Docker Private Registryのデプロイと運用

%PDLFS1SJWBUF3FHJTUSZ ͷσϓϩΠͱӡ༻ ୈճ.BTUFS$MPVE !TBXBOPCPMZ .PCJOHJ,, )JHBO8PSLT--$

%PDLFSΠϝʔδΛอଘɺ഑෍͢ΔαʔϏε %PDLFS$POUBJOFS3FHJTUSZ֓ཁ Dockerﬁle docker image build docker image push
Docker Container Registory docker image pull docker container run ίί

%PDLFSIVC%PDLFS$MPVE ˞σϑΥϧτ 2VBZJP 'SPH"SUJGBDUPSZ #JOUSBZ
"84"[VSF($1ͦΕͧΕʹ΋ઐ༻αʔϏε 3FE)BUͷ0QFO4IJGUܥ͍Ζ͍Ζ طଘͷαʔϏε΋ଟ਺ଘࡏ

%PDLFSࣾͷϓϩδΣΫτɺ%JTUSJCVUJPO 3FHJTUSZͱͯ͠഑෍ ࠓ೔ͷ࿩͸ɺ%PDLFS3FHJTUSZ (JU)VCEPDLFSEJTUSJCVUJPO

֎෦ͱ௨৴͠ͳ͍ωοτϫʔΫ಺Ͱ%PDLFSΛ࢖͏ ࣗࣾαʔϏεͷೝূͱ࿈ܞͯ͠ɺ૊ΈࠐΉɻ NPCJOHJͰ͸͜ͷ༻్Ͱ࢖༻͍ͯ͠·͢ɻ 1SJWBUF3FHJTUSZͷ༻్ͬͯʁ

%PDLFS3FHJTUSZ

εςʔτϨε㲈εέʔϥϒϧ ରԠετϨʔδ ޙड़ ʹΑͬͯ͸ഁغɾೖସ͕؆୯ (6*ͳ͠ ೝূ͸ϩʔΧϧ%#ɺ·ͨ͸0"VUI࿈ܞ͕ར༻Մೳ
%PDLFSΠϝʔδ഑෍ɺجຊతʹ͸͜ΕΛར༻ %PDLFS3FHJTUSZͷಛ௃

ετϨʔδαϙʔτҰཡ ˞࣌఺ FileSystem / inmemory ϩʔΧϧʹอଘɻεέʔϧ͠·ͤΜɻ Azure Blob Storage Ϋϥ΢υαʔϏεͷ
ΦϒδΣΫτετϨʔδ ௨ৗ͸͜ΕΒͷ͍ͣΕ͔Λɻ Google Cloud Storage Amazon S3 Aliyun Object Storage Service OpenStack Swift 4XJGUʹอଘɻεέʔϧ͸Մɻ

WNXBSFIBSCPS 1PSUVT IUUQQPSUVTPSH ͦͷଞɺೝূͳ͠ Ӿཡ༻ ͳΒ৭ʑ Ϣʔβ؅ཧ͖ͭͷ(6*ϑϩϯτΤϯυ΋

$POpHVSJOHBSFHJTUSZ %PD IUUQTEPDTEPDLFSDPNSFHJTUSZDPOpHVSBUJPO ઃఆϑΝΠϧͷΩʔͱ؀ڥม਺ ༏ઌ ͕ରԠ
ZBNMͱϓϨϑΟΫεA3&(*453:@AͰಉҰ߲໨ %PDLFS3FHJTUSZͷઃఆ storage: filesystem: rootdirectory: /path/to/dir REGISTRY_STORAGE_FILESYSTEM_ROOTDIRECTORY=/path/to/dir ͜ΕΒ͕ಉ͡໾ׂ ˞Ұ෦ྫ֎ΞϦ

Ͱ͖ͳ͍ྫ "SSBZ໊લඃΓ :".-ͰͷΈઃఆՄೳ ରࡦ͸ݕ౼தʁ IUUQTHJUIVCDPNEPDLFSEJTUSJCVUJPOJTTVFT
؀ڥม਺ͷྫ֎ʹ͍ͭͯ notifications: endpoints: - name: foo url: http://foo.example.net/events - name: bar url: http://bar.example.net/events

