#やること
EC2にDockerレジストリを構築。
Docker Enterprise Edition 2.1を採用。
Dockerレジストリソフトは、DTRを採用。
サーバはAWSに構築。
#用語整理
・Dockerレジストリ・・・Dockerイメージを保存する場所
・DockerHub・・・公式のDockerレジストリ(https://hub.docker.com/)
・DTR(Docker Trusted Registry)・・・今回構築するプライベートなDockerレジストリ
・UCP(Universal Control Plane)・・・DTRを操作するUI等を含むもの
イメージ図
#バージョンマトリックス
| OS Distribution(x86_64) | Enterprise Engine | UCP | DTR | Storage Driver | Orchestration | DTR Storage Backend |
|---|---|---|---|---|---|---|
| RHEL 7.4 | 18.09.x | 3.1.x | 2.6.x | overlay2, devicemapper | Swarm mode, Kubernetes | NFSv4, NFSv3, Amazon S3, S3 Compliant Alternatives, Azure Storage (Blob), Google Cloud Storage, OpenStack Swift, Local Filesystem |
| RHEL 7.5 | 18.09.x | 3.1.x | 2.6.x | overlay2 | Swarm mode, Kubernetes | NFSv4, NFSv3, Amazon S3, S3 Compliant Alternatives, Azure Storage (Blob), Google Cloud Storage, OpenStack Swift, Local Filesystem |
| RHEL 7.6 | 18.09.x | 3.1.x starting with 3.1.3 | 2.6.x starting with 2.6.2 | overlay2 | Swarm mode, Kubernetes | NFSv4, NFSv3, Amazon S3, S3 Compliant Alternatives, Azure Storage (Blob), Google Cloud Storage, OpenStack Swift, Local Filesystem |
#構築手順
1.EC2構築
2.DockerEngineEEインストール
3.UCPインストール
4.DTRインストール
#1.EC2構築
AMI：RHEL-7.5_HVM_GA-20180322-x86_64-1-Hourly2-GP2 (ami-6b0d5f0d)
インスタンスタイプ：t2.2xlarge
※DTR要件(最低限/推奨)
メモリ：16GB/16GB
CPU：2CPU/4CPU
Disk：10GB/25-100GB
参考URL:https://docs.docker.com/ee/dtr/admin/install/system-requirements/
#2.DockerEngineEEインストール
DockerEEはDockerHubから取得できます。
EEは1ヶ月間だけ、試用版で使えますので、ダウンロードします。
https://hub.docker.com/search/?q=&type=edition&offering=enterprise
※アカウント必須
・上記URLアクセス後、
Docker Enterprise (Red Hat Enterprise Linux)を選択。
Start 1 Month Trialを選択。
License Keyを選択して、ダウンロードします。
Copy and paste this URL to download your EditonがDockerEEのリポジトリのため、コピーしておきます。
ライセンスのダウンロードが終わったので、インストールを行っていきます。
$ sudo -s
# export DOCKERURL="リポジトリのURL"
# sh -c 'echo "$DOCKERURL/rhel" > /etc/yum/vars/dockerurl'
# sh -c 'echo "7.5" > /etc/yum/vars/dockerosversion'
# yum install -y yum-utils device-mapper-persistent-data lvm2
Loaded plugins: amazon-id, rhui-lb, search-disabled-repos
rhui-REGION-client-config-server-7 | 2.9 kB 00:00:00
rhui-REGION-rhel-server-releases | 3.5 kB 00:00:00
rhui-REGION-rhel-server-rh-common | 3.8 kB 00:00:00
(1/7): rhui-REGION-client-config-server-7/x86_64/primary_db | 3.3 kB 00:00:00
(2/7): rhui-REGION-rhel-server-rh-common/7Server/x86_64/group | 124 B 00:00:00
(3/7): rhui-REGION-rhel-server-releases/7Server/x86_64/group | 774 kB 00:00:00
(4/7): rhui-REGION-rhel-server-rh-common/7Server/x86_64/primary_db | 117 kB 00:00:00
(5/7): rhui-REGION-rhel-server-rh-common/7Server/x86_64/updateinfo | 33 kB 00:00:00
(6/7): rhui-REGION-rhel-server-releases/7Server/x86_64/updateinfo | 3.2 MB 00:00:00
(7/7): rhui-REGION-rhel-server-releases/7Server/x86_64/primary_db | 57 MB 00:00:01
Resolving Dependencies
--> Running transaction check
---> Package device-mapper-persistent-data.x86_64 0:0.7.3-3.el7 will be installed
--> Processing Dependency: libaio.so.1(LIBAIO_0.1)(64bit) for package: device-mapper-persistent-data-0.7.3-3.el7.x86_64
--> Processing Dependency: libaio.so.1(LIBAIO_0.4)(64bit) for package: device-mapper-persistent-data-0.7.3-3.el7.x86_64
--> Processing Dependency: libaio.so.1()(64bit) for package: device-mapper-persistent-data-0.7.3-3.el7.x86_64
---> Package lvm2.x86_64 7:2.02.180-10.el7_6.8 will be installed
--> Processing Dependency: lvm2-libs = 7:2.02.180-10.el7_6.8 for package: 7:lvm2-2.02.180-10.el7_6.8.x86_64
--> Processing Dependency: libdevmapper-event.so.1.02(Base)(64bit) for package: 7:lvm2-2.02.180-10.el7_6.8.x86_64
--> Processing Dependency: liblvm2app.so.2.2(Base)(64bit) for package: 7:lvm2-2.02.180-10.el7_6.8.x86_64
--> Processing Dependency: libdevmapper-event.so.1.02()(64bit) for package: 7:lvm2-2.02.180-10.el7_6.8.x86_64
--> Processing Dependency: liblvm2app.so.2.2()(64bit) for package: 7:lvm2-2.02.180-10.el7_6.8.x86_64
---> Package yum-utils.noarch 0:1.1.31-45.el7 will be updated
---> Package yum-utils.noarch 0:1.1.31-50.el7 will be an update
--> Running transaction check
---> Package device-mapper-event-libs.x86_64 7:1.02.149-10.el7_6.8 will be installed
---> Package libaio.x86_64 0:0.3.109-13.el7 will be installed
---> Package lvm2-libs.x86_64 7:2.02.180-10.el7_6.8 will be installed
--> Processing Dependency: device-mapper-event = 7:1.02.149-10.el7_6.8 for package: 7:lvm2-libs-2.02.180-10.el7_6.8.x86_64
--> Running transaction check
---> Package device-mapper-event.x86_64 7:1.02.149-10.el7_6.8 will be installed
--> Processing Dependency: device-mapper = 7:1.02.149-10.el7_6.8 for package: 7:device-mapper-event-1.02.149-10.el7_6.8.x86_64
