Podman : Use Registry2023/06/21 |
|
Install Registry to build Private Registry for Podman images.
Pull the Registry image and run it. Container images are located under [/var/lib/regstry] on Registry v2 Container,
so map to mount [/var/lib/containers/registry] on parent Host for Registry Container to use as Persistent Storage. |
|
| [1] | Configure Registry. This is for the case to use HTTP and no authentication. |
|
root@dlp:~#
root@dlp:~# podman run -d -p 5000:5000 \
-v /var/lib/containers/registry:/var/lib/registry \ registry:2 podman ps CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 72738df86ecd docker.io/library/registry:2 /etc/docker/regis... 9 seconds ago Up 10 seconds ago 0.0.0.0:5000->5000/tcp priceless_nightingale # verify to push to Registry from localhost # for HTTP connection, add [--tls-verify=false] option root@dlp:~# podman tag debian dlp.srv.world:5000/debian:latest root@dlp:~# podman push dlp.srv.world:5000/debian:latest --tls-verify=false Getting image source signatures Copying blob 332b199f36eb done Copying config 49081a1edb done Writing manifest to image destination Storing signaturesroot@dlp:~# podman images REPOSITORY TAG IMAGE ID CREATED SIZE srv.world/debian-nginx latest e2938e55cf7c 19 minutes ago 158 MB srv.world/debian-apache2 latest f047c6f28c56 27 minutes ago 260 MB docker.io/library/registry 2 4bb5ea59f8e0 5 days ago 24.6 MB docker.io/library/debian latest 49081a1edb0b 8 days ago 121 MB dlp.srv.world:5000/debian latest 49081a1edb0b 8 days ago 121 MB |
| [2] | To enable Basic authentication, Configure like follows. |
|
root@dlp:~#
apt -y install apache2-utils
# add users for Registry authentication root@dlp:~# htpasswd -Bc /etc/containers/.htpasswd debian New password: Re-type new password: Adding password for user debian
root@dlp:~#
podman run --privileged -d -p 5000:5000 \
-v /var/lib/containers/registry:/var/lib/registry \ -v /etc/containers:/auth \ -e REGISTRY_AUTH=htpasswd \ -e REGISTRY_AUTH_HTPASSWD_PATH=/auth/.htpasswd \ -e REGISTRY_AUTH_HTPASSWD_REALM="Registry Realm" \ registry:2 # login as a user you added above root@dlp:~# podman login dlp.srv.world:5000 --tls-verify=false
Username: debian
Password:
Login Succeeded!
root@dlp:~# podman tag debian dlp.srv.world:5000/debian2:latest root@dlp:~# podman push dlp.srv.world:5000/debian2:latest --tls-verify=false root@dlp:~# podman images REPOSITORY TAG IMAGE ID CREATED SIZE srv.world/debian-nginx latest e2938e55cf7c 22 minutes ago 158 MB srv.world/debian-apache2 latest f047c6f28c56 29 minutes ago 260 MB docker.io/library/registry 2 4bb5ea59f8e0 5 days ago 24.6 MB docker.io/library/debian latest 49081a1edb0b 8 days ago 121 MB dlp.srv.world:5000/debian latest 49081a1edb0b 8 days ago 121 MB dlp.srv.world:5000/debian2 latest 49081a1edb0b 8 days ago 121 MB |
| [3] | This is for the case you set valid certificate like Let's Encrypt and enable HTTPS connection. This example is based on that certificate were created under the [/etc/letsencrypt] directory. |
|
root@dlp:~#
podman run --privileged -d -p 5000:5000 \
-e REGISTRY_HTTP_TLS_CERTIFICATE=/certs/fullchain.pem \ -e REGISTRY_HTTP_TLS_KEY=/certs/privkey.pem \ -v /etc/letsencrypt/live/dlp.srv.world:/certs \ -v /var/lib/containers/registry:/var/lib/registry \ registry:2 # verify to push to Registry root@node01:~# podman tag debian dlp.srv.world:5000/debian3:latest root@node01:~# podman push dlp.srv.world:5000/debian3:latest root@node01:~# podman images REPOSITORY TAG IMAGE ID CREATED SIZE srv.world/debian-nginx latest e2938e55cf7c 24 minutes ago 158 MB srv.world/debian-apache2 latest f047c6f28c56 31 minutes ago 260 MB docker.io/library/registry 2 4bb5ea59f8e0 5 days ago 24.6 MB docker.io/library/debian latest 49081a1edb0b 8 days ago 121 MB dlp.srv.world:5000/debian latest 49081a1edb0b 8 days ago 121 MB dlp.srv.world:5000/debian2 latest 49081a1edb0b 8 days ago 121 MB dlp.srv.world:5000/debian3 latest 49081a1edb0b 8 days ago 121 MB |
| Sponsored Link |