如何防止Docker搜索Docker Hub [英] How to prevent docker from searching docker hub

问题描述

我要站起来几个Docker主机以在生产环境中运行。我们希望所有映像都必须经过容器管道，并且我们不希望能够从Docker Hub中提取映像（出于安全考虑）。

I'm standing up a few docker hosts to run in a production environment. We want all of our images to have to go through our container pipeline and we do not want to be able to pull images from Docker Hub (security concerns).

如何我停止了Docker能够从dockerhub中提取图像吗？理想情况下，我想通过配置docker守护进程来做到这一点。

How can I stop docker being able to pull images from dockerhub? Ideally I would like to do this via configuring the docker daemon.

推荐答案

我认为无法阻止docker搜索docker

I think it is not possible to prevent docker for searching docker hub..

但是有可能防止/避免从docker hub提取映像。在这种情况下，在docker hub上进行的所有搜索都将找不到任何内容。

But it is possible to prevent/avoid pulling image from docker hub. And it this case, all searching on docker hub will find nothing.

要做到这一点：您必须连接私有注册表url（不带https：//或http：/ /），其图像名称应类似于：
FROM myprivate_registry / myimagename：if_version 或 FROM myprivate_registry：registry_port / myimagename：if_version

To do it: you must concatenate your private registry url(without https:// or http://) with your image name like: FROM myprivate_registry/myimagename:if_version or FROM myprivate_registry:registry_port/myimagename:if_version

此外，您可以对docker说使用您的私有注册表作为第一个注册表，而docker hub将成为第二个：

Also, you can say to docker to use your private registry as its first registry and docker hub will become the second:

`ADD_REGISTRY='--add-registry myregistry'` or `INSECURE_REGISTRY='--insecure-registry myregistry'`

这篇关于如何防止Docker搜索Docker Hub的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！