使用 GitLab 容器镜像库，可以使每个项目拥有自己的空间来存储 Docker 镜像。

容器镜像库默认在 HTTPS 下工作。
启用SSL 参考：https://www.jianshu.com/p/435dbc38eb4f?v=1704352880125

启用容器镜像库

1、在配置文件 etc/gitlab/gitlab.rb 修改镜像库 URL，与external_url匹配。

vi /etc/gitlab/gitlab.rb
...
registry_external_url 'https://gitlab.example.com:4567'
...

2、重新配置GitLab以使更改生效

gitlab-ctl reconfigure

3、增加4567 端口映射

docker run --detach \
  --hostname gitlab.example.com \
  --publish 443:443 --publish 8090:8090 --publish 2222:22 --publish 4567:4567 \
  --name gitlab \
  --restart always \
  -v /etc/localtime:/etc/localtime \
  -v /srv/gitlab/config:/etc/gitlab \
  -v /srv/gitlab/logs:/var/log/gitlab \
  -v /srv/gitlab/data:/var/opt/gitlab \
  --shm-size 512m \
  gitlab/gitlab-ce:16.4.1-ce.0

4、容器镜像库身份验证

image.png

使用docker login gitlab.example.com:4567登录时遇到如下报错：

root@shawn-virtual-machine:/srv/gitlab# docker login gitlab.example.com:4567
Username: root
Password:
Error response from daemon: Get "https://gitlab.example.com:4567/v2/": tls: failed to verify certificate: x509: certificate is not valid for any names, but wanted to match gitlab.example.com

解决：修改docker配置，重启docker使配置生效

vi /etc/docker/daemon.json
...
"insecure-registries": ["https://gitlab.example.com:4567"]
...

systemctl restart docker

重新登录成功。

root@shawn-virtual-machine:/srv/gitlab# docker login gitlab.example.com:4567
Username: root
Password:
WARNING! Your password will be stored unencrypted in /root/.docker/config.json.
Configure a credential helper to remove this warning. See
https://docs.docker.com/engine/reference/commandline/login/#credentials-store

Login Succeeded
root@shawn-virtual-machine:/srv/gitlab#

5、推送镜像

root@shawn-virtual-machine:/srv/gitlab# docker push gitlab.example.com:4567/root/test
Using default tag: latest
The push refers to repository [gitlab.example.com:4567/root/test]
706d553b7f2f: Pushed
b27047a0aa9f: Pushed
df2329900fa7: Pushed
c932288697f4: Pushed
5374e8fad572: Pushed
620a321bba07: Pushed
8923db4694c7: Pushed
707c320d4e6d: Pushed
3fb9cf88addf: Pushed
30137bc7752c: Pushed
91fd5e38720a: Pushed
23653c4e40b9: Pushed
b8544860ba0b: Pushed
latest: digest: sha256:bc65f39c96035045a036bdf931b24ff2442a2a6608d36073971caad9e62e2443 size: 3040