\u5b9e\u65bd\u4ee5\u4e0bshell\u811a\u672c\u6765\u76d1\u63a7\u955c\u50cf\u52a0\u901f\u5668\u6027\u80fd\uff1a<\/p>\n

\r\n#!\/bin\/bash\r\n# mirror_health_check.sh\r\n\r\nMIRRORS=(\"mirror.gcr.io\" \"hk.mirror.aliyuncs.com\" \"registry.docker-cn.com\")\r\nTEST_IMAGE=\"ubuntu:latest\"\r\n\r\nfor mirror in \"${MIRRORS[@]}\"; do\r\n    echo \"\u6d4b\u8bd5 $mirror...\"\r\n    time docker pull $mirror\/$TEST_IMAGE\r\n    docker rmi $mirror\/$TEST_IMAGE\r\ndone\r\n<\/code><\/pre>\n
\u9ad8\u7ea7\u914d\u7f6e\u8bbe\u7f6e<\/strong><\/h2>\n
\u4f7f\u7528\u8fd9\u4e9b\u6027\u80fd\u5bfc\u5411\u7684\u53c2\u6570\u5fae\u8c03\u60a8\u7684Docker\u5b88\u62a4\u8fdb\u7a0b\u914d\u7f6e\uff1a<\/p>\n
\r\n{\r\n  \"registry-mirrors\": [\r\n    \"https:\/\/mirror.gcr.io\",\r\n    \"https:\/\/hk.mirror.aliyuncs.com\"\r\n  ],\r\n  \"max-concurrent-downloads\": 10,\r\n  \"max-concurrent-uploads\": 5,\r\n  \"default-shm-size\": \"64M\",\r\n  \"storage-driver\": \"overlay2\",\r\n  \"log-driver\": \"json-file\",\r\n  \"log-opts\": {\r\n    \"max-size\": \"10m\",\r\n    \"max-file\": \"3\"\r\n  }\r\n}\r\n<\/code><\/pre>\n
\u8fd9\u4e9b\u8bbe\u7f6e\u4f18\u5316\u4e86\u5e76\u53d1\u64cd\u4f5c\u3001\u5185\u5b58\u5206\u914d\u548c\u5b58\u50a8\u6548\u7387\u3002overlay2\u5b58\u50a8\u9a71\u52a8\u7a0b\u5e8f\u76f8\u6bd4\u8f83\u65e7\u7684\u66ff\u4ee3\u65b9\u6848\u63d0\u4f9b\u4e86\u66f4\u4f18\u8d8a\u7684\u6027\u80fd\uff0c\u8fd9\u5bf9\u4e8e\u9999\u6e2f\u6570\u636e\u4e2d\u5fc3\u7684\u9ad8\u541e\u5410\u91cf\u73af\u5883\u7279\u522b\u91cd\u8981\u3002<\/p>\n
\u7f51\u7edc\u4f18\u5316\u7b56\u7565<\/strong><\/h2>\n
\u5728\u9999\u6e2f\u7279\u6709\u7684\u7f51\u7edc\u73af\u5883\u4e2d\u8fd0\u884cDocker\u65f6\uff0c\u5b9e\u65bd\u9002\u5f53\u7684\u7f51\u7edc\u4f18\u5316\u81f3\u5173\u91cd\u8981\u3002\u8bf7\u8003\u8651\u8fd9\u4e9b\u6280\u672f\u914d\u7f6e\uff1a<\/p>\n
\r\n# \u542f\u7528IP\u8f6c\u53d1\r\n$ sudo sysctl net.ipv4.ip_forward=1\r\n\r\n# \u4f18\u5316\u7f51\u7edc\u53c2\u6570\r\n$ sudo sysctl -w net.ipv4.tcp_keepalive_time=600\r\n$ sudo sysctl -w net.core.somaxconn=1024\r\n$ sudo sysctl -w net.ipv4.tcp_max_syn_backlog=1024\r\n<\/code><\/pre>\n
\u6545\u969c\u6392\u9664\u548c\u6027\u80fd\u5206\u6790<\/strong><\/h2>\n
