nexus作为docker存储库

Question

对于docker不安全的repo，你有解决方案吗！http响应而不是https！

在尝试发布到nexus上的docker repo时，我得到了这个(v =nexus3.22.0-02)

Docker-详细信息：

 Version:           19.03.6
 API version:       1.40
 Go version:        go1.12.17
 Git commit:        369ce74a3c
 Built:             Fri Feb 28 23:45:43 2020
 OS/Arch:           linux/amd64
 Experimental:      false

Server:
 Engine:
  Version:          19.03.6
  API version:      1.40 (minimum version 1.12)
  Go version:       go1.12.17
  Git commit:       369ce74a3c
  Built:            Wed Feb 19 01:06:16 2020
  OS/Arch:          linux/amd64
  Experimental:     false
 containerd:
  Version:          1.3.3-0ubuntu1~18.04.1
  GitCommit:        
 runc:
  Version:          spec: 1.0.1-dev
  GitCommit:        
 docker-init:
  Version:          0.18.0
  GitCommit:        

错误: http:服务器向HTTPS客户端提供了HTTP响应，这发生在我尝试推送到回收站时！

我已经将'/etc/docker/daemon.json‘调整为：

{
"exec-opts": ["native.cgroupdriver=systemd"],
"log-driver": "json-file",
"log-opts": {
"max-size": "100m"
},
"storage-driver": "overlay2",
"insecure-registries": ["localhost:8122/repository/k8s-2020-b-docker-repo01"],
"insecure-registries": ["localhost:8123/repository/k8s-2020-b-docker-repo02"],
"insecure-registries": ["localhost:8124/repository/k8s-2020-b-docker-repo03"],
"insecure-registries": ["localhost:8122"],
"insecure-registries": ["localhost:8123"],
"insecure-registries": ["localhost:8124"],
"insecure-registries": ["ip-10-7-1-26.eu-west-1.compute.internal:8122"],
"insecure-registries": ["ip-10-7-1-26.eu-west-1.compute.internal:8123"],
"insecure-registries": ["ip-10-7-1-26.eu-west-1.compute.internal:8124"],
"insecure-registries": ["k8s-2020-b-docker-repo:8122"],
"insecure-registries": ["k8s-2020-b-docker-repo:8123"],
"insecure-registries": ["k8s-2020-b-docker-repo:8124"],
"insecure-registries": ["127.0.0.1:8122"],
"insecure-registries": ["127.0.0.1:8123"],
"insecure-registries": ["127.0.0.1:8124"],
}

Answer 1

我遇到了这种情况，因为我的支持https的Nexus实例不喜欢我使用http连接器。一旦我使用https连接器解决了这个问题，一切都运行得很好。此链接using-nexus-3-as-your-repository可能会对您有所帮助。按照说明操作，但还要创建一个https连接器(即8083http和8883https)，并在登录时尝试这两种方式。

提示，您在docker登录中使用的计算机名称需要与nexus服务器证书CN或SAN完全匹配。所以你的nexus服务器证书的CN是docker login -u <user> -p <pass> fred.foo.bar:8883 CN=fred.foo.bar的.