docker离线安装及私人仓库搭建

docker离线安装及私人仓库搭建

注意文中 IP PORT根据实际情况自行调整

1. 离线部署

安装目录结构

• install # 安装文件夹
  • docker-19.03.9.tgz # docker安装文件压缩包 docker下载地址
  • docker-compose-linux-x86_64 # docker-compose文件 docker-compose下载地址
  • daemon.json # docker 配置文件
  • docker.service # docker systemctl 服务的配置文件
  • docker-installer.sh # 一键安装文件
  • docker-uninstaller.sh # 一键卸载文件
• images # 镜像文件夹
  • joxit_docker-registry-ui_main.tar # 中央仓库管理工具 ui registry-ui
  • registry_2.8.2.tar # 中央仓库管理工具 registry
  • nginx.tar # 测试镜像 nginx
  • docker-compose.yml # 中央仓库管理工具的compose文件
  • repotool_installer.sh # 中央仓库管理工具加载安装运行脚本

1.1 安装包下载

• docker下载地址

• docker-compose下载地址

1.2 必要配置文件

• daemon.json
• docker.service

view code# daemon.json
{
    "builder": {
      "gc": {
        "defaultKeepStorage": "20GB",
        "enabled": true
      }
    },
    "debug": false,
    "experimental": false,
    "features": {
      "buildkit": true
    },
    # 私人中央仓库地址，没有设置成 []
    "insecure-registries": [
      "http://IP:PORT"
    ],
    "registry-mirrors": []
}

view code[Unit]
Description=Docker Application Container Engine
Documentation=http://docs.docker.com
After=network.target docker.socket
[Service]
Type=notify
EnvironmentFile=-/run/flannel/docker
WorkingDirectory=/usr/local/bin
ExecStart=/usr/bin/dockerd \
                -H tcp://0.0.0.0:4243 \
                -H unix:///var/run/docker.sock \
                --selinux-enabled=false \
                --log-opt max-size=1g
ExecReload=/bin/kill -s HUP $MAINPID
# Having non-zero Limit*s causes performance problems due to accounting overhead
# in the kernel. We recommend using cgroups to do container-local accounting.
LimitNOFILE=infinity
LimitNPROC=infinity
LimitCORE=infinity
# Uncomment TasksMax if your systemd version supports it.
# Only systemd 226 and above support this version.
#TasksMax=infinity
TimeoutStartSec=0
# set delegate yes so that systemd does not reset the cgroups of docker containers
Delegate=yes
# kill only the docker process, not all processes in the cgroup
KillMode=process
Restart=on-failure
[Install]
WantedBy=multi-user.target

1.3 一键安装脚本

view code#!/bin/sh
echo 'docker开始安装...'
echo '解压tar包...'
# ------------------------------------
tar -zxvf ./docker-19.03.9.tgz
# ------------------------------------
echo '将docker目录移到/usr/bin目录下...'
cp -p docker/*  /usr/bin/
rm -rf docker
echo '将docker.service 移到/usr/lib/systemd/system/ 目录...'
cp ./docker.service /usr/lib/systemd/system/
echo '重新加载配置文件...'
mkdir /etc/docker/
cp daemon.json /etc/docker/
systemctl daemon-reload
echo '启动docker...'
systemctl start docker
echo '设置开机自启...'
systemctl enable docker.service
if ! docker -v; then
echo "docker 安装失败..."
exit -1
fi
echo 'docker安装成功...'
 
echo '安装docker-compose...'
# ---------------------------------------------------------------
cp -f ./docker-compose-linux-x86_64 /usr/local/bin/docker-compose
# ---------------------------------------------------------------
echo '添加文件执行权限...'
chmod +x /usr/local/bin/docker-compose
if ! docker-compose -v; then
echo "docker-compose 安装失败..."
exit -1
fi
echo 'docker-compose 安装成功...'

1.4 一键卸载脚本

view code#!/bin/sh
echo "停止所有容器服务"
docker stop $(docker ps -a -q)
echo "删除所有容器"
docker rm $(docker ps -a -q)
echo "删除docker所有镜像"
docker rmi -f $(docker images -q)
echo "停止docker服务"
systemctl stop docker
echo "删除docker.service..."
rm -rf /usr/lib/systemd/system/docker.service
echo "删除docker文件..."
rm -rf /usr/bin/docker*
echo "重新加载配置文件"
rm -rf /etc/docker
systemctl daemon-reload
echo "卸载成功..."
 
echo "删除docker-compose"
rm -rf /usr/local/bin/docker-compose
echo "卸载成功"一、docker离线安装

