private-containers.png
yum update
docker ps -a
docker pull registry //不是這個版本
docker images
docker pull registry:2
docker images
mkdir /data
docker run -d -p 5000:5000 --restart=always -v /data:/var/lib/registry--name RE registry:2
docker tag b72889fa879c localhost:5000/ubuntu
docker push localhost:5000/ubuntu
docker rmi localhost:5000/ubuntu
docker pull localhost:5000/ubuntu
mkdir /datatls
docker run -d -p 5000:5000 --restart=always --name retls -v `pwd`/ca:/certs -e REGISTRY_HTTP_TLS_CERTIFICATE=/certs/Alpso.crt -e REGISTRY_HTTP_TLS_KEY=/certs/Alpso.key -v /datatls:/var/lib/registry registry:2
docker images
docker push docker.jd.com:5000/re
docker pull docker.jd.com:5000/re
du -sh /data*
mkdir /datatlsauth
mkdir auth
docker run --entrypoint htpasswd registry:2 -Bbn testuser testpassword > auth/htpasswd
docker run -d -p 5000:5000 --restart=always --name retls -v `pwd`/ca:/certs -v `pwd`/auth:/auth -e "REGISTRY_AUTH=htpasswd" -e "REGISTRY_AUTH_HTPASSWD_REALM=Registry Realm" -e REGISTRY_AUTH_HTPASSWD_PATH=/auth/htpasswd -e REGISTRY_HTTP_TLS_CERTIFICATE=/certs/Alpso.crt -e REGISTRY_HTTP_TLS_KEY=/certs/Alpso.key -v /datatlsauth:/var/lib/registry registry:2
docker push docker.jd.com:5000/re //失敗
docker login docker.jd.com:5000
docker pull docker.jd.com:5000/re
docker push docker.jd.com:5000/re //成功
cd .docker
vim config.json //修改
docker push docker.jd.com:5000/re //失敗
證書生成：
openssl req -newkey rsa:4096 -nodes -sha256 -keyout certs/docker.jd.com.key -x509 -days 365 -out certs/docker.jd.com.crt