--> Running transaction check
---> Package device-mapper.x86_64 7:1.02.146-4.el7 will be updated
--> Processing Dependency: device-mapper = 7:1.02.146-4.el7 for package: 7:device-mapper-libs-1.02.146-4.el7.x86_64
---> Package device-mapper.x86_64 7:1.02.149-10.el7_6.8 will be an update
--> Running transaction check
---> Package device-mapper-libs.x86_64 7:1.02.146-4.el7 will be updated
---> Package device-mapper-libs.x86_64 7:1.02.149-10.el7_6.8 will be an update
--> Finished Dependency Resolution
Dependencies Resolved
============================================================================================================
Package Arch Version Repository Size
============================================================================================================
Installing:
device-mapper-persistent-data x86_64 0.7.3-3.el7 rhui-REGION-rhel-server-releases 405 k
lvm2 x86_64 7:2.02.180-10.el7_6.8 rhui-REGION-rhel-server-releases 1.3 M
Updating:
yum-utils noarch 1.1.31-50.el7 rhui-REGION-rhel-server-releases 121 k
Installing for dependencies:
device-mapper-event x86_64 7:1.02.149-10.el7_6.8 rhui-REGION-rhel-server-releases 189 k
device-mapper-event-libs x86_64 7:1.02.149-10.el7_6.8 rhui-REGION-rhel-server-releases 188 k
libaio x86_64 0.3.109-13.el7 rhui-REGION-rhel-server-releases 24 k
lvm2-libs x86_64 7:2.02.180-10.el7_6.8 rhui-REGION-rhel-server-releases 1.1 M
Updating for dependencies:
device-mapper x86_64 7:1.02.149-10.el7_6.8 rhui-REGION-rhel-server-releases 293 k
device-mapper-libs x86_64 7:1.02.149-10.el7_6.8 rhui-REGION-rhel-server-releases 321 k
Transaction Summary
============================================================================================================
Install 2 Packages (+4 Dependent packages)
Upgrade 1 Package (+2 Dependent packages)
Total download size: 3.9 M
Downloading packages:
Delta RPMs disabled because /usr/bin/applydeltarpm not installed.
(1/9): device-mapper-1.02.149-10.el7_6.8.x86_64.rpm | 293 kB 00:00:00
(2/9): device-mapper-event-1.02.149-10.el7_6.8.x86_64.rpm | 189 kB 00:00:00
(3/9): device-mapper-event-libs-1.02.149-10.el7_6.8.x86_64.rpm | 188 kB 00:00:00
(4/9): device-mapper-libs-1.02.149-10.el7_6.8.x86_64.rpm | 321 kB 00:00:00
(5/9): device-mapper-persistent-data-0.7.3-3.el7.x86_64.rpm | 405 kB 00:00:00
(6/9): libaio-0.3.109-13.el7.x86_64.rpm | 24 kB 00:00:00
(7/9): lvm2-libs-2.02.180-10.el7_6.8.x86_64.rpm | 1.1 MB 00:00:00
(8/9): lvm2-2.02.180-10.el7_6.8.x86_64.rpm | 1.3 MB 00:00:00
(9/9): yum-utils-1.1.31-50.el7.noarch.rpm | 121 kB 00:00:00
------------------------------------------------------------------------------------------------------------
Total 7.1 MB/s | 3.9 MB 00:00:00
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
Updating : 7:device-mapper-1.02.149-10.el7_6.8.x86_64 1/12
Updating : 7:device-mapper-libs-1.02.149-10.el7_6.8.x86_64 2/12
Installing : 7:device-mapper-event-libs-1.02.149-10.el7_6.8.x86_64 3/12
Installing : libaio-0.3.109-13.el7.x86_64 4/12
Installing : device-mapper-persistent-data-0.7.3-3.el7.x86_64 5/12
Installing : 7:device-mapper-event-1.02.149-10.el7_6.8.x86_64 6/12
Installing : 7:lvm2-libs-2.02.180-10.el7_6.8.x86_64 7/12
Installing : 7:lvm2-2.02.180-10.el7_6.8.x86_64 8/12
Updating : yum-utils-1.1.31-50.el7.noarch 9/12
Cleanup : yum-utils-1.1.31-45.el7.noarch 10/12
Cleanup : 7:device-mapper-1.02.146-4.el7.x86_64 11/12
Cleanup : 7:device-mapper-libs-1.02.146-4.el7.x86_64 12/12
Verifying : device-mapper-persistent-data-0.7.3-3.el7.x86_64 1/12
Verifying : 7:device-mapper-event-libs-1.02.149-10.el7_6.8.x86_64 2/12
Verifying : 7:device-mapper-libs-1.02.149-10.el7_6.8.x86_64 3/12
Verifying : yum-utils-1.1.31-50.el7.noarch 4/12
Verifying : 7:lvm2-2.02.180-10.el7_6.8.x86_64 5/12
Verifying : 7:lvm2-libs-2.02.180-10.el7_6.8.x86_64 6/12
Verifying : libaio-0.3.109-13.el7.x86_64 7/12
Verifying : 7:device-mapper-1.02.149-10.el7_6.8.x86_64 8/12
Verifying : 7:device-mapper-event-1.02.149-10.el7_6.8.x86_64 9/12
Verifying : 7:device-mapper-1.02.146-4.el7.x86_64 10/12
Verifying : yum-utils-1.1.31-45.el7.noarch 11/12
Verifying : 7:device-mapper-libs-1.02.146-4.el7.x86_64 12/12
Installed:
device-mapper-persistent-data.x86_64 0:0.7.3-3.el7 lvm2.x86_64 7:2.02.180-10.el7_6.8
Dependency Installed:
device-mapper-event.x86_64 7:1.02.149-10.el7_6.8 device-mapper-event-libs.x86_64 7:1.02.149-10.el7_6.8
libaio.x86_64 0:0.3.109-13.el7 lvm2-libs.x86_64 7:2.02.180-10.el7_6.8
Updated:
yum-utils.noarch 0:1.1.31-50.el7
Dependency Updated:
device-mapper.x86_64 7:1.02.149-10.el7_6.8 device-mapper-libs.x86_64 7:1.02.149-10.el7_6.8
Complete!
