Dockerイメージ置き場の件

%PDLFSΠϝʔδஔ͖৔ͷ݅ ඌ৲݈ !LFOPKJSJ

•  %PDLFSΠϝʔδ͸Ͳ͜ʹஔ͔Ε͏Δͷ͔ •  %PDLFSΠϝʔδͷஔ͖৔ॴΛ޻෉ͨ͠ͱ ͜ΖͰԿ͕͏Ε͍͠ͷ͔ •  %PDLFSΠϝʔδͷஔ͖৔ॴͳͲʹΑͬͯ ૢ࡞΍ઃఆ͕Ͳ͏มΘΔͷ͔ ͓͠ͳ͕͖

ͦ͏͍͑͹%PDLFSΠϝʔδͬͯͳΜ͚ͩͬ ˞ԼهࢿྉΑΓҾ༻ ɹhttp://www.slideshare.net/zembutsu/docker-images-containers-and-lifecycle

ᶃ  %PDLFSϗετͷϑΝΠϧγεςϜ಺ •  EPDLFSQVMM΍EPDLFSSVOͳͲͷίϚϯυͰ ϦϞʔτ͔Βऔಘͨ͠Πϝʔδ΍ɺ EPDLFSCVJME΍EPDLFSDPNNJUͳͲͷίϚ ϯυͰ࡞੒ͨ͠ΠϝʔδͷϩʔΧϧͷอଘઌ •  -JOVYͩͱWBSMJCEPDLFS഑Լ %PDLFSΠϝʔδஔ͖৔ͷόϦΤʔγϣϯᶃ

ᶄ  %PDLFS)VC΍2VBZJPͳͲͷQVCMJD%PDLFS SFHJTUSZ •  EPDLFSQVMMίϚϯυͰͷΠϝʔδμ΢ϯϩʔυ ݩɺ͔ͭEPDLFSQVTIίϚϯυͰͷΠϝʔδ ΞοϓϩʔυઌͱͳΓ͏Δ •  Πϯλʔωοτͷ୭Ͱ΋μ΢ϯϩʔυͰ͖ΔΠ ϝʔδͷஔ͖৔͸QVCMJDSFQPTJUPSZɺಛఆͷਓ
͚͕ͩμ΢ϯϩʔυͰ͖ΔΠϝʔδͷஔ͖৔͸ QSJWBUFSFQPTJUPSZͱݺ͹ΕΔʢΑͶʁʣ •  QSJWBUFSFQPTJUPSZͷ࡞੒͸༗ྉͩͬͨΓ͢Δ •  ͲͪΒͷSFQPTJUPSZ΋EPDLFSQVTIʹ͋ͨͬ ͯ͸Ϣʔβೝূཁ •  EPDLFSίϚϯυͰSFHJTUSZΛಛʹࢦఆ͠ͳ ͚Ε͹σϑΥϧτͰ%PDLFS)VC͕࢖ΘΕΔ %PDLFSΠϝʔδஔ͖৔ͷόϦΤʔγϣϯᶄ

ᶅ  ࣗલͰཱͯΔQSJWBUF%PDLFSSFHJTUSZ •  EPDLFSQVMMίϚϯυͰͷΠϝʔδμ΢ϯ ϩʔυݩɺ͔ͭEPDLFSQVTIίϚϯυͰͷ ΠϝʔδΞοϓϩʔυઌͱͳΓ͏Δ •  -"/ͱ͔ϓϥΠϕʔτΫϥ΢υͱ͔71$಺ ʹཱͯΔ͜ͱͰɺΠϝʔδͷμ΢ϯϩʔυ ઌΞοϓϩʔυݩΛݶఆͰ͖Δ
•  QSJWBUFSFQPTJUPSZ΋ఏڙͰ͖Δ •  %PDLFS͕ࣾ044ʹ͍ͯ͠ΔSFHJTUSZͰ΋ ఏڙՄೳʹͳͬͯͨʢ͍ͭͷؒʹʂʁʣ TFFhttps://docs.docker.com/registry/deploying/#/ restricting-access %PDLFSΠϝʔδஔ͖৔ͷόϦΤʔγϣϯᶅ

ֆͰ·ͱΊΔͱ Πϯλʔωοτ -"/QSJWBUFDMPVE 71$ ᶃ ϩʔΧϧϑΝΠϧγεςϜ಺ ᶄQVCMJD%PDLFSSFHJTUSZ QVCMJDSFQPTJUPSZˠ ˡQSJWBUFSFQPTJUPSZ ᶅQSJWBUF%PDLFSSFHJTUSZ

