\u4f7f\u7528\u9ed8\u8ba4\u914d\u7f6e\uff0c\u5219\u6700\u7b80\u5355\u7684\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u5c31\u53ef\u4ee5\u5c06Docker Registry\u8fd0\u884c\u8d77\u6765\uff1a<\/p>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">docker run -d -p 5000:5000 --name registry registry:2<\/pre>\n\n\n\n<p>\u8981\u4f7f\u7528Docker Registry\u90e8\u7f72\u4e00\u4e2a\u955c\u50cf\u79c1\u6709\u4ed3\u5e93\uff0c\u9700\u8981\u9075\u5faa\u4ee5\u4e0b\u6b65\u9aa4\uff1a<\/p>\n\n\n\n<p><strong>2.1\u3001Docker Registry\u5b89\u88c5<\/strong><\/p>\n\n\n\n<p>\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u4eceDocker Hub\u4e0a\u4e0b\u8f7dDocker Registry\u7684\u5b98\u65b9\u955c\u50cf\uff1a<\/p>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">docker pull registry:2<\/pre>\n\n\n\n<p><strong>2.2\u3001Docker Registry\u914d\u7f6e<\/strong><\/p>\n\n\n\n<p>Docker Registry\u7684\u914d\u7f6e\u6587\u4ef6\u4f7f\u7528YAML\u683c\u5f0f\u7f16\u5199\uff0c\u53ef\u4ee5\u901a\u8fc7\u4fee\u6539\u914d\u7f6e\u6587\u4ef6\u6765\u542f\u7528\u9274\u6743\u548c\u8ba4\u8bc1\u673a\u5236\uff0c\u4ee5\u53ca\u914d\u7f6e\u5b58\u50a8\u65b9\u5f0f\u7b49\u3002\u4ee5\u4e0b\u662f\u4e00\u4e2a\u793a\u4f8b\u914d\u7f6e\u6587\u4ef6\uff1a<\/p>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">version: 0.1\nlog:\n  accesslog: \/var\/log\/registry\/access.log\n  errorlog: \/var\/log\/registry\/error.log\nstorage:\n  filesystem:\n    rootdirectory: \/var\/lib\/registry\nhttp:\n  addr: :5000\n  headers:\n    X-Content-Type-Options: [nosniff]\nauth:\n  htpasswd:\n    realm: registry\n    path: \/auth\/htpasswd\n<\/pre>\n\n\n\n<p>\u5728\u4e0a\u9762\u7684\u914d\u7f6e\u6587\u4ef6\u4e2d\uff0cstorage.filesystem.rootdirectory\u53c2\u6570\u6307\u5b9a\u4e86\u5b58\u50a8\u955c\u50cf\u7684\u76ee\u5f55\uff0chttp.addr\u53c2\u6570\u6307\u5b9a\u4e86Docker Registry\u76d1\u542c\u7684\u7aef\u53e3\u53f7\uff0cauth.htpasswd.realm\u53c2\u6570\u6307\u5b9a\u4e86\u8ba4\u8bc1\u57df\u7684\u540d\u79f0\uff0cauth.htpasswd.path\u53c2\u6570\u6307\u5b9a\u4e86\u5b58\u50a8\u7528\u6237\u540d\u548c\u5bc6\u7801\u7684\u6587\u4ef6\u8def\u5f84\u3002<\/p>\n\n\n\n<p><strong>2.3\u3001\u542f\u52a8Docker Registry<\/strong><\/p>\n\n\n\n<p>\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u542f\u52a8Docker Registry\uff1a<\/p>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">docker run -d \\\n  -p 5000:5000 \\\n  --restart=always \\\n  --name registry \\\n  -v \/path\/to\/registry:\/var\/lib\/registry \\\n  -v \/path\/to\/config.yml:\/etc\/docker\/registry\/config.yml \\\n  