%PDLFS 1SJWBUF 3FHJTUSZΛ "MJCBCB$MPVEͰߏங ౦ژϦʔδϣϯฤ

ߏ੒ྫ ˞&-#Ͱ͢ ˞"84༻ޠͰ ˞71$Ͱ͢ ˞*".Ͱ͢ ˞4Ͱ͢ ˞&$Ͱ͢ ˞ҰॹͰ͢

0CKFDU4UPSBHFόέοτ࡞੒ &$4Πϯελϯε࡞੒ σϑΥϧτ71$ %PDLFS3FHJTUSZηοτΞοϓ -PBE#BMBODFSΠϯελϯε࡞੒
"VUP4DBMJOHઃఆ ߏ੒खॱ

ߏ੒͸࣍ͷछྨ ελʔτΞοϓεΫϦϓτ ΧελϜΠϝʔδ "MJZVO-JOVY 3FE)BU&OUܥ ͱ͍͏ͷ͕͋Δ
Χʔωϧ͕৽͍͠ͷͰ%PDLFSFOHJOFʹ޲͍ͯΔ &$4Πϯελϯεʹ͍ͭͯ

%PDLFS͸ZVNͰ0, 0CKFDU4UPSBHFར༻ͷ  DPOpHZNMهड़ྫ ΠϯελϯεηοτΞοϓ $
sudo yum-config-manager —add-repo \ https://download.docker.com/linux/centos/docker-ce.repo $ sudo install docker-ce version: 0.1 http: secret: M@STERCLOUD addr: 0.0.0.0:5000 storage: oss: accesskeyid: {YOUR_ACCESS_KEY} accesskeysecret: {YOUR_ACCESS_KEY_SECRET} region: oss-ap-northeast-1 bucket: {YORU_BUCKET_NAME} internal: true secure: false chunksize: 52428800 delete: enabled: true

DPOpHZNMΛ༻ҙͨ͠Β EPDLFS୯ମͰࣗಈىಈઃఆΛ͓͖ͯ͠·͢ɻ ΠϯελϯεηοτΞοϓ $ sudo systemctl start
docker $ sudo systemctl enable docker $ docker run -p 5000:5000 --name registry \ --restart always -d \ -v `pwd`/config.yml:/etc/docker/registry/config.yml \ registry:2

୯ମͳΒ͹͜ͷ࣌఺ͰՔಇ͠·͢ ΠϯελϯεηοτΞοϓ $ curl 127.0.0.1:5000/v2/ {} $ docker
pull alpine:latest latest: Pulling from library/alpine Status: Image is up to date for alpine:latest $ docker tag alpine:latest localhost:5000/alpine:latest $ docker push localhost:5000/alpine:latest The push refers to a repository [localhost:5000/alpine] 3fb66f713c9f: Pushed JNBHFQVTI0,

ετϨʔδͷ༷ࢠ ΠϯελϯεηοτΞοϓ

࠷ޙʹΧελϜΠϝʔδ "VUP4DBMJOHͷ౎߹ ΠϯελϯεηοτΞοϓ

εέʔϧΞ΢τରԠ࣌ͷ஫ҙ શ؀ڥڞ௨ IUUQ@TFDSFU 3&(*453:@)551@4&$3&5 ͜ͷઃఆʹಉ͡จࣈྻΛઃఆ͢Δ
ϦΫΤετ͕ෳ਺ʹ͹Β͚ͯ΋ηογϣϯܧଓ ઃఆิ଍

"MJCBCBಛ༗ͷઃఆ ίπ TUPSBHF@PTT@JOUFSOBMUSVF 044ͷ಺෦ΤϯυϙΠϯτΛར༻ ͜ΕΛ͠ͳ͍ͱɺΩϟοϓ͕͔͔Γͱͯ΋஗͍ʂ
TUPSBHF@PTT@TFDVSFGBMTF ಺෦ΤϯυϙΠϯτ͸)551 TUPSBHF@PTT@DIVOLTJ[F .# ˞ࢀߟ ෼ׂΞοϓϩʔυ൑ఆ͢ΔαΠζɺJOUFSOBMͳΒେ͖Ίʹɻ ׬ྃ࣌ؒʹӨڹ ઃఆิ଍

Πϝʔδ͔ΒΠϯελϯεىಈ 4-# 71$֎ Λ࡞੒ɺΠϯελϯεඥ෇͚ Ϧεφʔ͸5$15$1 ϔϧενΣοΫ༗ޮ
"VUP4DBMFཁ݅ -PBE#BMBODFS 4-#

