ch2
V2EX  ›  问与答

怎么搭一个这种加速拉取 docker 镜像的源?

  •  
  •   ch2 · Apr 30, 2022 · 3270 views
    This topic created in 1653 days ago, the information mentioned may be changed or developed.

    想利用闲置的机器搞一个自用的
    20220430123531

    Supplement 1  ·  Apr 30, 2022

    最后亲测用这个方法成功了

    docker run -d --name registry --restart always -p 5000:5000 -v /data/registry:/var/lib/registry registry:2
    

    然后nginx添加一下https

        server {
            listen 443 ssl;
            server_name docker.MY_DOMAIN.com;
            ssl_certificate MY_DOMAIN.com.pem;
            ssl_certificate_key MY_DOMAIN.com.key;
            ssl_protocols TLSv1.1 TLSv1.2;
            ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
            ssl_prefer_server_ciphers on;
            ssl_session_cache shared:SSL:10m;
            client_max_body_size 0;
            chunked_transfer_encoding on;
    
            location /v2/ {
                if ($http_user_agent ~ "^(docker\/1\.(3|4|5(?!\.[0-9]-dev))|Go ).*$" ) {
                    return 404;
                }
                proxy_pass                          http://0.0.0.0:5000;
                proxy_set_header  Host              $http_host;
                proxy_set_header  X-Real-IP         $remote_addr;
                proxy_set_header  X-Forwarded-For   $proxy_add_x_forwarded_for;
                proxy_set_header  X-Forwarded-Proto $scheme;
                proxy_read_timeout                  900;
            }
        }
    
    
    Supplement 2  ·  May 1, 2022
    还是得查一查官方文档
    https://docs.docker.com/registry/deploying/
    8 replies  •  2022-05-01 13:08:51 +08:00
    KagurazakaNyaa
    KagurazakaNyaa
    Apr 30, 2022
    1
    试试 nexus
    konakona
    konakona
    Apr 30, 2022❤️1
    2
    如果是自用的话,试试用 Harbor ? docker-compose 启动:
    https://goharbor.io/docs/2.1.0/install-config/reconfigure-manage-lifecycle/
    weiweiwitch
    weiweiwitch
    Apr 30, 2022 via Android
    3
    nexus 很强大。不单单可以充当 docker 的镜像源,还能用于其他类型的镜像源和私有仓库。内网部署一个,几乎解决了项目组和运维的各种镜像加速和私有仓库需求。
    非常省心!
    wisetc
    wisetc
    Apr 30, 2022 via iPhone
    4
    registry:2 就可以,不过要加一下保护,访问限制,以防盗取,加速的话,也许放内网就好了也不什么盗不盗的了,registry:2 属于比较简单
    DCCooper
    DCCooper
    May 1, 2022 via iPhone
    5
    k8s ,helm 拉一个 harbor 就行,证书啥的都给你配好,开箱即用
    learningman
    learningman
    May 1, 2022 via Android
    6
    有个用 http 代理然后 mitm 中间人的想法,就不用改 tag 名字了
    bazingaterry
    bazingaterry
    May 1, 2022 via iPhone
    7
    FrankAdler
    FrankAdler
    May 1, 2022 via iPhone
    8
    @weiweiwitch 不错,省掉好几个系统
    About   ·   Help   ·   Advertise   ·   Blog   ·   API   ·   FAQ   ·   Privacy   ·   Solana   ·   1590 Online   Highest 6679   ·     Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 · 33ms · UTC 09:09 · PVG 17:09 · LAX 01:09 · JFK 04:09
    ♥ Do have faith in what you're doing.