#
Dockerエンジンのインストールには、
標準リポジトリのみだと足りないため、
拡張リポジトリの有効化をします。
# yum-config-manager --enable rhel-7-server-extras-rpms
Loaded plugins: amazon-id, rhui-lb
#
以下はAWS独自の手順です。
拡張のリポジトリを有効化します。
クラウドベンダによって手順は違います。
# yum-config-manager --enable rhui-REGION-rhel-server-extras
Loaded plugins: amazon-id, rhui-lb
=================================== repo: rhui-REGION-rhel-server-extras =================================
[rhui-REGION-rhel-server-extras]
async = True
bandwidth = 0
base_persistdir = /var/lib/yum/repos/x86_64/7Server
baseurl =
cache = 0
cachedir = /var/cache/yum/x86_64/7Server/rhui-REGION-rhel-server-extras
check_config_file_age = True
compare_providers_priority = 80
cost = 1000
deltarpm_metadata_percentage = 100
deltarpm_percentage =
enabled = 1
enablegroups = True
exclude =
failovermethod = priority
ftp_disable_epsv = False
gpgcadir = /var/lib/yum/repos/x86_64/7Server/rhui-REGION-rhel-server-extras/gpgcadir
gpgcakey =
gpgcheck = True
gpgdir = /var/lib/yum/repos/x86_64/7Server/rhui-REGION-rhel-server-extras/gpgdir
gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
hdrdir = /var/cache/yum/x86_64/7Server/rhui-REGION-rhel-server-extras/headers
http_caching = all
includepkgs =
ip_resolve =
keepalive = True
keepcache = False
mddownloadpolicy = sqlite
mdpolicy = group:small
mediaid =
metadata_expire = 21600
metadata_expire_filter = read-only:present
metalink =
minrate = 0
mirrorlist = https://rhui2-cds01.REGION.aws.ce.redhat.com/pulp/mirror/content/dist/rhel/rhui/server/7/7Ser r/x86_64/extras/os
mirrorlist_expire = 86400
name = Red Hat Enterprise Linux Server 7 Extra(RPMs)
old_base_cache_dir =
password =
persistdir = /var/lib/yum/repos/x86_64/7Server/rhui-REGION-rhel-server-extras
pkgdir = /var/cache/yum/x86_64/7Server/rhui-REGION-rhel-server-extras/packages
proxy = False
proxy_dict =
proxy_password =
proxy_username =
repo_gpgcheck = False
retries = 10
skip_if_unavailable = False
ssl_check_cert_permissions = True
sslcacert = /etc/pki/rhui/cdn.redhat.com-chain.crt
sslclientcert = /etc/pki/rhui/product/content-rhel7.crt
sslclientkey = /etc/pki/rhui/content-rhel7.key
sslverify = True
throttle = 0
timeout = 30.0
ui_id = rhui-REGION-rhel-server-extras/7Server/x86_64
ui_repoid_vars = releasever,
basearch
username =
DockerEngine用のリポジトリ有効化します。
# yum-config-manager --add-repo "$DOCKERURL/rhel/docker-ee.repo"
Loaded plugins: amazon-id, rhui-lb
adding repo from: https://storebits.docker.com/ee/rhel/sub-93c2d407-d67d-466a-b84f-0f4fe6d1a37f/rhel/docker-ee.repo
grabbing file https://storebits.docker.com/ee/rhel/sub-93c2d407-d67d-466a-b84f-0f4fe6d1a37f/rhel/docker-ee.repo to /etc/yum.repos.d/docker-ee.repo
repo saved to /etc/yum.repos.d/docker-ee.repo
#
リポジトリの準備が終わったので、インストールをします。
# yum -y install docker-ee docker-ee-cli containerd.io
Loaded plugins: amazon-id, rhui-lb, search-disabled-repos
docker-ee-stable-18.09 | 3.5 kB 00:00:00
rhui-REGION-rhel-server-extras | 3.4 kB 00:00:00
rhui-REGION-rhel-server-releases | 3.5 kB 00:00:00
rhui-REGION-rhel-server-rh-common | 3.8 kB 00:00:00
(1/5): rhui-REGION-rhel-server-extras/7Server/x86_64/group | 124 B 00:00:00
(2/5): rhui-REGION-rhel-server-extras/7Server/x86_64/updateinfo | 200 kB 00:00:00
(3/5): rhui-REGION-rhel-server-extras/7Server/x86_64/primary_db | 536 kB 00:00:00
(4/5): docker-ee-stable-18.09/x86_64/updateinfo | 55 B 00:00:01
(5/5): docker-ee-stable-18.09/x86_64/primary_db | 14 kB 00:00:01
Resolving Dependencies
--> Running transaction check
---> Package containerd.io.x86_64 0:1.2.6-3.3.el7 will be installed
--> Processing Dependency: container-selinux >= 2:2.74 for package: containerd.io-1.2.6-3.3.el7.x86_64
---> Package docker-ee.x86_64 3:18.09.7-3.el7 will be installed
---> Package docker-ee-cli.x86_64 1:18.09.7-3.el7 will be installed
--> Running transaction check
---> Package container-selinux.noarch 2:2.99-1.el7_6 will be installed
--> Processing Dependency: selinux-policy >= 3.13.1-216.el7 for package: 2:container-selinux-2.99-1.el7_6.noarch
--> Processing Dependency: selinux-policy-base >= 3.13.1-216.el7 for package: 2:container-selinux-2.99-1.el7_6.noarch
--> Processing Dependency: selinux-policy-targeted >= 3.13.1-216.el7 for package: 2:container-selinux-2.99-1.el7_6.noarch
--> Running transaction check
---> Package selinux-policy.noarch 0:3.13.1-192.el7 will be updated