2. 私人仓库当搭建

• registry-ui
• registry

2.1 docker-compose.yml

新建一个文件夹，将docker-compose.yml放在文件夹下

执行 docker-compose up -d

执行完后访问 http://IP:PORT/

view codeversion: '3.8'

services:
  registry-ui:
    image: joxit/docker-registry-ui:main
    restart: always
    ports:
      - PORT:80
    environment:
      - SINGLE_REGISTRY=true
      - REGISTRY_TITLE=我的软件仓库
      - DELETE_IMAGES=true
      - SHOW_CONTENT_DIGEST=true
      - NGINX_PROXY_PASS_URL=http://registry-server:5000
      - SHOW_CATALOG_NB_TAGS=true
      - CATALOG_MIN_BRANCHES=1
      - CATALOG_MAX_BRANCHES=1
      - TAGLIST_PAGE_SIZE=100
      - REGISTRY_SECURED=false
      - CATALOG_ELEMENTS_LIMIT=1000
    container_name: registry-ui

  registry-server:
    image: registry:2.8.2
    restart: always
    environment:
      REGISTRY_HTTP_HEADERS_Access-Control-Origin: '[http://registry.example.com]'
      REGISTRY_HTTP_HEADERS_Access-Control-Allow-Methods: '[HEAD,GET,OPTIONS,DELETE]'
      REGISTRY_HTTP_HEADERS_Access-Control-Credentials: '[true]'
      REGISTRY_HTTP_HEADERS_Access-Control-Allow-Headers: '[Authorization,Accept,Cache-Control]'
      REGISTRY_HTTP_HEADERS_Access-Control-Expose-Headers: '[Docker-Content-Digest]'
      REGISTRY_STORAGE_DELETE_ENABLED: 'true'
    volumes:
      - ./registry/data:/var/lib/registry
    container_name: registry-server

2.2 docker设置

将自己的 IP:PORT添加到下面的数组中(没有的话需要自己的添加)以此允许本地推送镜像，如果是 Linux 的话，则需要找到 /etc/docker/daemon.json (没有需要自己创建)

view code"insecure-registries": [
    "http://IP:PORT"
  ],

view code# daemon.json
{
    "builder": {
      "gc": {
        "defaultKeepStorage": "20GB",
        "enabled": true
      }
    },
    "debug": false,
    "experimental": false,
    "features": {
      "buildkit": true
    },
    # 私人中央仓库地址，没有设置成 []
    "insecure-registries": [
      "http://IP:PORT"
    ],
    "registry-mirrors": []
}

2.3 测试镜像推送及拉取

view codedocker tag nginx IP:PORT/nginx:1.0.0 # 给本地镜像打标签

docker images # 查看镜像列表

docker push IP:PORT/nginx:1.0.0 # 推送镜像到私有中央仓库
# 访问网址 http://IP:PORT， 查看镜像列表

docker rmi IP:PORT/nginx:1.0.0 # 删除镜像
docker images # 查看镜像列表

docker pull IP:PORT/nginx:1.0.0 # 拉取中央仓库镜像到本地
docker images # 查看镜像列表

2.4 其它机子推送与拉取

将自己的 IP:PORT添加到下面的数组中(没有的话需要自己的添加)以此允许本地推送镜像，如果是 Linux 的话，则需要找到 /etc/docker/daemon.json (没有需要自己创建)

view code"insecure-registries": [
    "http://IP:PORT"
  ],

view code# daemon.json
{
    "builder": {
      "gc": {
        "defaultKeepStorage": "20GB",
        "enabled": true
      }
    },
    "debug": false,
    "experimental": false,
    "features": {
      "buildkit": true
    },
    # 私人中央仓库地址，没有设置成 []
    "insecure-registries": [
      "http://IP:PORT"
    ],
    "registry-mirrors": []
}

view codedocker pull IP:PORT/nginx:1.0.0 # 拉取中央仓库镜像到本地
docker images # 查看镜像列表

2.5. 镜像导出与导入

view codedocker save -o nginx.tar nginx  # 导出
docker load -i nginx.tar        # 导入

2.6 离线一键安装脚本

view codeecho '加载测试镜像 nginx'
docker load -i nginx.tar
echo '加载中央仓库管理工具ui镜像 registry-ui'
docker load -i joxit_docker-registry-ui_main.tar
echo '加载中央仓库管理工具镜像 registry'
docker load -i registry_2.8.2.tar
echo '运行中央仓库管理工具'
docker-compose up -d

3. 镜像制作

容器保存为镜像 https://blog.51cto.com/u_16213404/10234492

参考

Docker-搭建私有镜像仓库

在线安装docker和离线安装docker步骤详解

离线安装docker、docker-compose