Skip to content

Registry

Alexander Diemand edited this page Feb 12, 2025 · 1 revision

Private Docker Image Registry

Installation

tbd

Post-installation

per node setup

On each node, the registry's CA certificate needs to be installed for verification.

file: /usr/local/share/ca-certificates/registry.crt

after that, rerun as root the node's certificate path: update-ca-certificates

which should output:

Updating certificates in /etc/ssl/certs...
rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL
1 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...
done.

so it found the new certificate.

Maintenance

cleanup registry periodically

Garbage-collect old images in the registry to save space:

  • open shell in running pod "docker-registry-..."
  • enter registry garbage-collect /etc/docker/registry/config.yml --dry-run --delete-untagged
  • when satisfied: registry garbage-collect /etc/docker/registry/config.yml --delete-untagged

Clone this wiki locally