---> Package selinux-policy.noarch 0:3.13.1-229.el7_6.12 will be an update
--> Processing Dependency: libsemanage >= 2.5-13 for package: selinux-policy-3.13.1-229.el7_6.12.noarch
--> Processing Dependency: policycoreutils >= 2.5-24 for package: selinux-policy-3.13.1-229.el7_6.12.noarch
---> Package selinux-policy-targeted.noarch 0:3.13.1-192.el7 will be updated
---> Package selinux-policy-targeted.noarch 0:3.13.1-229.el7_6.12 will be an update
--> Running transaction check
---> Package libsemanage.x86_64 0:2.5-11.el7 will be updated
--> Processing Dependency: libsemanage = 2.5-11.el7 for package: libsemanage-python-2.5-11.el7.x86_64
---> Package libsemanage.x86_64 0:2.5-14.el7 will be an update
--> Processing Dependency: libselinux >= 2.5-14 for package: libsemanage-2.5-14.el7.x86_64
--> Processing Dependency: libsepol >= 2.5-10 for package: libsemanage-2.5-14.el7.x86_64
---> Package policycoreutils.x86_64 0:2.5-22.el7 will be updated
--> Processing Dependency: policycoreutils = 2.5-22.el7 for package: policycoreutils-python-2.5-22.el7.x86_64
---> Package policycoreutils.x86_64 0:2.5-29.el7_6.1 will be an update
--> Processing Dependency: libselinux-utils >= 2.5-14 for package: policycoreutils-2.5-29.el7_6.1.x86_64
--> Running transaction check
---> Package libselinux.x86_64 0:2.5-12.el7 will be updated
--> Processing Dependency: libselinux(x86-64) = 2.5-12.el7 for package: libselinux-python-2.5-12.el7.x86_64
---> Package libselinux.x86_64 0:2.5-14.1.el7 will be an update
---> Package libselinux-utils.x86_64 0:2.5-12.el7 will be updated
---> Package libselinux-utils.x86_64 0:2.5-14.1.el7 will be an update
---> Package libsemanage-python.x86_64 0:2.5-11.el7 will be updated
---> Package libsemanage-python.x86_64 0:2.5-14.el7 will be an update
---> Package libsepol.x86_64 0:2.5-8.1.el7 will be updated
---> Package libsepol.x86_64 0:2.5-10.el7 will be an update
---> Package policycoreutils-python.x86_64 0:2.5-22.el7 will be updated
---> Package policycoreutils-python.x86_64 0:2.5-29.el7_6.1 will be an update
--> Processing Dependency: setools-libs >= 3.3.8-4 for package: policycoreutils-python-2.5-29.el7_6.1.x86_64
--> Running transaction check
---> Package libselinux-python.x86_64 0:2.5-12.el7 will be updated
---> Package libselinux-python.x86_64 0:2.5-14.1.el7 will be an update
---> Package setools-libs.x86_64 0:3.3.8-2.el7 will be updated
---> Package setools-libs.x86_64 0:3.3.8-4.el7 will be an update
--> Finished Dependency Resolution
Dependencies Resolved
============================================================================================================
Package Arch Version Repository Size
============================================================================================================
Installing:
containerd.io x86_64 1.2.6-3.3.el7 docker-ee-stable-18.09 26 M
docker-ee x86_64 3:18.09.7-3.el7 docker-ee-stable-18.09 21 M
docker-ee-cli x86_64 1:18.09.7-3.el7 docker-ee-stable-18.09 15 M
Installing for dependencies:
container-selinux noarch 2:2.99-1.el7_6 rhui-REGION-rhel-server-extras 39 k
Updating for dependencies:
libselinux x86_64 2.5-14.1.el7 rhui-REGION-rhel-server-releases 162 k
libselinux-python x86_64 2.5-14.1.el7 rhui-REGION-rhel-server-releases 236 k
libselinux-utils x86_64 2.5-14.1.el7 rhui-REGION-rhel-server-releases 152 k
libsemanage x86_64 2.5-14.el7 rhui-REGION-rhel-server-releases 151 k
libsemanage-python x86_64 2.5-14.el7 rhui-REGION-rhel-server-releases 113 k
libsepol x86_64 2.5-10.el7 rhui-REGION-rhel-server-releases 297 k
policycoreutils x86_64 2.5-29.el7_6.1 rhui-REGION-rhel-server-releases 916 k
policycoreutils-python x86_64 2.5-29.el7_6.1 rhui-REGION-rhel-server-releases 456 k
selinux-policy noarch 3.13.1-229.el7_6.12 rhui-REGION-rhel-server-releases 484 k
selinux-policy-targeted noarch 3.13.1-229.el7_6.12 rhui-REGION-rhel-server-releases 6.9 M
setools-libs x86_64 3.3.8-4.el7 rhui-REGION-rhel-server-releases 620 k
Transaction Summary
============================================================================================================
Install 3 Packages (+ 1 Dependent package)
Upgrade ( 11 Dependent packages)
Total download size: 72 M
Downloading packages:
Delta RPMs disabled because /usr/bin/applydeltarpm not installed.
