Docker Private Registry with TLS and Basic AUTH

by Anish

Posted on Monday July 29th 2019

Certs Location

mkdir -p /opt/certs
cd /opt/certs/

Generate the Certificate

quick self-signed certificate generate the key/certificate pair, then sign it, all with one openssl line

openssl req -new -newkey rsa:2048 -days 365 -nodes -x509 -keyout server.key -out server.crt

Docker Data Location : This is where all docker registry Data will be stored

mkdir -p /opt/data

BASIC AUTH Config: This is where the basic auth realm will be stored

mkdir -p /opt/auth

BASIC AUTH Config File

cd /opt
docker run --entrypoint htpasswd   registry:2 -Bbn dockerreg dockerreg > auth/htpasswd

Deploying the Private Docker registry with SSL and basic AUTH

The Registry is deployed as a container accessible via port 5000. Docker clients will use this domain to access the registry and push/pull images. By specifying a domain, a client can access multiple registries.

In this example our Docker registry is located at DNS localhost

docker run -d \
 -p 5000:5000 \
 --restart=always \
 --name registry \
 -v /opt/auth:/auth \
 -e "REGISTRY_AUTH=htpasswd" \
 -e "REGISTRY_AUTH_HTPASSWD_REALM=Registry Realm" \
 -e REGISTRY_AUTH_HTPASSWD_PATH=/auth/htpasswd \
 -v /opt/certs:/certs \
 -v /opt/data:/var/lib/registry \
 -e REGISTRY_HTTP_TLS_CERTIFICATE=/certs/server.crt \
 -e REGISTRY_HTTP_TLS_KEY=/certs/server.key \
 registry:2

Testing the registry Authentication

curl -kiv -H "Authorization: Basic $(echo -n "dockerreg:dockerreg" | base64)" https://localhost:5000/v2/

Testing the private docker registry

First Login to your private repository

docker login localhost:5000

Then

docker pull nginx:latest
docker tag nginx:latest localhost:5000/nginx:latest
docker push localhost:5000/nginx:latest

remove images so they need to be pulled again

docker rmi nginx localhost:5000/nginx

Now pull from the Local repository

docker pull localhost:5000/nginx

Setting up registry with docker compose

registry:
  restart: always
  image: registry:2
  ports:
    - 5000:5000
  environment:
    REGISTRY_HTTP_TLS_CERTIFICATE: /certs/server.crt
    REGISTRY_HTTP_TLS_KEY: /certs/server.key
    REGISTRY_AUTH: htpasswd
    REGISTRY_AUTH_HTPASSWD_PATH: /auth/htpasswd
    REGISTRY_AUTH_HTPASSWD_REALM: Registry Realm
  volumes:
    - /opt/data:/var/lib/registry
    - /opt/certs:/certs
    - /opt/auth:/auth

Start your registry by issuing the following command in the directory containing the docker-compose.yml file:

docker-compose up -d

Video Demo

Next Reading : How to Monitoring All Executed Commands in Linux

Thanku for reading !!! Give a Share for Support

Your Support Matters!

Instead of directly asking for donations, I'm thrilled to offer you all nine of my books for just $9 on leanpub By grabbing this bundle you not only help cover my coffee, beer, and Amazon bills but also play a crucial role in advancing and refining this project. Your contribution is indispensable, and I'm genuinely grateful for your involvement in this journey!

Any private key value that you enter or we generate is not stored on this site, this tool is provided via an HTTPS URL to ensure that private keys cannot be stolen, for extra security run this software on your network, no cloud dependency