•  ՝ۚͳ͠Ͱ%PDLFSΠϝʔδΛൿಗ͢ΔͨΊʹ •  QVCMJDSFHJTUSZ͕ఏڙ͢ΔQSJWBUF SFQPTJUPSZͰ͸৘ใ؅ཧʹෆ҆Λ๊͔ΕΔ ΤϯλʔϓϥΠζ স ͳ͓٬༷ʹ QSJWBUF%PDLFSSFHJTUSZͷ࢖͍Ͳ͜Ζ

՝ۚͳ͠Ͱ%PDLFSΠϝʔδΛൿಗ͢ΔͨΊʹ Πϯλʔωοτ -"/QSJWBUFDMPVE 71$ ᶃ ϩʔΧϧϑΝΠϧγεςϜ಺ ᶄQVCMJD%PDLFSSFHJTUSZ ᶅQSJWBUF%PDLFSSFHJTUSZ

•  ՝ۚͳ͠Ͱ%PDLFSΠϝʔδΛൿಗ͢ΔͨΊʹ •  QVCMJDSFHJTUSZ͕ఏڙ͢ΔQSJWBUF SFQPTJUPSZͰ͸৘ใ؅ཧʹෆ҆Λ๊͔ΕΔ ΤϯλʔϓϥΠζ স ͳ͓٬༷ʹ •  खݩͷෳ਺ͷ%PDLFSϗετؒͰ%PDLFSΠ
ϝʔδΛ࢖͍ճͨ͢Ίʹ •  ϦϞʔτ͔ΒͷΠϝʔδμ΢ϯϩʔυ͸஗ ͍ͷͰɺಡΈࠐΈΩϟογϡͱͯ͠ •  $*ʹΑͬͯසൟʹΠϝʔδΛ࡞੒͢ΔͷͰɺ ςετ༻ΠϝʔδͷҰ࣌తஔ͖৔ॴͱͯ͠ QSJWBUF%PDLFSSFHJTUSZͷ࢖͍Ͳ͜Ζ

खݩͷෳ਺ͷ%PDLFSϗετؒͰ ɹɹɹɹ%PDLFSΠϝʔδΛ࢖͍ճͨ͢Ίʹ Πϯλʔωοτ -"/QSJWBUFDMPVE 71$ ᶄQVCMJD%PDLFSSFHJTUSZ ᶅQSJWBUF%PDLFSSFHJTUSZ ஗͍ͷϠμ

˞%PDLFSࣾ੡044൛SFHJTUSZΛ࢖͏લఏ •  ·ͣ͸͓ࢼ͠Ͱ%PDLFSίϯςφͱͯ͠ىಈ͢Δ •  3FHJTUSZʹอଘ͢Δ%PDLFSΠϝʔδΛ%PDLFSϗετ্ͷϑΝΠϧ γεςϜͰӬଓԽ͢Δ •  )5514ͰαʔϏε͢Δ ͪΌΜͱͨ͠ূ໌ॻΛ࢖͑͹޾ͤʹͳΕΔΑʂʲޙड़ʳ
QSJWBUF%PDLFSSFHJTUSZͷͭ͘Γ͔ͨᶃ $ docker run -d -p 5000:5000 registry:2 $ docker run -d -p 5000:5000 \ -v /srv/registry:/var/lib/registry \ registry:2 $ docker run -d -p 5000:5000 \ -v /srv/registry-certs:/certs \ -e REGISTRY_HTTP_TLS_CERTIFICATE=/certs/domain.crt \ -e REGISTRY_HTTP_TLS_KEY=/certs/domain.key \ registry:2

˞(6*΋΄͍͠Ͱ͠ΐʁ͋ΔΑ QSJWBUF%PDLFSSFHJTUSZͷͭ͘Γ͔ͨᶄ $ docker run -d -p 8080:80 \ -e
ENV_DOCKER_REGISTRY_HOST: 192.168.0.1 \ -e ENV_DOCKER_REGISTRY_PORT: 5000 \ konradkleine/docker-registry-frontend:v2

QSJWBUF%PDLFSSFHJTUSZͷͭ͘Γ͔ͨᶅ ଞʹ΋ɾɾɾ •  7.XBSF੡044IBSCPSΛ࢖͏ •  ͳΜ͔ͱͬͯ΋Α͍΋ͷΒ͍͠Αʂ •  (JU-BCΛ࢖͏ •  ͦ͏͍͏ػೳ͕͋ΔΒ͍͠Ͱ͢Ͷ
•  %PDLFS%BUBDFOUFSͱ͔ 2VBZ&OUFSQSJTFͱ͔Λങͬͯ࢖͏ •  ශ๡ੑͷΦϨͨͪʹ͸ݫ͍͠ ͳͲͳͲ