(1/15): container-selinux-2.99-1.el7_6.noarch.rpm | 39 kB 00:00:00
warning: /var/cache/yum/x86_64/7Server/docker-ee-stable-18.09/packages/containerd.io-1.2.6-3.3.el7.x86_64.rpm: Header V4 RSA/SHA512 Signature, key ID 76682bc9: NOKEY
Public key for containerd.io-1.2.6-3.3.el7.x86_64.rpm is not installed
(2/15): containerd.io-1.2.6-3.3.el7.x86_64.rpm | 26 MB 00:00:03
(3/15): docker-ee-18.09.7-3.el7.x86_64.rpm | 21 MB 00:00:03
(4/15): libselinux-2.5-14.1.el7.x86_64.rpm | 162 kB 00:00:00
(5/15): libselinux-utils-2.5-14.1.el7.x86_64.rpm | 152 kB 00:00:00
(6/15): libselinux-python-2.5-14.1.el7.x86_64.rpm | 236 kB 00:00:00
(7/15): libsemanage-2.5-14.el7.x86_64.rpm | 151 kB 00:00:00
(8/15): libsemanage-python-2.5-14.el7.x86_64.rpm | 113 kB 00:00:00
(9/15): libsepol-2.5-10.el7.x86_64.rpm | 297 kB 00:00:00
(10/15): policycoreutils-2.5-29.el7_6.1.x86_64.rpm | 916 kB 00:00:00
(11/15): policycoreutils-python-2.5-29.el7_6.1.x86_64.rpm | 456 kB 00:00:00
(12/15): selinux-policy-3.13.1-229.el7_6.12.noarch.rpm | 484 kB 00:00:00
(13/15): setools-libs-3.3.8-4.el7.x86_64.rpm | 620 kB 00:00:00
(14/15): selinux-policy-targeted-3.13.1-229.el7_6.12.noarch.rpm | 6.9 MB 00:00:00
(15/15): docker-ee-cli-18.09.7-3.el7.x86_64.rpm | 15 MB 00:00:02
------------------------------------------------------------------------------------------------------------
Total 11 MB/s | 72 MB 00:00:06
Retrieving key from https://storebits.docker.com/ee/rhel/sub-93c2d407-d67d-466a-b84f-0f4fe6d1a37f/rhel/gpg
Importing GPG key 0x76682BC9:
Userid : "Docker Release (EE rpm) <docker@docker.com>"
Fingerprint: 77fe da13 1a83 1d29 a418 d3e8 99e5 ff2e 7668 2bc9
From : https://storebits.docker.com/ee/rhel/sub-93c2d407-d67d-466a-b84f-0f4fe6d1a37f/rhel/gpg
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
Updating : libsepol-2.5-10.el7.x86_64 1/26
Updating : libselinux-2.5-14.1.el7.x86_64 2/26
Updating : libsemanage-2.5-14.el7.x86_64 3/26
Updating : libselinux-utils-2.5-14.1.el7.x86_64 4/26
Updating : policycoreutils-2.5-29.el7_6.1.x86_64 5/26
Updating : selinux-policy-3.13.1-229.el7_6.12.noarch 6/26
Updating : selinux-policy-targeted-3.13.1-229.el7_6.12.noarch 7/26
Updating : libsemanage-python-2.5-14.el7.x86_64 8/26
Updating : setools-libs-3.3.8-4.el7.x86_64 9/26
Updating : libselinux-python-2.5-14.1.el7.x86_64 10/26
Updating : policycoreutils-python-2.5-29.el7_6.1.x86_64 11/26
Installing : 2:container-selinux-2.99-1.el7_6.noarch 12/26
Installing : containerd.io-1.2.6-3.3.el7.x86_64 13/26
Installing : 1:docker-ee-cli-18.09.7-3.el7.x86_64 14/26
Installing : 3:docker-ee-18.09.7-3.el7.x86_64 15/26
Cleanup : selinux-policy-targeted-3.13.1-192.el7.noarch 16/26
Cleanup : policycoreutils-python-2.5-22.el7.x86_64 17/26
Cleanup : selinux-policy-3.13.1-192.el7.noarch 18/26
Cleanup : policycoreutils-2.5-22.el7.x86_64 19/26
Cleanup : libselinux-utils-2.5-12.el7.x86_64 20/26
Cleanup : setools-libs-3.3.8-2.el7.x86_64 21/26
Cleanup : libselinux-python-2.5-12.el7.x86_64 22/26
Cleanup : libsemanage-python-2.5-11.el7.x86_64 23/26
Cleanup : libsemanage-2.5-11.el7.x86_64 24/26
Cleanup : libselinux-2.5-12.el7.x86_64 25/26
Cleanup : libsepol-2.5-8.1.el7.x86_64 26/26
Verifying : policycoreutils-2.5-29.el7_6.1.x86_64 1/26
Verifying : 1:docker-ee-cli-18.09.7-3.el7.x86_64 2/26
Verifying : setools-libs-3.3.8-4.el7.x86_64 3/26
Verifying : selinux-policy-targeted-3.13.1-229.el7_6.12.noarch 4/26
Verifying : selinux-policy-3.13.1-229.el7_6.12.noarch 5/26
