private-containers.png

yum update
docker ps -a
docker pull registry //不是这个版本
docker images
docker pull registry:2
docker images
mkdir /data
docker run -d -p 5000:5000 --restart=always -v /data:/var/lib/registry--name RE registry:2
docker tag b72889fa879c localhost:5000/ubuntu
docker push localhost:5000/ubuntu
docker rmi localhost:5000/ubuntu 
docker pull localhost:5000/ubuntu

mkdir /datatls
docker run -d -p 5000:5000 --restart=always --name retls -v `pwd`/ca:/certs  -e REGISTRY_HTTP_TLS_CERTIFICATE=/certs/Alpso.crt -e REGISTRY_HTTP_TLS_KEY=/certs/Alpso.key -v /datatls:/var/lib/registry registry:2
docker images
docker push docker.jd.com:5000/re
docker pull docker.jd.com:5000/re
du -sh /data*

mkdir /datatlsauth
mkdir auth
docker run --entrypoint htpasswd registry:2 -Bbn testuser testpassword > auth/htpasswd
docker run -d -p 5000:5000 --restart=always --name retls -v `pwd`/ca:/certs  -v `pwd`/auth:/auth -e "REGISTRY_AUTH=htpasswd" -e "REGISTRY_AUTH_HTPASSWD_REALM=Registry Realm" -e REGISTRY_AUTH_HTPASSWD_PATH=/auth/htpasswd -e REGISTRY_HTTP_TLS_CERTIFICATE=/certs/Alpso.crt -e REGISTRY_HTTP_TLS_KEY=/certs/Alpso.key -v /datatlsauth:/var/lib/registry registry:2
docker push docker.jd.com:5000/re //失败
docker login docker.jd.com:5000
docker pull docker.jd.com:5000/re
docker push docker.jd.com:5000/re //成功
cd .docker
vim config.json //修改 
docker push docker.jd.com:5000/re //失败

证书生成：

openssl req -newkey rsa:4096 -nodes -sha256 -keyout certs/docker.jd.com.key -x509 -days 365 -out certs/docker.jd.com.crt