当我尝试从本地镜像中提取图像时,它起作用了:
$ docker login -u docker -p mypassword nexus3.pleiade.mycomp.fr:5000
$ docker pull nexus3.pleiade.mycomp.fr:5000/hello-world
Using default tag: latest
latest: Pulling from **hello-world**
78445dd45222: Pull complete
Digest: sha256:c5515758d4c5e1e838e9cd307f6c6a0d620b5e07e6f927b07d05f6d12a1ac8d7
Status: Downloaded newer image for **nexus3.pleiade.mycomp.fr:5000/hello-world:latest**
但是,当我想使用这个注册表作为镜像时,它就会被忽略,图像总是从 Web Docker hub 中提取,而不是从我的本地镜像中提取:
$ ps -ef | grep docker
/usr/bin/dockerd -H fd:// --storage-driver=overlay2 --registry-mirror=https://nexus3.pleiade.mycomp.fr:5000
$ docker info
Registry Mirrors:
https://nexus3.pleiade.mycomp.fr:5000/
$ docker rmi nexus3.pleiade.mycomp.fr:5000/hello-world
_
$ docker pull hello-world
Using default tag: latest
latest: Pulling from **library/hello-world**
78445dd45222: Pull complete
Digest: sha256:c5515758d4c5e1e838e9cd307f6c6a0d620b5e07e6f927b07d05f6d12a1ac8d7
Status: Downloaded newer image for **hello-world:latest**
我确信它不使用我的镜像,因为当我取消代理设置时,它无法到达 hello-world 图像。
这是 Docker 错误,还是我遗漏了什么?
Docker 信息(简短):
Server Version: 1.13.1
Storage Driver: overlay2
(...)
Security Options:
apparmor
seccomp
Profile: default
Kernel Version: 4.8.0-37-generic
Operating System: Ubuntu 16.10
OSType: linux
Architecture: x86_64
CPUs: 2
Total Memory: 15.67 GiB
(...)
Registry Mirrors:
https://nexus3.pleiade.edf.fr:5000/
UPDATE :
执行“journalctl -xe”,我可以看到一些有用的信息:
level=error msg="Attempting next endpoint for pull after error: Get https://nexus3.pleiade.mycomp.fr:5000/v2/library/hello-world/manifests/latest: no basic auth credentials"
它看起来与:https://github.com/docker/docker/issues/20097 https://github.com/docker/docker/issues/20097,但解决方法不起作用:当我替换 --registry-mirror= 时https://nexus3.pleiade.mycomp.fr:5000 https://nexus3.pleiade.mycomp.fr:5000通过 --registry-mirror=https://docker:[电子邮件受保护]:5000 https://docker:password@nexus3.pleiade.mycomp.fr:5000
我得到完全相同的错误。
如果重要的话,nexus 使用的是自签名证书,该证书已复制到 /etc/docker/certs.d/nexus3.pleiade.mycomp.fr:5000/ca.crt ,并且允许通过“docker login”登录。