Verifying : policycoreutils-python-2.5-29.el7_6.1.x86_64 6/26
Verifying : libsemanage-python-2.5-14.el7.x86_64 7/26
Verifying : libsemanage-2.5-14.el7.x86_64 8/26
Verifying : libsepol-2.5-10.el7.x86_64 9/26
Verifying : containerd.io-1.2.6-3.3.el7.x86_64 10/26
Verifying : libselinux-python-2.5-14.1.el7.x86_64 11/26
Verifying : libselinux-utils-2.5-14.1.el7.x86_64 12/26
Verifying : 2:container-selinux-2.99-1.el7_6.noarch 13/26
Verifying : libselinux-2.5-14.1.el7.x86_64 14/26
Verifying : 3:docker-ee-18.09.7-3.el7.x86_64 15/26
Verifying : libsemanage-python-2.5-11.el7.x86_64 16/26
Verifying : libsemanage-2.5-11.el7.x86_64 17/26
Verifying : libselinux-python-2.5-12.el7.x86_64 18/26
Verifying : setools-libs-3.3.8-2.el7.x86_64 19/26
Verifying : policycoreutils-2.5-22.el7.x86_64 20/26
Verifying : policycoreutils-python-2.5-22.el7.x86_64 21/26
Verifying : selinux-policy-targeted-3.13.1-192.el7.noarch 22/26
Verifying : libsepol-2.5-8.1.el7.x86_64 23/26
Verifying : selinux-policy-3.13.1-192.el7.noarch 24/26
Verifying : libselinux-2.5-12.el7.x86_64 25/26
Verifying : libselinux-utils-2.5-12.el7.x86_64 26/26
Installed:
containerd.io.x86_64 0:1.2.6-3.3.el7 docker-ee.x86_64 3:18.09.7-3.el7
docker-ee-cli.x86_64 1:18.09.7-3.el7
Dependency Installed:
container-selinux.noarch 2:2.99-1.el7_6
Dependency Updated:
libselinux.x86_64 0:2.5-14.1.el7 libselinux-python.x86_64 0:2.5-14.1.el7
libselinux-utils.x86_64 0:2.5-14.1.el7 libsemanage.x86_64 0:2.5-14.el7
libsemanage-python.x86_64 0:2.5-14.el7 libsepol.x86_64 0:2.5-10.el7
policycoreutils.x86_64 0:2.5-29.el7_6.1 policycoreutils-python.x86_64 0:2.5-29.el7_6.1
selinux-policy.noarch 0:3.13.1-229.el7_6.12 selinux-policy-targeted.noarch 0:3.13.1-229.el7_6.12
setools-libs.x86_64 0:3.3.8-4.el7
Complete!
#
これで完了。
Dockerサービスを起動させましょう。
# systemctl start docker
# systemctl status docker
● docker.service - Docker Application Container Engine
Loaded: loaded (/usr/lib/systemd/system/docker.service; disabled; vendor preset: disabled)
Active: active (running) since Sat 2019-07-06 04:49:42 UTC; 4s ago
Docs: https://docs.docker.com
Main PID: 2341 (dockerd)
Tasks: 8
Memory: 31.7M
CGroup: /system.slice/docker.service
mq2341 /usr/bin/dockerd -H fd:// --containerd=/run/containerd/containerd.sock
Jul 06 04:49:42 ip-10-0-0-51.ap-northeast-1.compute.internal dockerd[2341]: time="2019-07-06T04:49:42.52..."
Jul 06 04:49:42 ip-10-0-0-51.ap-northeast-1.compute.internal dockerd[2341]: time="2019-07-06T04:49:42.52..."
Jul 06 04:49:42 ip-10-0-0-51.ap-northeast-1.compute.internal dockerd[2341]: time="2019-07-06T04:49:42.68..."
Jul 06 04:49:42 ip-10-0-0-51.ap-northeast-1.compute.internal dockerd[2341]: time="2019-07-06T04:49:42.76..."
Jul 06 04:49:42 ip-10-0-0-51.ap-northeast-1.compute.internal dockerd[2341]: time="2019-07-06T04:49:42.81..."
Jul 06 04:49:42 ip-10-0-0-51.ap-northeast-1.compute.internal dockerd[2341]: time="2019-07-06T04:49:42.82...7
Jul 06 04:49:42 ip-10-0-0-51.ap-northeast-1.compute.internal dockerd[2341]: time="2019-07-06T04:49:42.82..."
Jul 06 04:49:42 ip-10-0-0-51.ap-northeast-1.compute.internal dockerd[2341]: time="2019-07-06T04:49:42.82..."
Jul 06 04:49:42 ip-10-0-0-51.ap-northeast-1.compute.internal dockerd[2341]: time="2019-07-06T04:49:42.86..."
Jul 06 04:49:42 ip-10-0-0-51.ap-northeast-1.compute.internal systemd[1]: Started Docker Application Cont....
Hint: Some lines were ellipsized, use -l to show in full.