registry:2\n<\/pre>\n\n\n\n<p><br>\u5176\u4e2d\uff0c<code>-p<\/code>\u53c2\u6570\u6307\u5b9a\u4e86Docker Registry\u76d1\u542c\u7684\u7aef\u53e3\u53f7\uff0c<code>-v<\/code>\u53c2\u6570\u6307\u5b9a\u4e86\u5b58\u50a8\u955c\u50cf\u548c\u914d\u7f6e\u6587\u4ef6\u7684\u76ee\u5f55\uff0c<code>registry:2<\/code>\u53c2\u6570\u6307\u5b9a\u4e86\u4f7f\u7528\u7684Docker Registry\u955c\u50cf\u7248\u672c\u3002<\/p>\n\n\n\n<p><strong>2.4\u3001Docker\u5ba2\u6237\u7aef\u914d\u7f6e<\/strong><\/p>\n\n\n\n<p>\u4e3a\u4e86\u4f7f\u7528\u521a\u521a\u90e8\u7f72\u7684\u955c\u50cf\u79c1\u6709\u4ed3\u5e93\uff0c\u9700\u8981\u5728Docker\u5ba2\u6237\u7aef\u4e2d\u914d\u7f6eDocker Registry\u7684\u5730\u5740\u548c\u8ba4\u8bc1\u4fe1\u606f\u3002\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u914d\u7f6eDocker\u5ba2\u6237\u7aef\uff1a<\/p>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">docker login registry.example.com:5000<\/pre>\n\n\n\n<p>\u5176\u4e2d\uff0c<code>registry.example.com:5000<\/code>\u53c2\u6570\u6307\u5b9a\u4e86Docker Registry\u7684\u5730\u5740\u548c\u7aef\u53e3\u53f7\u3002<\/p>\n\n\n\n<p><strong>2.5\u3001\u5411Docker Registry\u4e0a\u4f20\u548c\u4e0b\u8f7d\u955c\u50cf<\/strong><\/p>\n\n\n\n<p>\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u4e0a\u4f20\u548c\u4e0b\u8f7d\u955c\u50cf\uff1a<\/p>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">docker tag image-name registry.example.com:5000\/image-name\ndocker push registry.example.com:5000\/image-name\ndocker pull registry.example.com:5000\/image-name\n<\/pre>\n\n\n\n<p>\u5176\u4e2d\uff0c<code>image-name<\/code>\u53c2\u6570\u6307\u5b9a\u4e86\u8981\u4e0a\u4f20\u548c\u4e0b\u8f7d\u7684\u955c\u50cf\u540d\u79f0\u3002\u6ce8\u610f\uff0c\u5728\u4e0a\u4f20\u548c\u4e0b\u8f7d\u955c\u50cf\u65f6\uff0c\u9700\u8981\u4f7f\u7528Docker Registry\u7684\u5b8c\u6574\u5730\u5740\u548c\u7aef\u53e3\u53f7\u3002<\/p>\n\n\n\n<p>\u4ee5\u4e0a\u5c31\u662f\u4f7f\u7528Docker Registry\u90e8\u7f72\u955c\u50cf\u79c1\u6709\u4ed3\u5e93\u7684\u6b65\u9aa4\uff0c\u53ef\u4ee5\u6839\u636e\u5b9e\u9645\u9700\u6c42\u8fdb\u884c\u914d\u7f6e\u548c\u4f7f\u7528\u3002<\/p>\n\n\n\n<p><strong>\u4e09\u3001Docker Registry\u9274\u6743\u548c\u8ba4\u8bc1<\/strong><\/p>\n\n\n\n<hr class=\"wp-block-separator\"\/>\n\n\n\n<p>Docker Registry\u662f\u4e00\u4e2a\u4e2d\u592e\u5b58\u50a8\u548c\u5206\u53d1Docker\u955c\u50cf\u7684\u670d\u52a1\u5668\uff0c\u5176\u652f\u6301\u591a\u79cd\u9274\u6743\u548c\u8ba4\u8bc1\u673a\u5236\uff0c\u5305\u62ec\u57fa\u672c\u8ba4\u8bc1\u3001Bearer