Πϯελϯεͷ͋Δ71$Λબ୒ ౦ژϦʔδϣϯ͸71$ඞਢ 4-#Λࢦఆ ϕʔεΠϯελϯεʹɺىಈࡁΈͷ&$4Πϯελϯε Λࢦఆ
NBYNJOͷ୆਺Λద౰ʹมߋ "VUP4DBMJOHઃఆ

"VUP4DBMJOHίϯιʔϧͷ༷ࢠ

Ҏ্Ͱ͜ͷߏ੒ʹͳΓ·͢ɻ ˞&-#Ͱ͢ ˞"84༻ޠͰ ˞71$Ͱ͢ ˞*".Ͱ͢ ˞4Ͱ͢ ˞&$Ͱ͢ ˞ҰॹͰ͢

ಈ࡞ςετ $ curl http://{SLBͷIPΞυϨε}/v2/_catalog {"repositories":["alpine","myfirstimage"]} ςετͰQVTIͨ͠Πϝʔδ͕ࢀরͰ͖·ͨ͠ ͜ͷঢ়ଶͰEPDLFS͔Β࢖༻͢Δ৔߹͸ɺ  A4-#ͷ*1ΞυϨεAΛJOTFDVSFSFHJTUSJFTʹؚΊ·
͢

ϩʔΧϧͰ΋Α͍ͷͰɺೝূΛ /4Ͱ"ϨίʔυΛద༻ 4-#ʹ͸$/".&༻ͷσϑΥϧτϨίʔυͳ͠ αʔόূ໌ॻΛ4-#ʹઃఆ
"84ͷ$FSUJpDBUF.BOBHFS૬౰͕ఏڙ͞ΕΔͱخ͍͠Ͱ͢Ͷʜ 6QHSBEF࣌͸΋͏Ұ౓ΧελϜΠϝʔδΛ࡞੒ೖସ ͪΌΜͱ࢖͏ͳΒɺ΋͏Ұखؒ

Docker Private Registryのデプロイと運用

Docker Private Registryのデプロイと運用

Yukihiko SAWANOBORI

More Decks by Yukihiko SAWANOBORI

Other Decks in Technology

Featured

Transcript

%PDLFS1SJWBUF3FHJTUSZ ͷσϓϩΠͱӡ༻ ୈճ.BTUFS$MPVE !TBXBOPCPMZ .PCJOHJ,, )JHBO8PSLT--$

%PDLFSΠϝʔδΛอଘɺ഑෍͢ΔαʔϏε %PDLFS$POUBJOFS3FHJTUSZ֓ཁ Dockerﬁle docker image build docker image push

%PDLFSIVC%PDLFS$MPVE ˞σϑΥϧτ 2VBZJP 'SPH"SUJGBDUPSZ #JOUSBZ

%PDLFSࣾͷϓϩδΣΫτɺ%JTUSJCVUJPO 3FHJTUSZͱͯ͠഑෍ ࠓ೔ͷ࿩͸ɺ%PDLFS3FHJTUSZ (JU)VCEPDLFSEJTUSJCVUJPO

֎෦ͱ௨৴͠ͳ͍ωοτϫʔΫ಺Ͱ%PDLFSΛ࢖͏ ࣗࣾαʔϏεͷೝূͱ࿈ܞͯ͠ɺ૊ΈࠐΉɻ NPCJOHJͰ͸͜ͷ༻్Ͱ࢖༻͍ͯ͠·͢ɻ 1SJWBUF3FHJTUSZͷ༻్ͬͯʁ

%PDLFS3FHJTUSZ

εςʔτϨε㲈εέʔϥϒϧ ରԠετϨʔδ ޙड़ ʹΑͬͯ͸ഁغɾೖସ͕؆୯ (6*ͳ͠ ೝূ͸ϩʔΧϧ%#ɺ·ͨ͸0"VUI࿈ܞ͕ར༻Մೳ

ετϨʔδαϙʔτҰཡ ˞࣌఺ FileSystem / inmemory ϩʔΧϧʹอଘɻεέʔϧ͠·ͤΜɻ Azure Blob Storage Ϋϥ΢υαʔϏεͷ