#
せっかくなので、コンテナ立ち上げテスト。
ubuntuを立ち上げます。
# docker run -it ubuntu bash
Unable to find image 'ubuntu:latest' locally
latest: Pulling from library/ubuntu
5b7339215d1d: Pull complete
14ca88e9f672: Pull complete
a31c3b1caad4: Pull complete
b054a26005b7: Pull complete
Digest: sha256:9b1702dcfe32c873a770a32cfd306dd7fc1c4fd134adfb783db68defc8894b3c
Status: Downloaded newer image for ubuntu:latest
root@13841ed1810a:/#
root@13841ed1810a:/# exit
exit
#
これでDockerEEは終了です。
#3.UCPインストール
まずは、UCPのコンテナイメージをDockerHubからpullします。
# docker image pull docker/ucp:3.1.8
3.1.8: Pulling from docker/ucp
c87736221ed0: Pull complete
831158f6c3f0: Pull complete
7eaca31ce090: Pull complete
Digest: sha256:048414d9d3fd5cc93b3a762582c2cea73b94ef5449072b16231f13b9e355c1e4
Status: Downloaded newer image for docker/ucp:3.1.8
#
イメージをpullしたので、コンテナを立ち上げます。
# docker container run --rm -it --name ucp \
> -v /var/run/docker.sock:/var/run/docker.sock \
> docker/ucp:3.1.8 install \
> --host-address ＜自分のIPアドレス＞ \
> --interactive
INFO[0000] Your engine version 18.09.7, build b81f474 (3.10.0-862.el7.x86_64) is compatible with UCP 3.1.8 (b22346c)
Admin Username: ＜ユーザー名＞
Admin Password: ＜パスワード＞
Confirm Admin Password: ＜パスワード＞
INFO[0031] Pulling required images... (this may take a while)
INFO[0031] Pulling docker/ucp-etcd:3.1.8
INFO[0036] Pulling docker/ucp-agent:3.1.8
INFO[0040] Pulling docker/ucp-kube-compose:3.1.8
INFO[0044] Pulling docker/ucp-hyperkube:3.1.8
INFO[0059] Pulling docker/ucp-kube-dns:3.1.8
INFO[0063] Pulling docker/ucp-metrics:3.1.8
INFO[0068] Pulling docker/ucp-auth:3.1.8
INFO[0072] Pulling docker/ucp-azure-ip-allocator:3.1.8
INFO[0075] Pulling docker/ucp-interlock-extension:3.1.8
INFO[0079] Pulling docker/ucp-interlock-proxy:3.1.8
INFO[0083] Pulling docker/ucp-calico-kube-controllers:3.1.8
INFO[0091] Pulling docker/ucp-calico-node:3.1.8
INFO[0097] Pulling docker/ucp-dsinfo:3.1.8
INFO[0113] Pulling docker/ucp-swarm:3.1.8
INFO[0116] Pulling docker/ucp-auth-store:3.1.8
INFO[0121] Pulling docker/ucp-kube-dns-sidecar:3.1.8
INFO[0125] Pulling docker/ucp-interlock:3.1.8
INFO[0128] Pulling docker/ucp-calico-cni:3.1.8
INFO[0133] Pulling docker/ucp-kube-dns-dnsmasq-nanny:3.1.8
INFO[0138] Pulling docker/ucp-pause:3.1.8
INFO[0141] Pulling docker/ucp-kube-compose-api:3.1.8
INFO[0146] Pulling docker/ucp-cfssl:3.1.8
INFO[0149] Pulling docker/ucp-controller:3.1.8
INFO[0157] Pulling docker/ucp-compose:3.1.8
We detected the following hostnames/IP addresses for this system [ip-10-0-0-51.ap-northeast-1.compute.internal 127.0.0.1 172.17.0.1 10.0.0.51]
You may enter additional aliases (SANs) now or press enter to proceed with the above list.
Additional aliases:
INFO[0000] Initializing a new swarm at 10.0.0.51
INFO[0007] Installing UCP with host address 10.0.0.51 - If this is incorrect, please specify an alternative address with the '--host-address' flag
INFO[0007] Deploying UCP Service...
INFO[0077] Installation completed on ip-10-0-0-51.ap-northeast-1.compute.internal (node gfr42419cmfwz2xt57wgf8wmh)
INFO[0077] UCP Instance ID: izfuh7vqgm5z9v76473dckqvi
INFO[0077] UCP Server SSL: SHA-256 Fingerprint=54:84:37:11:3A:64:A4:33:73:03:21:E7:C4:BE:9E:97:8B:3B:09:C1:FC:99:5C:06:08:BC:E7:0B:4E:FD:B1:FC
INFO[0077] Login to UCP at https://10.0.0.51:443
INFO[0077] Username:
INFO[0077] Password: (your admin password)
#
コンテナが立ち上がったので、ログインしましょう。
・https://＜自分のIPアドレス＞:443
EC2の場合、ローカルのIPではなく、ElasticIPでのログインになります。
証明書のエラーが出ますが、スルーしましょう。
ログイン後ライセンスキーの投入画面が出ます。
2.DockerEngineEEインストールでダウンロードしたライセンスキーを投入します。
これでUCPのインストールは終了です。
#4.DTRインストール
UCP操作をしていきます。
・Admin Settingを選択
・Docker Trusted Registryを選択
UCP NODEをプルダウンから選択。
Disable TLS verification for UCPのチェックを外す。
そうして出てきたコマンドを、RHELに打ち込みますが
残念ながらエラーになるはずです。
DTRはデフォルトで443のポートを使用します。
UCPが既に443を使用しているので、競合が発生します。
UCPを別ポートにする対処を行いましょう。
・Cluster Configurationを選択
Controller Portを443から8443に変更します。
変更が終わったら、UCPには8443でアクセスが出来ることを確認しましょう。
・https://＜自分のIPアドレス＞:8443
# docker run -it --rm docker/dtr install --ucp-node ip-10-0-0-51.ap-northeast-1.compute.internal --ucp-username ＜ユーザ名＞ --ucp-url https://10.0.0.51:8443 --ucp-insecure-tls
INFO[0000] Beginning Docker Trusted Registry installation
ucp-password:＜パスワード＞
INFO[0003] Validating UCP cert
INFO[0003] Connecting to UCP
INFO[0003] health checking ucp
INFO[0003] Only one available UCP node detected. Picking UCP node 'ip-10-0-0-51.ap-northeast-1.compute.internal'
INFO[0003] Searching containers in UCP for DTR replicas
INFO[0003] Searching containers in UCP for DTR replicas
INFO[0004] verifying [80 443] ports on ip-10-0-0-51.ap-northeast-1.compute.internal
INFO[0009] Waiting for running dtr-phase2 container to finish
INFO[0009] starting phase 2
INFO[0000] Validating UCP cert
INFO[0000] Connecting to UCP
INFO[0000] health checking ucp
INFO[0000] Verifying your system is compatible with DTR
INFO[0000] Checking if the node is okay to install on
WARN[0000] Node: ip-10-0-0-51.ap-northeast-1.compute.internal is a manager, it is **not** recommended for DTR to reside on a UCP manager node, see: https://docs.docker.com/ee/dtr/admin/install/system-requirements/ for more info.