\u5728\u9999\u6e2f\u7f51\u7edc\u73af\u5883\u4e2d\u4f7f\u7528\u955c\u50cf\u52a0\u901f\u5668\u65f6\uff0c\u5de5\u7a0b\u5e08\u7ecf\u5e38\u4f1a\u9047\u5230\u7279\u5b9a\u7684\u6311\u6218\u3002\u4ee5\u4e0b\u662f\u7cfb\u7edf\u8bca\u65ad\u548c\u4f18\u5316\u7684\u65b9\u6cd5\uff1a<\/p>\n
\u5e38\u89c1\u95ee\u9898\u548c\u89e3\u51b3\u65b9\u6848<\/h3>\n
\r\n# \u68c0\u67e5\u955c\u50cf\u52a0\u901f\u5668\u8fde\u63a5\u6027\r\n$ curl -I https:\/\/hk.mirror.aliyuncs.com\/v2\/\r\n\r\n# \u9a8c\u8bc1Docker\u5b88\u62a4\u8fdb\u7a0b\u65e5\u5fd7\r\n$ journalctl -u docker.service -n 50 --no-pager\r\n\r\n# \u6d4b\u8bd5\u4e0d\u540c\u955c\u50cf\u52a0\u901f\u5668\u7684\u62c9\u53d6\u901f\u5ea6\r\n$ time docker pull nginx:latest\r\n$ docker rmi nginx:latest\r\n<\/code><\/pre>\n
\u4e86\u89e3\u6027\u80fd\u6307\u6807\u81f3\u5173\u91cd\u8981\u3002\u4ee5\u4e0b\u662f\u7528\u4e8e\u5206\u6790\u62c9\u53d6\u65f6\u95f4\u7684Python\u811a\u672c\uff1a<\/p>\n
\r\n#!\/usr\/bin\/python3\r\nimport subprocess\r\nimport time\r\nimport json\r\n\r\ndef measure_pull_time(image, mirror):\r\n    start = time.time()\r\n    subprocess.run(['docker', 'pull', f'{mirror}\/{image}'], \r\n                  capture_output=True)\r\n    end = time.time()\r\n    return end - start\r\n\r\ndef main():\r\n    mirrors = [\r\n        'mirror.gcr.io',\r\n        'hk.mirror.aliyuncs.com'\r\n    ]\r\n    results = {}\r\n    \r\n    for mirror in mirrors:\r\n        pull_time = measure_pull_time('ubuntu:latest', mirror)\r\n        results[mirror] = pull_time\r\n        \r\n    print(json.dumps(results, indent=2))\r\n\r\nif __name__ == '__main__':\r\n    main()\r\n<\/code><\/pre>\n
\u5b89\u5168\u6027\u8003\u8651<\/strong><\/h2>\n
\u5728\u4f18\u5316Docker\u955c\u50cf\u52a0\u901f\u5668\u7684\u540c\u65f6\uff0c\u7ef4\u62a4\u5b89\u5168\u6027\u81f3\u5173\u91cd\u8981\u3002\u5b9e\u65bd\u4ee5\u4e0b\u57fa\u672c\u5b89\u5168\u63aa\u65bd\uff1a<\/p>\n
\r\n# \u914d\u7f6e\u955c\u50cf\u4ed3\u5e93\u8ba4\u8bc1\r\n$ docker login your-private-registry.hk\r\n\r\n# \u6dfb\u52a0TLS\u8bc1\u4e66\r\n$ sudo mkdir -p \/etc\/docker\/certs.d\/your-registry:5000\r\n$ sudo cp domain.crt \/etc\/docker\/certs.d\/your-registry:5000\/ca.crt\r\n\r\n# \u9a8c\u8bc1\u955c\u50cf\u7b7e\u540d\r\n$ docker trust inspect nginx:latest\r\n<\/code><\/pre>\n
