Download as PDF, PPTX
![Cache Implementation
Either the dockerd CLI:
dockerd --registry-mirror <cache-url>
Or /etc/docker/daemon.json
{ "registry-mirrors": [ "<cache-url>" ] }
Plus a registry:
docker run -e REGISTRY_PROXY_REMOTEURL=<upstream-url> registry:2
@sudo_bmitch15 / 35](https://image.slidesharecdn.com/brandonmitchell-howtousemirroringandcachingtooptimizeregistry-200529022146/75/How-to-Use-Mirroring-and-Caching-to-Optimize-your-Container-Registry-15-2048.jpg)
![Manual Mirror Script
docker image pull "$localimg"
docker image pull "$remoteimg"
remoteid=$(docker image inspect "$remoteimg" --format '{.Id}')
localid=$(docker image inspect "$localimg" --format '{.Id}')
if [ "$remoteid" != "$localid" ]; then
docker image tag "$localimg" "$localimg.$datestamp"
docker image tag "$remoteimg" "$localimg"
docker image push "$localimg.$datestamp"
docker image push "$localimg"
fi
@sudo_bmitch30 / 35](https://image.slidesharecdn.com/brandonmitchell-howtousemirroringandcachingtooptimizeregistry-200529022146/75/How-to-Use-Mirroring-and-Caching-to-Optimize-your-Container-Registry-30-2048.jpg)
![Cache Implementation
Either the dockerd CLI:
dockerd --registry-mirror <cache-url>
Or /etc/docker/daemon.json
{ "registry-mirrors": [ "<cache-url>" ] }
Plus a registry:
docker run -e REGISTRY_PROXY_REMOTEURL=<upstream-url> registry:2
@sudo_bmitch15 / 35](https://crownmelresort.com/image.slidesharecdn.com/brandonmitchell-howtousemirroringandcachingtooptimizeregistry-200529022146/75/How-to-Use-Mirroring-and-Caching-to-Optimize-your-Container-Registry-15-2048.jpg)
![Manual Mirror Script
docker image pull "$localimg"
docker image pull "$remoteimg"
remoteid=$(docker image inspect "$remoteimg" --format '{.Id}')
localid=$(docker image inspect "$localimg" --format '{.Id}')
if [ "$remoteid" != "$localid" ]; then
docker image tag "$localimg" "$localimg.$datestamp"
docker image tag "$remoteimg" "$localimg"
docker image push "$localimg.$datestamp"
docker image push "$localimg"
fi
@sudo_bmitch30 / 35](https://crownmelresort.com/image.slidesharecdn.com/brandonmitchell-howtousemirroringandcachingtooptimizeregistry-200529022146/75/How-to-Use-Mirroring-and-Caching-to-Optimize-your-Container-Registry-30-2048.jpg)
Uploaded byDocker, Inc.
How to Use Mirroring and Caching to Optimize your Container Registry
The document discusses the use of caching and mirroring to optimize image registries, highlighting methods like configuring registry mirrors and manual syncing of images. It addresses limitations and risks associated with caching, emphasizing the benefits of managing your own mirror to save bandwidth and ensure resilience against upstream outages. Additionally, it provides technical implementation details and strategies for manually mirroring Docker images.
More Related Content
Similar to How to Use Mirroring and Caching to Optimize your Container Registry
How to Use Mirroring and Caching to Optimize your Container Registry
- 1. Caching Caching Demos Caching Limitations CachingOther Registries Caching Gitlab Demo Mirroring Manual Mirroring Summary Agenda @sudo_bmitch1 / 35
- 2. How to UseMirroring and Caching to Optimize Your Image Registry Brandon Mitchell Twitter: @sudo_bmitch GitHub: sudo-bmitch 2 / 35
- 3.
- 4. Cluster Pulling RemoteImages? @sudo_bmitch4 / 35
- 5. Worry About UpstreamImage Changes? @sudo_bmitch5 / 35
- 6. Build and DeployInfrastructure Tolerant of Upstream Outages? @sudo_bmitch6 / 35
- 7.
- 8.
- 9.
- 10.
- 11. Faster Builds andLess Bandwidth @sudo_bmitch11 / 35
- 12.
- 13. Caching is theEasy Button https://commons.wikimedia.org/wiki/File:Easy_button.JPG @sudo_bmitch13 / 35
- 14.
- 15. Cache Implementation Either thedockerd CLI: dockerd --registry-mirror <cache-url> Or /etc/docker/daemon.json { "registry-mirrors": [ "<cache-url>" ] } Plus a registry: docker run -e REGISTRY_PROXY_REMOTEURL=<upstream-url> registry:2 @sudo_bmitch15 / 35
- 16.
- 17.
- 18.
- 19.
- 20.
- 21. So What's theCatch? @sudo_bmitch21 / 35
- 22. Cache Limitations The "registry-mirror"setting only applies to Docker Hub Only caches pulls not pushes Pulls still check the image manifest on Hub Credentials are in the cache server Docker implementation only supports one authentication method @sudo_bmitch22 / 35
- 23. Options to CacheOther Registries Con gure a squid HTTP caching proxy Pull directly from the cache Use DNS and TLS certs to send pulls to the proxy @sudo_bmitch23 / 35
- 24.
- 25.
- 26.
- 27.
- 28. Running a Registry Dockerimage docker container run -p 5000:5000 registry:2 Harbor Many Artifact Repositories @sudo_bmitch28 / 35
- 29. Manually Mirroring docker imagepull ${image} docker image tag ${image} local-mirror:5000/${image} docker image push local-mirror:5000/${image} @sudo_bmitch29 / 35
- 30. Manual Mirror Script dockerimage pull "$localimg" docker image pull "$remoteimg" remoteid=$(docker image inspect "$remoteimg" --format '{.Id}') localid=$(docker image inspect "$localimg" --format '{.Id}') if [ "$remoteid" != "$localid" ]; then docker image tag "$localimg" "$localimg.$datestamp" docker image tag "$remoteimg" "$localimg" docker image push "$localimg.$datestamp" docker image push "$localimg" fi @sudo_bmitch30 / 35
- 31. Why All theComplication? @sudo_bmitch31 / 35
- 32. Advantages of ManuallyMirroring Over Automatically Syncing Repos: Changes to images happen on your schedule Backout option exists with breaking changes Over Pull Through Cache Those reasons plus... Pushing locally built images to the registry Upstream outage doesn't stop local builds/deploys @sudo_bmitch32 / 35
- 33. Risks of ManuallyMirroring Images go stale if you do not automate the script Adding new images is an added process Recovering from a mirror outage requires populating images FROM line in images needs to point to mirror ARG REGISTRY=docker.io FROM ${REGISTRY}/alpine:3.9 ... docker build --build-arg REGISTRY=local-mirror:5000 . @sudo_bmitch33 / 35
- 34. Summary Both Saves bandwidth Faster builds PullThrough Cache Easy to create Little maintenance Managed Mirror Control changes Tolerate upstream outages @sudo_bmitch34 / 35
- 35. Brandon Mitchell Twitter: @sudo_bmitch GitHub:sudo-bmitch Thank You github.com/sudo-bmitch/presentations 35 / 35