WARN[0000] Installation will continue in 10 seconds...
INFO[0010] Using default overlay subnet: 10.1.0.0/24
INFO[0010] Creating network: dtr-ol
INFO[0010] Connecting to network: dtr-ol
INFO[0010] Waiting for phase2 container to be known to the Docker daemon
INFO[0011] Setting up replica volumes...
INFO[0011] Creating initial CA certificates
INFO[0011] Bootstrapping rethink...
INFO[0011] Creating dtr-rethinkdb-4bd224354f6a...
INFO[0020] Establishing connection with Rethinkdb
INFO[0021] Waiting for database dtr2 to exist
INFO[0021] Establishing connection with Rethinkdb
INFO[0021] Generated TLS certificate. dnsNames="[*.com *.*.com example.com *.dtr *.*.dtr]" domains="[*.com *.*.com 172.17.0.1 example.com *.dtr *.*.dtr]" ipAddresses="[172.17.0.1]"
INFO[0022] License config copied from UCP.
INFO[0022] Migrating db...
INFO[0000] Establishing connection with Rethinkdb
INFO[0000] Migrating database schema fromVersion=0 toVersion=10
INFO[0001] Waiting for database notaryserver to exist
INFO[0001] Waiting for database notarysigner to exist
INFO[0002] Waiting for database jobrunner to exist
INFO[0002] Migrated database from version 0 to 10
INFO[0025] Starting all containers...
INFO[0025] Getting container configuration and starting containers...
INFO[0025] Automatically configuring rethinkdb cache size to 14245 mb
INFO[0025] Recreating dtr-rethinkdb-4bd224354f6a...
INFO[0030] Creating dtr-registry-4bd224354f6a...
INFO[0038] Creating dtr-garant-4bd224354f6a...
INFO[0045] Creating dtr-api-4bd224354f6a...
INFO[0053] Creating dtr-notary-server-4bd224354f6a...
INFO[0060] Recreating dtr-nginx-4bd224354f6a...
INFO[0068] Creating dtr-jobrunner-4bd224354f6a...
INFO[0100] Creating dtr-notary-signer-4bd224354f6a...
INFO[0107] Creating dtr-scanningstore-4bd224354f6a...
INFO[0115] Trying to get the kv store connection back after reconfigure
INFO[0115] Establishing connection with Rethinkdb
INFO[0115] Verifying auth settings...
INFO[0115] Successfully registered dtr with UCP
INFO[0115] Installation is complete
INFO[0115] Replica ID is set to: 4bd224354f6a
INFO[0115] You can use flag '--existing-replica-id 4bd224354f6a' when joining other replicas to your Docker Trusted Registry Cluster
#
それでは、DTRにアクセスします。
・https://＜自分のIPアドレス＞:443
DTRの構築が無事終わりました。
レジストリとクライアント間の通信は、tlsのためCAの証明書が必要です。
下記コマンドでダウンロード配置を行います。
# curl -k https://＜IPアドレス＞/ca -o /etc/pki/ca-trust/source/anchors/hoge.crt
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 774 100 774 0 0 23399 0 --:--:-- --:--:-- --:--:-- 24187
#
# update-ca-trust
#
# systemctl restart docker
#
これでプライベートなDockerレジストリの構築が完了しました。
あとは、docker push/pullで素敵なdockerライフを送りましょう。
Dockerレジストリ設定の記事はまた、別に書こうと思います。
#参考URL
https://docs.docker.com/install/linux/docker-ee/rhel/#find-your-docker-ee-repo-url
https://docs.docker.com/ee/ucp/admin/install/
https://docs.docker.com/ee/dtr/admin/install/
#以下、個人的なメモ
メモ
・dockerイメージは下記にする必要があります。
[ホスト名]:[ポート番号]/[リポジトリ名/リポジトリ名]:[イメージ名]
# docker login 172.17.0.1:443
# docker tag registry.access.redhat.com/rhel7 [ホスト名]:[ポート番号]/[リポジトリ名/リポジトリ名]:[イメージ名]
# docker push [ホスト名]:[ポート番号]/[リポジトリ名/リポジトリ名]:[イメージ名]