example: 1. create your own key and get a certificate for it. save it to: /root/certs/domain.key /root/certs/domain.crt 2. create on your host a directory where the repository get archived. mkdir /mnt/sdb1/docker 3. run: docker run -d -p 5000:5000 --restart=always --name registry -v /mnt/sdb1/docker:/var/lib/registry -v /root/certs:/certs -e REGISTRY_HTTP_TLS_CERTIFICATE=/certs/domain.crt -e REGISTRY_HTTP_TLS_KEY=/certs/domain.key registry:2 4. test: docker tag debain mydomain.com:5000/debian docker push mydomain.com:5000/debian docker pull mydomain.com:5000/debian or example with image lea and domain neriene.com docker tag lea neriene.com:5000/lea docker push neriene.com:5000/lea

https://docs.docker.com/registry/deploying/

with authentication mkdir auth docker run --entrypoint htpasswd registry:2 -Bbn foo password > auth/htpasswd use than like: docker run -d -p 5000:5000 --restart=always --name registry \ -v `pwd`/auth:/auth \ -e "REGISTRY_AUTH=htpasswd" \ -e "REGISTRY_AUTH_HTPASSWD_REALM=Registry Realm" \ -e REGISTRY_AUTH_HTPASSWD_PATH=/auth/htpasswd \ -v `pwd`/certs:/certs \ -e REGISTRY_HTTP_TLS_CERTIFICATE=/certs/domain.crt \ -e REGISTRY_HTTP_TLS_KEY=/certs/domain.key \ registry:2 Usage: htpasswd [-cimBdpsDv] [-C cost] passwordfile username htpasswd -b[cmBdpsDv] [-C cost] passwordfile username password htpasswd -n[imBdps] [-C cost] username htpasswd -nb[mBdps] [-C cost] username password -c Create a new file. -n Don't update file; display results on stdout. -b Use the password from the command line rather than prompting for it. -i Read password from stdin without verification (for script usage). -m Force MD5 encryption of the password (default). -B Force bcrypt encryption of the password (very secure). -C Set the computing time used for the bcrypt algorithm (higher is more secure but slower, default: 5, valid: 4 to 31). -d Force CRYPT encryption of the password (8 chars max, insecure). -s Force SHA encryption of the password (insecure). -p Do not encrypt the password (plaintext, insecure). -D Delete the specified user. -v Verify password for the specified user. 20.12.16 example: docker run --entrypoint htpasswd registry:2 -Bbn testuser testpassword > auth/htpasswd docker run -d -p 5000:5000 --restart=always --name registry -v /root/auth:/auth -e "REGISTRY_AUTH=htpasswd" -e "REGISTRY_AUTH_HTPASSWD_REALM=Registry Realm" -e REGISTRY_AUTH_HTPASSWD_PATH=/auth/htpasswd -v /etc/ssl/froxlor-custom/certs:/certs -e REGISTRY_HTTP_TLS_CERTIFICATE=/etc/ssl/froxlor-custom/cicurina.com.crt -e REGISTRY_HTTP_TLS_KEY=/certs/etc/ssl/froxlor-custom/cicurina.com.key registry:2 20.12.16

https://docs.docker.com/registry/deploying/

working example with froxlor and docker registry 1. creat a joint pem cert file cat cicurina.com.crt cicurina.com_CA.pem cicurina.com_CA.pem > cicurina.com.pem 2. docker run -d -p 5000:5000 --restart=always --name registry -v /root/auth:/auth -e "REGISTRY_AUTH=htpasswd" -e "REGISTRY_AUTH_HTPASSWD_REALM=Registry Realm" -e REGISTRY_AUTH_HTPASSWD_PATH=/auth/htpasswd -v /etc/ssl/froxlor-custom:/certs -e REGISTRY_HTTP_TLS_CERTIFICATE=/certs/cicurina.com.pem -e REGISTRY_HTTP_TLS_KEY=/certs/cicurina.com.key registry:2 3. test https: curl https://cicurina.com:5000/v2 4. login: docker login -u foo -p PASSWORD cicurina.com:5000 5 push: docker push cicurina.com:5000/yacy 20.12.16

https://docs.docker.com/registry/deploying/

with your froxlor letsencrypt certs docker run -d -p 5000:5000 -v /etc/ssl/froxlor-custom/certs:/certs -e REGISTRY_HTTP_TLS_CERTIFICATE=/certs/cicurina.com.crt -e REGISTRY_HTTP_TLS_KEY=/certs/cicurina.com.key --restart=always --name registry registry:2 20.12.16

• Home
• Notebook
• Contact us

• Privacy Statement
• 

Copyleft ☠ 2024