Debian 12 bookworm
Sponsored Link

Podman : Use Registry2023/06/21

 
Install Registry to build Private Registry for Podman images.
Pull the Registry image and run it. Container images are located under [/var/lib/regstry] on Registry v2 Container,
so map to mount [/var/lib/containers/registry] on parent Host for Registry Container to use as Persistent Storage.
[1] Configure Registry.
This is for the case to use HTTP and no authentication.
root@dlp:~#
podman pull registry:2

root@dlp:~#
mkdir /var/lib/containers/registry

root@dlp:~#
podman run -d -p 5000:5000 \
-v /var/lib/containers/registry:/var/lib/registry \
registry:2
root@dlp:~#
podman ps

CONTAINER ID  IMAGE                         COMMAND               CREATED        STATUS             PORTS                   NAMES
72738df86ecd  docker.io/library/registry:2  /etc/docker/regis...  9 seconds ago  Up 10 seconds ago  0.0.0.0:5000->5000/tcp  priceless_nightingale

# verify to push to Registry from localhost
# for HTTP connection, add [--tls-verify=false] option

root@dlp:~#
podman tag debian dlp.srv.world:5000/debian:latest

root@dlp:~#
podman push dlp.srv.world:5000/debian:latest --tls-verify=false

Getting image source signatures
Copying blob 332b199f36eb done
Copying config 49081a1edb done
Writing manifest to image destination
Storing signatures

root@dlp:~#
podman images

REPOSITORY                  TAG         IMAGE ID      CREATED         SIZE
srv.world/debian-nginx      latest      e2938e55cf7c  19 minutes ago  158 MB
srv.world/debian-apache2    latest      f047c6f28c56  27 minutes ago  260 MB
docker.io/library/registry  2           4bb5ea59f8e0  5 days ago      24.6 MB
docker.io/library/debian    latest      49081a1edb0b  8 days ago      121 MB
dlp.srv.world:5000/debian   latest      49081a1edb0b  8 days ago      121 MB
[2] To enable Basic authentication, Configure like follows.
root@dlp:~#
apt -y install apache2-utils
# add users for Registry authentication

root@dlp:~#
htpasswd -Bc /etc/containers/.htpasswd debian

New password:
Re-type new password:
Adding password for user debian

root@dlp:~#
podman run --privileged -d -p 5000:5000 \
-v /var/lib/containers/registry:/var/lib/registry \
-v /etc/containers:/auth \
-e REGISTRY_AUTH=htpasswd \
-e REGISTRY_AUTH_HTPASSWD_PATH=/auth/.htpasswd \
-e REGISTRY_AUTH_HTPASSWD_REALM="Registry Realm" \
registry:2
# login as a user you added above

root@dlp:~#
podman login dlp.srv.world:5000 --tls-verify=false

Username: debian
Password:
Login Succeeded!

root@dlp:~#
podman tag debian dlp.srv.world:5000/debian2:latest

root@dlp:~#
podman push dlp.srv.world:5000/debian2:latest --tls-verify=false

root@dlp:~#
podman images

REPOSITORY                  TAG         IMAGE ID      CREATED         SIZE
srv.world/debian-nginx      latest      e2938e55cf7c  22 minutes ago  158 MB
srv.world/debian-apache2    latest      f047c6f28c56  29 minutes ago  260 MB
docker.io/library/registry  2           4bb5ea59f8e0  5 days ago      24.6 MB
docker.io/library/debian    latest      49081a1edb0b  8 days ago      121 MB
dlp.srv.world:5000/debian   latest      49081a1edb0b  8 days ago      121 MB
dlp.srv.world:5000/debian2  latest      49081a1edb0b  8 days ago      121 MB
[3] This is for the case you set valid certificate like Let's Encrypt and enable HTTPS connection.
This example is based on that certificate were created under the [/etc/letsencrypt] directory.
root@dlp:~#
podman run --privileged -d -p 5000:5000 \
-e REGISTRY_HTTP_TLS_CERTIFICATE=/certs/fullchain.pem \
-e REGISTRY_HTTP_TLS_KEY=/certs/privkey.pem \
-v /etc/letsencrypt/live/dlp.srv.world:/certs \
-v /var/lib/containers/registry:/var/lib/registry \
registry:2
# verify to push to Registry

root@node01:~#
podman tag debian dlp.srv.world:5000/debian3:latest

root@node01:~#
podman push dlp.srv.world:5000/debian3:latest

root@node01:~#
podman images

REPOSITORY                  TAG         IMAGE ID      CREATED         SIZE
srv.world/debian-nginx      latest      e2938e55cf7c  24 minutes ago  158 MB
srv.world/debian-apache2    latest      f047c6f28c56  31 minutes ago  260 MB
docker.io/library/registry  2           4bb5ea59f8e0  5 days ago      24.6 MB
docker.io/library/debian    latest      49081a1edb0b  8 days ago      121 MB
dlp.srv.world:5000/debian   latest      49081a1edb0b  8 days ago      121 MB
dlp.srv.world:5000/debian2  latest      49081a1edb0b  8 days ago      121 MB
dlp.srv.world:5000/debian3  latest      49081a1edb0b  8 days ago      121 MB
Matched Content