•  %PDLFS)VCΛ࢖͏৔߹ •  )551ͰαʔϏε͞Ε͍ͯΔSFHJTUSZΛ࢖͏৔߹ •  )5514ͰαʔϏε͞Ε͍ͯΔSFHJTUSZΛ࢖͏৔߹ EPDLFSίϚϯυͰͷSFHJTUSZࢦఆ $ docker pull
ozz/hoge $ docker login $ docker tag hogehoge ozz/hoge $ docker push ozz/hoge $ docker pull 192.168.0.1:5000/ozz/hoge $ docker tag hoge 192.168.0.1:5000/ozz/hoge $ docker push 192.168.0.1:5000/ozz/hoge $ docker pull reg.nttlabs.info:5000/ozz/hoge $ docker tag hoge reg.nttlabs.info:5000/ozz/hoge $ docker push reg.nttlabs.info:5000/ozz/hoge ˞ͨͩ͠ɺEPDLFSσʔϞϯʹJOTFDVSFSFHJTUSZͷઃఆཁʲޙड़ʳ ˞ͨͩ͠ɺSFHJTUSZ͕ΦϨΦϨূ໌ॻͳͲݕূύε͕ແޮͳαʔόূ໌ॻΛ ɹ࢖༻͍ͯ͠Δ৔߹͸ɺEPDLFSσʔϞϯʹJOTFDVSFSFHJTUSZͷઃఆཁʲޙड़ʳ

•  FUDEFGBVMUEPDLFSʹઃఆΛ௥Ճ͠ɺ %PDLFSσʔϞϯΛ࠶ىಈ 6CVOUV 6QTUBSUΛ࠾༻ ͷ JOTFDVSFSFHJTUSZઃఆ $ sudo vim
/etc/default/docker === DOCKER_OPTS="--insecure-registry=192.168.0.1:5000" === $ sudo service docker restart

6CVOUV TZTUFNEΛ࠾༻ ͷ JOTFDVSFSFHJTUSZઃఆ •  FUDTZTUFNETZTUFNEPDLFSTFSWJDFE഑Լ ʹઃఆϑΝΠϧΛ௥Ճ͠ɺTZTUFNEʹ৽ͨͳઃ ఆΛೝࣝͤ͞ɺ%PDLFSσʔϞϯΛ࠶ىಈ $ sudo
mkdir /etc/systemd/system/docker.service.d/ $ sudo vim /etc/systemd/system/docker.service.d/ insecure-registry.conf === [Service]! ExecStart=! ExecStart=/usr/bin/dockerd -H fd:// --insecure-registry=192.168.0.1:5000! === $ sudo systemctl daemon-reload $ sudo systemctl show docker $ sudo systemctl restart docker.service

•  ਖ਼͘͠ཧղ͠ݡ͘࢖͓͏ ɹɹɹɹɹɹSFHJTUSZͱSFQPTJUPSZ •  ؾΛ͚ͭΑ͏ ɹɹɹɹɹSFHJTUSZͷσΟεΫ༰ྔ •  Ұ໷௮͚ɹ಺༰ബͯ͘͝ΊΜͳ͍͞ ͓ΘΓʹ

Dockerイメージ置き場の件

Dockerイメージ置き場の件

ozzozz

More Decks by ozzozz

Other Decks in Technology

Featured

Transcript

%PDLFSΠϝʔδஔ͖৔ͷ݅ ඌ৲݈ !LFOPKJSJ

•  %PDLFSΠϝʔδ͸Ͳ͜ʹஔ͔Ε͏Δͷ͔ •  %PDLFSΠϝʔδͷஔ͖৔ॴΛ޻෉ͨ͠ͱ ͜ΖͰԿ͕͏Ε͍͠ͷ͔ •  %PDLFSΠϝʔδͷஔ͖৔ॴͳͲʹΑͬͯ ૢ࡞΍ઃఆ͕Ͳ͏มΘΔͷ͔ ͓͠ͳ͕͖

ͦ͏͍͑͹%PDLFSΠϝʔδͬͯͳΜ͚ͩͬ ˞ԼهࢿྉΑΓҾ༻ ɹhttp://www.slideshare.net/zembutsu/docker-images-containers-and-lifecycle

ͦ͏͍͑͹%PDLFSΠϝʔδͬͯͳΜ͚ͩͬ ˞ԼهࢿྉΑΓҾ༻ ɹhttp://www.slideshare.net/zembutsu/docker-images-containers-and-lifecycle