WNXBSFIBSCPS 1PSUVT IUUQQPSUVTPSH ͦͷଞɺೝূͳ͠ Ӿཡ༻ ͳΒ৭ʑ Ϣʔβ؅ཧ͖ͭͷ(6*ϑϩϯτΤϯυ΋

$POpHVSJOHBSFHJTUSZ %PD IUUQTEPDTEPDLFSDPNSFHJTUSZDPOpHVSBUJPO ઃఆϑΝΠϧͷΩʔͱ؀ڥม਺ ༏ઌ ͕ରԠ

Ͱ͖ͳ͍ྫ "SSBZ໊લඃΓ :".-ͰͷΈઃఆՄೳ ରࡦ͸ݕ౼தʁ IUUQTHJUIVCDPNEPDLFSEJTUSJCVUJPOJTTVFT

%PDLFS 1SJWBUF 3FHJTUSZΛ "MJCBCB$MPVEͰߏங ౦ژϦʔδϣϯฤ

ߏ੒ྫ ˞&-#Ͱ͢ ˞"84༻ޠͰ ˞71$Ͱ͢ ˞*".Ͱ͢ ˞4Ͱ͢ ˞&$Ͱ͢ ˞ҰॹͰ͢

0CKFDU4UPSBHFόέοτ࡞੒ &$4Πϯελϯε࡞੒ σϑΥϧτ71$ %PDLFS3FHJTUSZηοτΞοϓ -PBE#BMBODFSΠϯελϯε࡞੒

ߏ੒͸࣍ͷछྨ ελʔτΞοϓεΫϦϓτ ΧελϜΠϝʔδ "MJZVO-JOVY 3FE)BU&OUܥ ͱ͍͏ͷ͕͋Δ

%PDLFS͸ZVNͰ0, 0CKFDU4UPSBHFར༻ͷ  DPOpHZNMهड़ྫ ΠϯελϯεηοτΞοϓ $

DPOpHZNMΛ༻ҙͨ͠Β EPDLFS୯ମͰࣗಈىಈઃఆΛ͓͖ͯ͠·͢ɻ ΠϯελϯεηοτΞοϓ $ sudo systemctl start

୯ମͳΒ͹͜ͷ࣌఺ͰՔಇ͠·͢ ΠϯελϯεηοτΞοϓ $ curl 127.0.0.1:5000/v2/ {} $ docker

ετϨʔδͷ༷ࢠ ΠϯελϯεηοτΞοϓ

࠷ޙʹΧελϜΠϝʔδ "VUP4DBMJOHͷ౎߹ ΠϯελϯεηοτΞοϓ

εέʔϧΞ΢τରԠ࣌ͷ஫ҙ શ؀ڥڞ௨ IUUQ@TFDSFU 3&(*453:@)551@4&$3&5 ͜ͷઃఆʹಉ͡จࣈྻΛઃఆ͢Δ

"MJCBCBಛ༗ͷઃఆ ίπ TUPSBHF@PTT@JOUFSOBMUSVF 044ͷ಺෦ΤϯυϙΠϯτΛར༻ ͜ΕΛ͠ͳ͍ͱɺΩϟοϓ͕͔͔Γͱͯ΋஗͍ʂ

Πϝʔδ͔ΒΠϯελϯεىಈ 4-# 71$֎ Λ࡞੒ɺΠϯελϯεඥ෇͚ Ϧεφʔ͸5$15$1 ϔϧενΣοΫ༗ޮ

Πϯελϯεͷ͋Δ71$Λબ୒ ౦ژϦʔδϣϯ͸71$ඞਢ 4-#Λࢦఆ ϕʔεΠϯελϯεʹɺىಈࡁΈͷ&$4Πϯελϯε Λࢦఆ

"VUP4DBMJOHίϯιʔϧͷ༷ࢠ

Ҏ্Ͱ͜ͷߏ੒ʹͳΓ·͢ɻ ˞&-#Ͱ͢ ˞"84༻ޠͰ ˞71$Ͱ͢ ˞*".Ͱ͢ ˞4Ͱ͢ ˞&$Ͱ͢ ˞ҰॹͰ͢

ಈ࡞ςετ $ curl http://{SLBͷIPΞυϨε}/v2/_catalog {"repositories":["alpine","myfirstimage"]} ςετͰQVTIͨ͠Πϝʔδ͕ࢀরͰ͖·ͨ͠ ͜ͷঢ়ଶͰEPDLFS͔Β࢖༻͢Δ৔߹͸ɺ  A4-#ͷ*1ΞυϨεAΛJOTFDVSFSFHJTUSJFTʹؚΊ·

ϩʔΧϧͰ΋Α͍ͷͰɺೝূΛ /4Ͱ"ϨίʔυΛద༻ 4-#ʹ͸$/".&༻ͷσϑΥϧτϨίʔυͳ͠ αʔόূ໌ॻΛ4-#ʹઃఆ