阿里云 ACR Docker 镜像分发的实现步骤

{
  "registry-mirrors": ["https://你的ACR加速地址.mirror.aliyuncs.com"],
  "log-driver": "json-file",
  "log-opts": {
    "max-size": "100m",
    "max-file": "3"
  }
}

# 重载配置+重启Docker
systemctl daemon-reload
systemctl restart docker
# 验证
docker info

#!/bin/bash
# ========== 请手动修改以下变量 ==========
ACR_DOMAIN="registry.cn-hangzhou.aliyuncs.com"  # ACR域名
NAMESPACE="prod-project"                        # 命名空间
REPO_NAME="web-app"                            # 仓库名
IMAGE_TAG="v1.0.0"                              # 镜像标签
DOCKER_USER="你的阿里云账号"                    # ACR登录用户名
DOCKER_PWD="你的ACR固定密码"                    # ACR登录密码
LOCAL_IMAGE="web-app:v1.0.0"                   # 本地原有镜像名:标签
# ========================================

# 1. 登录ACR
echo "$DOCKER_PWD" | docker login $ACR_DOMAIN -u $DOCKER_USER --password-stdin

# 2. 镜像打标
docker tag $LOCAL_IMAGE $ACR_DOMAIN/$NAMESPACE/$REPO_NAME:$IMAGE_TAG

# 3. 推送至阿里云ACR
docker push $ACR_DOMAIN/$NAMESPACE/$REPO_NAME:$IMAGE_TAG

# 4. 登出（可选，安全加固）
# docker logout $ACR_DOMAIN

#!/bin/bash
# ========== 请手动修改以下变量 ==========
ACR_DOMAIN="registry.cn-hangzhou.aliyuncs.com"
NAMESPACE="prod-project"
REPO_NAME="web-app"
IMAGE_TAG="v1.0.0"
DOCKER_USER="你的阿里云账号"
DOCKER_PWD="你的ACR固定密码"
# ========================================

# 1. 登录ACR
echo "$DOCKER_PWD" | docker login $ACR_DOMAIN -u $DOCKER_USER --password-stdin

# 2. 拉取镜像
docker pull $ACR_DOMAIN/$NAMESPACE/$REPO_NAME:$IMAGE_TAG

# 验证镜像
docker images | grep $REPO_NAME

# 执行登录后，认证文件自动生成在 /root/.docker/config.json
echo "你的ACR密码" | docker login registry.cn-hangzhou.aliyuncs.com -u 账号 --password-stdin

# 拷贝到全局目录，所有用户生效
cp /root/.docker/config.json /etc/docker/
chmod 644 /etc/docker/config.json

docker pull registry.cn-hangzhou.aliyuncs.com/prod-project/web-app:v1.0.0