•  %PDLFSΠϝʔδ͸Ͳ͜ʹஔ͔Ε͏Δͷ͔ •  %PDLFSΠϝʔδͷஔ͖৔ॴΛ޻෉ͨ͠ͱ ͜ΖͰԿ͕͏Ε͍͠ͷ͔ •  %PDLFSΠϝʔδͷஔ͖৔ॴͳͲʹΑͬͯ ૢ࡞΍ઃఆ͕Ͳ͏มΘΔͷ͔ ͓͠ͳ͕͖

ᶃ  %PDLFSϗετͷϑΝΠϧγεςϜ಺ •  EPDLFSQVMM΍EPDLFSSVOͳͲͷίϚϯυͰ ϦϞʔτ͔Βऔಘͨ͠Πϝʔδ΍ɺ EPDLFSCVJME΍EPDLFSDPNNJUͳͲͷίϚ ϯυͰ࡞੒ͨ͠ΠϝʔδͷϩʔΧϧͷอଘઌ •  -JOVYͩͱWBSMJCEPDLFS഑Լ %PDLFSΠϝʔδஔ͖৔ͷόϦΤʔγϣϯᶃ

ᶄ  %PDLFS)VC΍2VBZJPͳͲͷQVCMJD%PDLFS SFHJTUSZ •  EPDLFSQVMMίϚϯυͰͷΠϝʔδμ΢ϯϩʔυ ݩɺ͔ͭEPDLFSQVTIίϚϯυͰͷΠϝʔδ ΞοϓϩʔυઌͱͳΓ͏Δ •  Πϯλʔωοτͷ୭Ͱ΋μ΢ϯϩʔυͰ͖ΔΠ ϝʔδͷஔ͖৔͸QVCMJDSFQPTJUPSZɺಛఆͷਓ

ᶅ  ࣗલͰཱͯΔQSJWBUF%PDLFSSFHJTUSZ •  EPDLFSQVMMίϚϯυͰͷΠϝʔδμ΢ϯ ϩʔυݩɺ͔ͭEPDLFSQVTIίϚϯυͰͷ ΠϝʔδΞοϓϩʔυઌͱͳΓ͏Δ •  -"/ͱ͔ϓϥΠϕʔτΫϥ΢υͱ͔71$಺ ʹཱͯΔ͜ͱͰɺΠϝʔδͷμ΢ϯϩʔυ ઌΞοϓϩʔυݩΛݶఆͰ͖Δ

ֆͰ·ͱΊΔͱ Πϯλʔωοτ -"/QSJWBUFDMPVE 71$ ᶃ ϩʔΧϧϑΝΠϧγεςϜ಺ ᶄQVCMJD%PDLFSSFHJTUSZ QVCMJDSFQPTJUPSZˠ ˡQSJWBUFSFQPTJUPSZ ᶅQSJWBUF%PDLFSSFHJTUSZ

•  %PDLFSΠϝʔδ͸Ͳ͜ʹஔ͔Ε͏Δͷ͔ •  %PDLFSΠϝʔδͷஔ͖৔ॴΛ޻෉ͨ͠ͱ ͜ΖͰԿ͕͏Ε͍͠ͷ͔ •  %PDLFSΠϝʔδͷஔ͖৔ॴͳͲʹΑͬͯ ૢ࡞΍ઃఆ͕Ͳ͏มΘΔͷ͔ ͓͠ͳ͕͖

•  ՝ۚͳ͠Ͱ%PDLFSΠϝʔδΛൿಗ͢ΔͨΊʹ •  QVCMJDSFHJTUSZ͕ఏڙ͢ΔQSJWBUF SFQPTJUPSZͰ͸৘ใ؅ཧʹෆ҆Λ๊͔ΕΔ ΤϯλʔϓϥΠζ স ͳ͓٬༷ʹ QSJWBUF%PDLFSSFHJTUSZͷ࢖͍Ͳ͜Ζ

՝ۚͳ͠Ͱ%PDLFSΠϝʔδΛൿಗ͢ΔͨΊʹ Πϯλʔωοτ -"/QSJWBUFDMPVE 71$ ᶃ ϩʔΧϧϑΝΠϧγεςϜ಺ ᶄQVCMJD%PDLFSSFHJTUSZ ᶅQSJWBUF%PDLFSSFHJTUSZ

•  ՝ۚͳ͠Ͱ%PDLFSΠϝʔδΛൿಗ͢ΔͨΊʹ •  QVCMJDSFHJTUSZ͕ఏڙ͢ΔQSJWBUF SFQPTJUPSZͰ͸৘ใ؅ཧʹෆ҆Λ๊͔ΕΔ ΤϯλʔϓϥΠζ স ͳ͓٬༷ʹ •  खݩͷෳ਺ͷ%PDLFSϗετؒͰ%PDLFSΠ

