离线环境下docker的使用（含搭建registry）

一时失言乱红尘 2022-03-22 13:24 638阅读 0赞

### Docker环境的安装 ###

准备好docker-18.09.1.tgz包（可在官方网站下载），解压该安装包：

> tar -zxvf docker-18.09.1.tgz

将解压出来的docker文件移动到/usr/bin目录下

> sudo cp docker/\* /usr/bin

开启docker守护进程

> sudo dockerd &

查看是否可使用

> sudo docker -v

为docker注册service，就可使用service docker \*

编辑/usr/lib/systemd/system/docker.service

> \[Unit\]
> 
> Description=Docker Application Container Engine
> 
> Documentation=https://docs.docker.com
> 
> After=network-online.target firewalld.service
> 
> Wants=network-online.target
> 
>  
> 
> \[Service\]
> 
> Type=notify
> 
> \# the default is not to use systemd for cgroups because the delegate issues still
> 
> \# exists and systemd currently does not support the cgroup feature set required
> 
> \# for containers run by docker
> 
> ExecStart=/usr/bin/dockerd **--insecure-registry=127.0.0.1:8080**
> 
> ExecReload=/bin/kill -s HUP $MAINPID
> 
> \# Having non-zero Limit\*s causes performance problems due to accounting overhead
> 
> \# in the kernel. We recommend using cgroups to do container-local accounting.
> 
> LimitNOFILE=infinity
> 
> LimitNPROC=infinity
> 
> LimitCORE=infinity
> 
> \# Uncomment TasksMax if your systemd version supports it.
> 
> \# Only systemd 226 and above support this version.
> 
> \#TasksMax=infinity
> 
> TimeoutStartSec=0
> 
> \# set delegate yes so that systemd does not reset the cgroups of docker containers
> 
> Delegate=yes
> 
> \# kill only the docker process, not all processes in the cgroup
> 
> KillMode=process
> 
> \# restart the docker process if it exits prematurely
> 
> Restart=on-failure
> 
> StartLimitBurst=3
> 
> StartLimitInterval=60s
> 
>  
> 
> \[Install\]
> 
> WantedBy=multi-user.target

激活service注册执行：

> systemctl enable docker.service
> 
> systemctl start docker.service
> 
> systemctl status docker.service

如果出错则：需要关闭selinux

> \# vim /etc/selinux/config
> 
> SELINUX=disabled
> 
> \# reboot

### 私有镜像服务的搭建 ###

下载registry镜像

> docker pull docker.io/registry

创建镜像数据目录

> mkdir -p /data/registry-data

运行镜像仓库容器

> docker run \\
> 
> \-d --name=registry  \\
> 
> \-v /data/registry-data:/var/lib/registry  \\
> 
> \-p 5000:5000 docker.io/registry

上传一个镜像到本地镜像仓库

> docker push 127.0.0.1:5000/centos

至此，私有镜像服务已经可用了。

### 将整个镜像仓库搬到离线的机器上 ###

将本地镜像容器打包

> docker save -o registry.tar docker.io/registry

将本地镜像数据打包

> tar czvf registry-images-data.tar.gz /data/registry-data

然后将两个压缩文件拷贝至离线的机器上，在离线的机器上加载并运行镜像服务容器

> docker load -i registry.tar
> 
> tar xf registry-images-data.tar.gz -C /data/registry-data
> 
> docker run \\
> 
> \-d --name=registry \\
> 
> \-v /data/registry-data:/var/lib/registry \\
> 
> \-p 5000:5000 docker.io/registry

下载镜像测试

> docker pull 127.0.0.1:5000/centos