docker——7、Docker私有Registry（Harbor）

一、Docker Registry分类

Registry用于保存docker镜像，包括镜像的层次结构和元数据
用户可自建Registry，也可使用官方的Docker hub
分类：

• Sponsor Registry:第三方的registry，供客户和Docker使用

• Mirror Registry:第三方的registry，只让客户使用

• Vendor Registry：由发布Docker镜像的供应商提供的registry

• Private Registry：通过设有防火墙和额外的安全层的私有实体提供的registry

  [root@node2 ~]# yum install docker-registry -y
  [root@node2 ~]# rpm -ql docker-distribution
  /etc/docker-distribution/registry/config.yml
  /usr/bin/registry
  /usr/lib/systemd/system/docker-distribution.service
  /usr/share/doc/docker-distribution-2.6.2
  /usr/share/doc/docker-distribution-2.6.2/AUTHORS
  /usr/share/doc/docker-distribution-2.6.2/CONTRIBUTING.md
  /usr/share/doc/docker-distribution-2.6.2/LICENSE
  /usr/share/doc/docker-distribution-2.6.2/MAINTAINERS
  /usr/share/doc/docker-distribution-2.6.2/README.md
  /var/lib/registry
  [root@node2 ~]# systemctl start docker-distribution
  [root@node2 ~]# docker tag myweb:v0.3-7 node2.change-can.com:5000/myweb:v0.3-7
  [root@node2 ~]# vim /etc/docker/daemon.json
  {
  “registry-mirrors”: [“http://hub-mirror.c.163.com”],
  “insecure-registries”: [“node2.change-can.com:5000”]
  }
  [root@node2 ~]# systemctl restart docker
  [root@node2 ~]# docker push node2.change-can.com:5000/myweb:v0.3-7
  The push refers to repository [node2.change-can.com:5000/myweb]
  7bcaffab5de6: Layer already exists
  f1d6039a7f54: Layer alr