खݩͷෳ਺ͷ%PDLFSϗετؒͰ ɹɹɹɹ%PDLFSΠϝʔδΛ࢖͍ճͨ͢Ίʹ Πϯλʔωοτ -"/QSJWBUFDMPVE 71$ ᶄQVCMJD%PDLFSSFHJTUSZ ᶅQSJWBUF%PDLFSSFHJTUSZ ஗͍ͷϠμ

˞%PDLFSࣾ੡044൛SFHJTUSZΛ࢖͏લఏ •  ·ͣ͸͓ࢼ͠Ͱ%PDLFSίϯςφͱͯ͠ىಈ͢Δ •  3FHJTUSZʹอଘ͢Δ%PDLFSΠϝʔδΛ%PDLFSϗετ্ͷϑΝΠϧ γεςϜͰӬଓԽ͢Δ •  )5514ͰαʔϏε͢Δ ͪΌΜͱͨ͠ূ໌ॻΛ࢖͑͹޾ͤʹͳΕΔΑʂʲޙड़ʳ

˞(6*΋΄͍͠Ͱ͠ΐʁ͋ΔΑ QSJWBUF%PDLFSSFHJTUSZͷͭ͘Γ͔ͨᶄ $ docker run -d -p 8080:80 \ -e

QSJWBUF%PDLFSSFHJTUSZͷͭ͘Γ͔ͨᶅ ଞʹ΋ɾɾɾ •  7.XBSF੡044IBSCPSΛ࢖͏ •  ͳΜ͔ͱͬͯ΋Α͍΋ͷΒ͍͠Αʂ •  (JU-BCΛ࢖͏ •  ͦ͏͍͏ػೳ͕͋ΔΒ͍͠Ͱ͢Ͷ

•  %PDLFSΠϝʔδ͸Ͳ͜ʹஔ͔Ε͏Δͷ͔ •  %PDLFSΠϝʔδͷஔ͖৔ॴΛ޻෉ͨ͠ͱ ͜ΖͰԿ͕͏Ε͍͠ͷ͔ •  %PDLFSΠϝʔδͷஔ͖৔ॴͳͲʹΑͬͯ ૢ࡞΍ઃఆ͕Ͳ͏มΘΔͷ͔ ͓͠ͳ͕͖

•  %PDLFS)VCΛ࢖͏৔߹ •  )551ͰαʔϏε͞Ε͍ͯΔSFHJTUSZΛ࢖͏৔߹ •  )5514ͰαʔϏε͞Ε͍ͯΔSFHJTUSZΛ࢖͏৔߹ EPDLFSίϚϯυͰͷSFHJTUSZࢦఆ $ docker pull

•  FUDEFGBVMUEPDLFSʹઃఆΛ௥Ճ͠ɺ %PDLFSσʔϞϯΛ࠶ىಈ 6CVOUV 6QTUBSUΛ࠾༻ ͷ JOTFDVSFSFHJTUSZઃఆ $ sudo vim

6CVOUV TZTUFNEΛ࠾༻ ͷ JOTFDVSFSFHJTUSZઃఆ •  FUDTZTUFNETZTUFNEPDLFSTFSWJDFE഑Լ ʹઃఆϑΝΠϧΛ௥Ճ͠ɺTZTUFNEʹ৽ͨͳઃ ఆΛೝࣝͤ͞ɺ%PDLFSσʔϞϯΛ࠶ىಈ $ sudo

•  %PDLFSΠϝʔδ͸Ͳ͜ʹஔ͔Ε͏Δͷ͔ •  %PDLFSΠϝʔδͷஔ͖৔ॴΛ޻෉ͨ͠ͱ ͜ΖͰԿ͕͏Ε͍͠ͷ͔ •  %PDLFSΠϝʔδͷஔ͖৔ॴͳͲʹΑͬͯ ૢ࡞΍ઃఆ͕Ͳ͏มΘΔͷ͔ ͓͠ͳ͕͖

•  ਖ਼͘͠ཧղ͠ݡ͘࢖͓͏ ɹɹɹɹɹɹSFHJTUSZͱSFQPTJUPSZ •  ؾΛ͚ͭΑ͏ ɹɹɹɹɹSFHJTUSZͷσΟεΫ༰ྔ •  Ұ໷௮͚ɹ಺༰ബͯ͘͝ΊΜͳ͍͞ ͓ΘΓʹ