2016-11-30 92 views
1

嘗試在insercure泊塢窗註冊表添加到我在大廳任務運行DIND圖像:我試圖通過運行開始我的任務設置在泊塢窗功能於碼頭工人形象碼頭工人守護不安全註冊表

export DOCKER_OPTS="$DOCKER_OPTS --insecure-registry=${INSECURE_REG}" 

,並試圖轉起來時,守護進程和組成:

docker daemon --insecure-registry=${INSECURE_REG} & 
docker-compose up 

但是任務的錯誤:服務器給HTTP響應HTTPS客戶端,並沒有這樣的圖像

整個任務看起來是這樣的(基本上是在一個碼頭工人,撰寫結束DIND容器中執行一個shell腳本):

# Connect to insecure docker registry: 
export DOCKER_OPTS="$DOCKER_OPTS --insecure-registry=${INSECURE_REG}" 

# Install docker-compose: 
apk add --no-cache py-pip curl 
pip install docker-compose 

# Verify docker registry: 
curl http://${INSECURE_REG}/v2/_catalog #curl does return the expected json 

sanitize_cgroups() { 
    mkdir -p /sys/fs/cgroup 
    mountpoint -q /sys/fs/cgroup || \ 
    mount -t tmpfs -o uid=0,gid=0,mode=0755 cgroup /sys/fs/cgroup 

    mount -o remount,rw /sys/fs/cgroup 

    sed -e 1d /proc/cgroups | while read sys hierarchy num enabled; do 
    if [ "$enabled" != "1" ]; then 
     # subsystem disabled; skip 
     continue 
    fi 

    grouping="$(cat /proc/self/cgroup | cut -d: -f2 | grep "\\<$sys\\>")" 
    if [ -z "$grouping" ]; then 
     # subsystem not mounted anywhere; mount it on its own 
     grouping="$sys" 
    fi 

    mountpoint="/sys/fs/cgroup/$grouping" 

    mkdir -p "$mountpoint" 

    # clear out existing mount to make sure new one is read-write 
    if mountpoint -q "$mountpoint"; then 
     umount "$mountpoint" 
    fi 

    mount -n -t cgroup -o "$grouping" cgroup "$mountpoint" 

    if [ "$grouping" != "$sys" ]; then 
     if [ -L "/sys/fs/cgroup/$sys" ]; then 
     rm "/sys/fs/cgroup/$sys" 
     fi 

     ln -s "$mountpoint" "/sys/fs/cgroup/$sys" 
    fi 
    done 
} 

# https://github.com/concourse/concourse/issues/324 
sanitize_cgroups 


# Spin up the stack as described in docker-compose: 
docker daemon --insecure-registry=${INSECURE_REG} & 
docker-compose up 

回答

0
dockerd --insecure-registry=${INSECURE_REG} 

正在啓動泊塢窗守護進程的正確方法與不安全的註冊表,即使它報告錯誤,它得到的圖像,併成功地啓動它們