「DOCKER」- 搭建 Registry Mirror 服务 | Registry as a Pull Through Cache

helm repo add twuni https://helm.twun.io
helm repo update twuni

helm pull twuni/docker-registry                                               # CHART 2.1.0, APP 2.7.1
helm show values ./docker-registry-2.2.3.tgz > docker-registry-2.2.3.tgz.helm-values.yaml
... ingress: 
... persistence.storageClass: gp2
... proxy.enabled: true

helm upgrade --install --namespace registry-mirror --create-namespace          \
    docker-registry-mirror ./docker-registry-2.2.3.tgz -f docker-registry-2.2.3.tgz.helm-values.yaml

# vim /etc/docker/daemon.json
{
  "registry-mirrors": ["https://registry-mirror.example.com"]
}

# docker pull hello-world

# kubectl exec -it docker-registry-mirror-79c994c65b-64hjv -- ls /var/lib/registry/docker/registry/v2/repositories/library/hello-world
_layers     _manifests  _uploads

// 如上所示，已经存在 hello-world 镜像缓存；

storage:
  filesystem:
    rootdirectory: /var/lib/registry

REGISTRY_STORAGE_FILESYSTEM_ROOTDIRECTORY=/somewhere

// 这两种写法是等价的；

# docker run -d -p 5000:5000 --restart=always              \
    --name registry                                        \
    -v `pwd`/config.yml:/etc/docker/registry/config.yml    \
    registry:2

cat > ./config.yml <<EOF
# 版本号，必选参数
version: 0.1

# 日志相关配置
log:
  accesslog:
    disabled: false
  level: debug
  formatter: text
  fields:
    service: registry-mirror
    environment: production

# 镜像存储配置
storage:
  filesystem:
    rootdirectory: /registry/storage/

# 监听设置
http:
    addr: 0.0.0.0:5000
    secret: <a-secret-for-local-development>
    # 我们将使用 Nginx 提供 HTTPS 入口，然后反向代理到 Registry Mirror 服务
    # 因此，这里不会再配置 TLS 证书信息；
    # tls:
    #   certificate: /path/to/x509/public
    #   key: /path/to/x509/private

# 镜像仓库地址
# 当配置 proxy 属性后，Registry 自动会以 Mirror 的形式运行；
proxy:
  remoteurl: https://registry-1.docker.io
  username: your-dockerhub-account
  password: your-dockerhub-password
EOF

docker run -d -p 5000:5000 --name registry   \
    -v $(realpath ./config.yml):/etc/docker/registry/config.yml \
    -v $(realpath ./storage/):/registry/storage/ \
    registry:2

docker container logs -f registry

docker container stop registry

docker container rm registry

version: '3'

services:
  registry-mirror:
    image: "registry:2"
    container_name: "registry-mirror"
    hostname: "registry-mirror"
    ports:
      - 65000:5000
    restart: always
    # 运行命令、及其环境信息
    volumes:
      - /etc/localtime:/etc/localtime
      - /path/to/data:/registry/storage/
      - /path/to/config.yml:/etc/docker/registry/config.yml
    # entrypoint: /bin/entrypoint
    # command: "ls"
    environment:
    - REGISTRY_PROXY_REMOTEURL=https://hub.docker.com
    - REGISTRY_PROXY_USERNAME=xxxxxxx
    - REGISTRY_PROXY_PASSWORD=xxxxxxx

level=warning msg="Error getting v2 registry: Get http://127.0.0.1:5000/v2/: read tcp 127.0.0.1:53612->127.0.0.1:5000: read: connection reset by peer"
level=info msg="Attempting next endpoint for pull after error: Get http://127.0.0.1:5000/v2/: read tcp 127.0.0.1:53612->127.0.0.1:5000: read: connection reset by peer"