Token\u8ba4\u8bc1\u3001AWS\u8ba4\u8bc1\u548cLDAP\u8ba4\u8bc1\u7b49\u3002\u4e0b\u9762\u6211\u4eec\u8be6\u7ec6\u4ecb\u7ecd\u5176\u4e2d\u7684\u51e0\u79cd\u5e38\u7528\u8ba4\u8bc1\u548c\u9274\u6743\u673a\u5236\uff0c\u5e76\u7ed9\u51fa\u76f8\u5e94\u7684\u4ee3\u7801\u914d\u7f6e\u793a\u4f8b\u3002<\/p>\n\n\n\n<p><strong>3.1\u3001\u57fa\u672c\u8ba4\u8bc1<\/strong><\/p>\n\n\n\n<p>\u57fa\u672c\u8ba4\u8bc1\u662f\u4e00\u79cd\u7b80\u5355\u7684HTTP\u8ba4\u8bc1\u673a\u5236\uff0c\u5b83\u901a\u8fc7\u5728HTTP\u5934\u4e2d\u53d1\u9001Base64\u7f16\u7801\u7684\u7528\u6237\u540d\u548c\u5bc6\u7801\u6765\u9a8c\u8bc1\u7528\u6237\u7684\u8eab\u4efd\u3002Docker Registry\u652f\u6301\u57fa\u672c\u8ba4\u8bc1\uff0c\u53ef\u4ee5\u901a\u8fc7\u914d\u7f6e\u6587\u4ef6\u6765\u542f\u7528\u3002\u4ee5\u4e0b\u662f\u4e00\u4e2a\u793a\u4f8b\u914d\u7f6e\u6587\u4ef6\uff1a<\/p>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">version: 0.1\nlog:\n  accesslog: \/var\/log\/registry\/access.log\n  errorlog: \/var\/log\/registry\/error.log\nstorage:\n  filesystem:\n    rootdirectory: \/var\/lib\/registry\nhttp:\n  addr: :5000\n  headers:\n    X-Content-Type-Options: [nosniff]\nauth:\n  htpasswd:\n    realm: registry\n    path: \/auth\/htpasswd\n<\/pre>\n\n\n\n<p>\u5728\u4e0a\u9762\u7684\u914d\u7f6e\u6587\u4ef6\u4e2d\uff0c<code>auth.htpasswd.realm<\/code>\u53c2\u6570\u8868\u793a\u57fa\u672c\u8ba4\u8bc1\u9886\u57df\u7684\u540d\u79f0\uff0c<code>auth.htpasswd.path<\/code>\u53c2\u6570\u8868\u793a\u5305\u542b\u7528\u6237\u540d\u548c\u5bc6\u7801\u7684\u6587\u4ef6\u8def\u5f84\u3002\u6211\u4eec\u53ef\u4ee5\u4f7f\u7528<code>htpasswd<\/code>\u547d\u4ee4\u6765\u521b\u5efa\u7528\u6237\u540d\u548c\u5bc6\u7801\u6587\u4ef6\uff0c\u4f8b\u5982\uff1a<\/p>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">$ htpasswd -Bbn user1 password1 > \/path\/to\/htpasswd<\/pre>\n\n\n\n<p><br><strong>3.2\u3001Bearer Token\u8ba4\u8bc1<\/strong><\/p>\n\n\n\n<p>Bearer Token\u8ba4\u8bc1\u662f\u4e00\u79cd\u57fa\u4e8eOAuth2\u534f\u8bae\u7684\u8ba4\u8bc1\u673a\u5236\uff0c\u5b83\u4f7f\u7528\u8bbf\u95ee\u4ee4\u724c\u6765\u9a8c\u8bc1\u7528\u6237\u7684\u8eab\u4efd\u3002Docker Registry\u652f\u6301Bearer Token\u8ba4\u8bc1\uff0c\u53ef\u4ee5\u901a\u8fc7\u914d\u7f6e\u6587\u4ef6\u6765\u542f\u7528\u3002\u4ee5\u4e0b\u662f\u4e00\u4e2a\u793a\u4f8b\u914d\u7f6e\u6587\u4ef6\uff1a<\/p>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">version: 0.1\nlog:\n  accesslog: \/var\/log\/registry\/access.log\n  errorlog: \/var\/log\/registry\/error.log\nstorage:\n  filesystem:\n    rootdirectory: \/var\/lib\/registry\nhttp:\n  addr: :5000\n  headers:\n    X-Content-Type-Options: [nosniff]\nauth:\n  token:\n    realm: registry\n    service: registry\n    issuer: registry\n    rootcertbundle: \/path\/to\/root.crt\n<\/pre>\n\n\n\n<p>\u5728\u4e0a\u9762\u7684\u914d\u7f6e\u6587\u4ef6\u4e2d\uff0cauth.token.realm\u53c2\u6570\u8868\u793aBearer Token\u8ba4\u8bc1\u9886\u57df\u7684\u540d\u79f0\uff0cauth.token.service\u548cauth.token.issuer\u53c2\u6570\u8868\u793a\u670d\u52a1\u540d\u79f0\u548c\u9881\u53d1\u8005\u540d\u79f0\u3002auth.token.rootcertbundle\u53c2\u6570\u8868\u793a\u6839\u8bc1\u4e66\u7684\u8def\u5f84\uff0c\u8fd9\u91cc\u53ef\u4ee5\u4f7f\u7528\u81ea\u7b7e\u540d\u7684\u8bc1\u4e66\u6216CA\u7b7e\u540d\u7684\u8bc1\u4e66\u3002<\/p>\n\n\n\n<p><strong>3.3\u3001AWS\u8ba4\u8bc1<\/strong><\/p>\n\n\n\n<p>AWS\u8ba4\u8bc1\u662f\u4e00\u79cd\u57fa\u4e8eAWS Identity and Access Management\uff08IAM\uff09\u7684\u8ba4\u8bc1\u673a\u5236\uff0c\u5b83\u4f7f\u7528AWS\u51ed\u8bc1\u6765\u9a8c\u8bc1\u7528\u6237\u7684\u8eab\u4efd\u3002Docker Registry\u652f\u6301AWS\u8ba4\u8bc1\uff0c\u53ef\u4ee5\u901a\u8fc7\u914d\u7f6e\u6587\u4ef6\u6765\u542f\u7528\u3002\u4ee5\u4e0b\u662f\u4e00\u4e2a\u793a\u4f8b\u914d\u7f6e\u6587\u4ef6\uff1a<\/p>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">version: 0.1\nlog:\n  accesslog: \/var\/log\/registry\/access.log\n  errorlog: \/var\/log\/registry\/error.log\nstorage:\n  filesystem:\n    rootdirectory: \/var\/lib\/registry\nhttp:\n  addr: :5000\n  headers:\n    X-Content-Type-Options: [nosniff]\nauth:\n  s3:\n    access\n<\/pre>\n\n\n\n<p><br>\u5728\u4e0a\u9762\u7684\u914d\u7f6e\u6587\u4ef6\u4e2d\uff0c<code>auth.s3.accesskey<\/code>\u548c<code>auth.s3.secretkey<\/code>\u53c2\u6570\u8868\u793aAWS\u51ed\u8bc1\u7684\u8bbf\u95ee\u5bc6\u94a5\u548c\u79c1\u6709\u5bc6\u94a5\uff0c<code>auth.s3.region<\/code>\u53c2\u6570\u8868\u793aAWS S3\u5b58\u50a8\u6876\u7684\u533a\u57df\uff0c<code>auth.s3.bucket<\/code>\u53c2\u6570\u8868\u793a\u5b58\u50a8\u955c\u50cf\u7684S3\u5b58\u50a8\u6876\u7684\u540d\u79f0\u3002<\/p>\n\n\n\n<p><strong>3.4\u3001LDAP\u8ba4\u8bc1<\/strong><\/p>\n\n\n\n<p>LDAP\u8ba4\u8bc1\u662f\u4e00\u79cd\u57fa\u4e8eLightweight Directory Access Protocol\uff08LDAP\uff09\u7684\u8ba4\u8bc1\u673a\u5236\uff0c\u5b83\u4f7f\u7528LDAP\u670d\u52a1\u5668\u4e2d\u7684\u7528\u6237\u4fe1\u606f\u6765\u9a8c\u8bc1\u7528\u6237\u7684\u8eab\u4efd\u3002Docker Registry\u652f\u6301LDAP\u8ba4\u8bc1\uff0c\u53ef\u4ee5\u901a\u8fc7\u914d\u7f6e\u6587\u4ef6\u6765\u542f\u7528\u3002\u4ee5\u4e0b\u662f\u4e00\u4e2a\u793a\u4f8b\u914d\u7f6e\u6587\u4ef6\uff1a<\/p>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">version: 0.1\nlog:\n  accesslog: \/var\/log\/registry\/access.log\n  errorlog: \/var\/log\/registry\/error.log\nstorage:\n  filesystem:\n    rootdirectory: \/var\/lib\/registry\nhttp:\n  addr: :5000\n  headers:\n    X-Content-Type-Options: [nosniff]\nauth:\n  ldap:\n    endpoint: ldap:\/\/ldap.example.com:389\n    binddn: cn=admin,dc=example,dc=com\n    bindpassword: password\n    searchbase: ou=people,dc=example,dc=com\n    searchfilter: (uid=%s)\n<\/pre>\n\n\n\n<p>\u5728\u4e0a\u9762\u7684\u914d\u7f6e\u6587\u4ef6\u4e2d\uff0cauth.ldap.endpoint\u53c2\u6570\u8868\u793aLDAP\u670d\u52a1\u5668\u7684\u5730\u5740\u548c\u7aef\u53e3\u53f7\uff0cauth.ldap.binddn\u548cauth.ldap.bindpassword\u53c2\u6570\u8868\u793aLDAP\u7ba1\u7406\u5458\u7684\u8eab\u4efd\u4fe1\u606f\uff0cauth.ldap.searchbase\u53c2\u6570\u8868\u793a\u7528\u6237\u4fe1\u606f\u5b58\u50a8\u5728LDAP\u670d\u52a1\u5668\u4e0a\u7684\u57fa\u7840\u76ee\u5f55\uff0cauth.ldap.searchfilter\u53c2\u6570\u8868\u793a\u67e5\u8be2\u7528\u6237\u4fe1\u606f\u7684\u8fc7\u6ee4\u5668\u3002<\/p>\n\n\n\n<p>\u4ee5\u4e0a\u662f\u5e38\u7528\u7684\u51e0\u79cdDocker Registry\u7684\u9274\u6743\u548c\u8ba4\u8bc1\u673a\u5236\uff0c\u4e0d\u540c\u7684\u8ba4\u8bc1\u673a\u5236\u5728\u914d\u7f6e\u6587\u4ef6\u4e2d\u7684\u53c2\u6570\u6709\u6240\u4e0d\u540c\u3002\u53ef\u4ee5\u6839\u636e\u5b9e\u9645\u9700\u6c42\u9009\u62e9\u76f8\u5e94\u7684\u8ba4\u8bc1\u673a\u5236\u5e76\u8fdb\u884c\u914d\u7f6e\u3002<br><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u4e00\u3001Docker Registry\u662f\u4ec0\u4e48\uff1f Docker Registry \u662f\u4e00\u4e2a\u65e0\u72b6\u6001\u3001\u9ad8\u5ea6\u53ef\u6269\u5c55\u7684\u670d\u52a1\u5668\u7aef [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[20],"tags":[],"_links":{"self":[{"href":"https:\/\/92it.top\/index.php?rest_route=\/wp\/v2\/posts\/11160"}],"collection":[{"href":"https:\/\/92it.top\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/92it.top\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/92it.top\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/92it.top\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=11160"}],"version-history":[{"count":1,"href":"https:\/\/92it.top\/index.php?rest_route=\/wp\/v2\/posts\/11160\/revisions"}],"predecessor-version":[{"id":11162,"href":"https:\/\/92it.top\/index.php?rest_route=\/wp\/v2\/posts\/11160\/revisions\/11162"}],"wp:attachment":[{"href":"https:\/\/92it.top\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=11160"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/92it.top\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=11160"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/92it.top\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=11160"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}