docker中实现 push到私有仓库

upstream docker_registry_pool{
    server registry:5000; #nginx与registry都用docker，所以直接使用别名和docker内网端口
}

server
{
        listen       80;
        server_name  registry.xxx.com;

        location / {
        proxy_set_header        Host $http_host;
        proxy_set_header        X-Real-IP $remote_addr;
        proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_pass http://docker_registry_pool;
        proxy_read_timeout      900;
    }
}

docker tag  myservice:v1.1   localhost:5000/tang/myservice:v1.1   #把myservice:v1.1 打上带绝对路径的v1.1tag

docker push localhost:5000/tang/myservice:v1.1  

curl  http://registry.xxx.com/v2/_catalog

curl  http://registry.xxx.com/v2/tang/myservice/tags/list

docker tag  myservice:v1.1   registry.xxx.comtang/myservice:v1.1   #把myservice:v1.1 打上带绝对路径的v1.1tag

docker push  registry.xxx.comtang/myservice:v1.1

 http: server gave HTTP response to HTTPS client #报错

vim /usr/lib/systemd/system/docker.service

ExecStart=/usr/bin/dockerd-current \
          --add-runtime docker-runc=/usr/libexec/docker/docker-runc-current \
          --default-runtime=docker-runc \
          --exec-opt native.cgroupdriver=systemd \
          --userland-proxy-path=/usr/libexec/docker/docker-proxy-current \
          --init-path=/usr/libexec/docker/docker-init-current \
          --seccomp-profile=/etc/docker/seccomp.json \
          $OPTIONS \
          $DOCKER_STORAGE_OPTIONS \
          $DOCKER_NETWORK_OPTIONS \
          $ADD_REGISTRY \
          $BLOCK_REGISTRY \
          $INSECURE_REGISTRY \
          $REGISTRIES \
          --insecure-registry=registry.xxx.com:80 \
          --insecure-registry=你的ip:5000 

{ 
	"insecure-registries":[
		"xxx.xxx.xxx.xxx:5000",
		"registry.xxx.com:80"
	] 
}

#linux下
systemctl daemon-reload 

systemctl restart docker

docker tag  myservice:v1.1   registry.xxx.comtang:80/myservice:v1.1   #把myservice:v1.1 打上带绝对路径的v1.1tag

docker tag  myservice:v1.1   registry.xxx.comtang:80/myservice:v1.1   #把myservice:v1.1 打上带绝对路径的v1.1tag