Ubuntu 25.04
Sponsored Link

Podman : Use Registry2025/04/22
 

Install Docker-Registry to build Private Registry for Docker images.

[1] Install Registry.
root@dlp:~#
apt -y install docker-registry
[2] Configure Registry.
This is the settings to use HTTP connection and no-authentication.
root@dlp:~#
vi /etc/docker/registry/config.yml
# comment out [auth] section like follows

version: 0.1
log:
  fields:
    service: registry
storage:
  cache:
    blobdescriptor: inmemory
  filesystem:
    rootdirectory: /var/lib/docker-registry
  delete:
    enabled: true
http:
  addr: :5000
  headers:
    X-Content-Type-Options: [nosniff]
#auth:
#  htpasswd:
#    realm: basic-realm
#    path: /etc/docker/registry
health:
  storagedriver:
    enabled: true
    interval: 10s
    threshold: 3
root@dlp:~#
systemctl restart docker-registry
# verify possible to access from any clients

root@dlp:~#
podman images 

REPOSITORY                TAG         IMAGE ID      CREATED         SIZE
srv.world/ubuntu-nginx    latest      1fbf2477f02c  13 minutes ago  137 MB
srv.world/ubuntu-apache2  latest      b7f1351d1b3c  20 minutes ago  246 MB
docker.io/library/ubuntu  latest      602eb6fb314b  13 days ago     80.6 MB
# [push] from localhost

root@dlp:~#
podman tag ubuntu dlp.srv.world:5000/ubuntu:my-registry

root@dlp:~#
podman push dlp.srv.world:5000/ubuntu:my-registry --tls-verify=false

root@dlp:~#
podman images 

REPOSITORY                 TAG          IMAGE ID      CREATED         SIZE
srv.world/ubuntu-nginx     latest       1fbf2477f02c  14 minutes ago  137 MB
srv.world/ubuntu-apache2   latest       b7f1351d1b3c  21 minutes ago  246 MB
dlp.srv.world:5000/ubuntu  my-registry  602eb6fb314b  13 days ago     80.6 MB
docker.io/library/ubuntu   latest       602eb6fb314b  13 days ago     80.6 MB
# [pull] from another node

root@node01:~#
podman pull dlp.srv.world:5000/ubuntu:my-registry --tls-verify=false

root@node01:~#
podman images 

REPOSITORY                 TAG          IMAGE ID      CREATED      SIZE
dlp.srv.world:5000/ubuntu  my-registry  602eb6fb314b  13 days ago  80.6 MB
[3] To enable Basic authentication, Configure like follows.
root@dlp:~#
apt -y install apache2-utils
root@dlp:~#
vi /etc/docker/registry/config.yml
# uncomment [auth] section and specify passwd file

.....
.....
auth:
  htpasswd:
    realm: basic-realm
    path: /etc/containers/registries.conf.d/.htpasswd
.....
.....
# add users
# add [-c] at initial file creation

root@dlp:~#
htpasswd -Bc /etc/containers/registries.conf.d/.htpasswd ubuntu 

New password:
Re-type new password:
Adding password for user ubuntu
root@dlp:~#
systemctl restart docker-registry
# verify possible to access
# an error is shown if access with no-authentication

root@node01:~#
podman pull dlp.srv.world:5000/ubuntu:my-registry --tls-verify=false

Trying to pull dlp.srv.world:5000/ubuntu:my-registry...
Error: initializing source docker://dlp.srv.world:5000/ubuntu:my-registry: reading manifest my-registry in dlp.srv.world:5000/ubuntu: authentication required
# authenticate by a user added with [htpasswd]

root@node01:~#
podman login dlp.srv.world:5000 --tls-verify=false 

Username: ubuntu
Password:
Login Succeeded!
root@node01:~#
podman pull dlp.srv.world:5000/ubuntu:my-registry --tls-verify=false

root@node01:~#
podman images 

REPOSITORY                 TAG          IMAGE ID      CREATED      SIZE
dlp.srv.world:5000/ubuntu  my-registry  602eb6fb314b  13 days ago  80.6 MB
[4] To access via HTTPS and use valid certificates like from Let's Encrypt and so on, Configure like follows.
This example is based on the environment that certificates have been gotten under the [/etc/letsencrypt/live/dlp.srv.world].
root@dlp:~#
cp -p /etc/letsencrypt/live/dlp.srv.world/{fullchain,privkey}.pem /etc/containers/registries.conf.d/

root@dlp:~#
chown docker-registry /etc/containers/registries.conf.d/{fullchain,privkey}.pem

root@dlp:~#
vi /etc/docker/registry/config.yml
# add [tls] section under the [http] section like follows

.....
.....
http:
  addr: :5000
  tls:
    certificate: /etc/containers/registries.conf.d/fullchain.pem
    key: /etc/containers/registries.conf.d/privkey.pem
  headers:
    X-Content-Type-Options: [nosniff]
.....
.....
root@dlp:~#
systemctl restart docker-registry
# verify possible to access
# on HTTPS connection, it does not need to add [insecure-registries] on Docker

root@node01:~#
podman pull dlp.srv.world:5000/ubuntu:my-registry

root@node01:~#
podman images 

REPOSITORY                 TAG          IMAGE ID      CREATED     SIZE
dlp.srv.world:5000/ubuntu  my-registry  bf3dc08bfed0  5 days ago  78.7 MB
Matched Content