$root@docker \~$ # mkdir auth

$root@docker \~$ # htpasswd -Bc auth/.htpasswd folian

New password:

Re-type new password:

Adding password for user folian

$root@docker \~$ # cat auth/.htpasswd

folian: $2y$ 05$j.zeXhTzsLRDuNy.pjATteJWCLzne//ce.gFUOXX4/LdKnmFqFH92

$root@docker \~$ #

$root@docker \~$ # htpasswd -B auth/.htpasswd admin

New password:

Re-type new password:

Adding password for user admin

$root@docker \~$ # cat auth/.htpasswd

admin: $2y$ 05$ZcNbQW./n0iYGj828W4WfePZsBMEPceoQb1i26ogQA72K9KWe7mpe

##建立好了后，如何使得镜像仓库能识别这个文件？

$root@docker \~$ # docker run -d -p 443:443 --restart=always --name registry \> --name registry -v /opt/registry:/var/lib/registry \> -v /root/certs:/certs \ > -e REGISTRY_HTTP_ADDR=0.0.0.0:443 \

> -e REGISTRY_HTTP_TLS_CERTIFICATE=/certs/folian.org.crt \

> -e REGISTRY_HTTP_TLS_KEY=/certs/folian.org.key \

> -v /root/auth:/auth \

> -e "REGISTRY_AUTH=htpasswd" \

> -e "REGISTRY_AUTH_HTPASSWD_REALM=Registry Realm" \

> -e REGISTRY_AUTH_HTPASSWD_PATH=/auth/htpasswd \

> registry

推送上传镜像：失败：因为没登录

$root@docker \~$ # docker tag nginx:latest reg.folian.org/nginx:latest

$root@docker \~$ # docker push reg.folian.org/nginx:latest

修改： $root@docker \~$ # docker run -d -p 443:443 --restart=always -v /root/certs:/certs -e REGISTRY_HTTP_ADDR=0.0.0.0:443 -e REGISTRY_HTTP_TLS_CERTIFICATE=/certs/folian.org.crt -e REGISTRY_HTTP_TLS_KEY=/certs/folian.org.key -v /root/auth:/auth -e REGISTRY_AUTH=htpasswd -e REGISTRY_AUTH_HTPASSWD_REALM="Registry Realm" -e REGISTRY_AUTH_HTPASSWD_PATH=/auth/.htpasswd registry

2119f030f213104619290b6c41313fcd8d5b9dd6daed465dbef7c15be726ec90

$root@docker \~$ # docker ps

CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES

2119f030f213 registry "/entrypoint.sh /etc..." 7 seconds ago Up 6 seconds 0.0.0.0:443->443/tcp, :::443->443/tcp, 5000/tcp suspicious_jepsen

Docker 仓库用户登录认证示例

推送上传镜像：失败：因为没登录

登录