\u914d\u7f6e\u5185\u5bb9\u4fe1\u4efb\u4ee5\u786e\u4fdd\u955c\u50cf\u5b8c\u6574\u6027\uff1a<\/p>\n
\r\n# \u542f\u7528Docker\u5185\u5bb9\u4fe1\u4efb\r\n$ export DOCKER_CONTENT_TRUST=1\r\n\r\n# \u7b7e\u540d\u5e76\u63a8\u9001\u955c\u50cf\r\n$ docker trust sign your-registry.hk\/myapp:latest\r\n<\/code><\/pre>\n
\u6027\u80fd\u57fa\u51c6\u6d4b\u8bd5\u548c\u76d1\u63a7<\/strong><\/h2>\n
\u5b9e\u65bd\u6301\u7eed\u76d1\u63a7\u6709\u52a9\u4e8e\u7ef4\u6301\u6700\u4f73\u7684\u955c\u50cf\u52a0\u901f\u5668\u6027\u80fd\u3002\u4ee5\u4e0b\u662f\u4e00\u4e2a\u7efc\u5408\u76d1\u63a7\u8bbe\u7f6e\uff1a<\/p>\n
\r\n# Docker\u7edf\u8ba1\u76d1\u63a7\u811a\u672c\r\n#!\/bin\/bash\r\n# monitor_registry_performance.sh\r\n\r\nLOG_FILE=\"\/var\/log\/docker\/registry_performance.log\"\r\n\r\nwhile true; do\r\n    echo \"$(date) - \u955c\u50cf\u52a0\u901f\u5668\u6027\u80fd\u7edf\u8ba1\" >> $LOG_FILE\r\n    docker system df >> $LOG_FILE\r\n    docker system info | grep Registry >> $LOG_FILE\r\n    sleep 300\r\ndone\r\n<\/code><\/pre>\n
\u6700\u4f73\u5b9e\u8df5\u548c\u672a\u6765\u8003\u8651<\/strong><\/h2>\n
\u4e3a\u4e86\u5728\u9999\u6e2f\u670d\u52a1\u5668\u79df\u7528\u73af\u5883\u4e2d\u4fdd\u6301\u6301\u7eed\u7684\u6027\u80fd\uff0c\u8bf7\u8003\u8651\u8fd9\u4e9b\u9ad8\u7ea7\u5b9e\u65bd\u7b56\u7565\uff1a<\/p>\n
\n
\u5b9e\u65bd\u955c\u50cf\u52a0\u901f\u5668\u6545\u969c\u8f6c\u79fb\u94fe<\/li>\n
\u8bbe\u7f6e\u672c\u5730\u7f13\u5b58\u4ee3\u7406<\/li>\n
\u914d\u7f6e\u5e26\u5bbd\u89c4\u5219<\/li>\n
\u76d1\u63a7\u955c\u50cf\u52a0\u901f\u5668\u5065\u5eb7\u72b6\u6001<\/li>\n<\/ul>\n
\r\n# \u955c\u50cf\u52a0\u901f\u5668\u6545\u969c\u8f6c\u79fb\u914d\u7f6e\u793a\u4f8b\r\n{\r\n  \"registry-mirrors\": [\r\n    \"https:\/\/private-mirror.hk:5000\",\r\n    \"https:\/\/hk.mirror.aliyuncs.com\",\r\n    \"https:\/\/mirror.gcr.io\"\r\n  ],\r\n  \"insecure-registries\": [],\r\n  \"max-concurrent-downloads\": 10,\r\n  \"dns\": [\"8.8.8.8\", \"8.8.4.4\"]\r\n}\r\n<\/code><\/pre>\n
\u7ed3\u8bba\u548c\u672a\u6765\u5c55\u671b<\/strong><\/h2>\n
\u5728\u9999\u6e2f\u670d\u52a1\u5668\u4e0a\u4f18\u5316Docker\u955c\u50cf\u52a0\u901f\u5668\u9700\u8981\u5728\u6027\u80fd\u3001\u5b89\u5168\u6027\u548c\u53ef\u9760\u6027\u4e4b\u95f4\u53d6\u5f97\u5e73\u8861\u3002\u672c\u6307\u5357\u4e2d\u8be6\u8ff0\u7684\u6280\u672f\u548c\u914d\u7f6e\u4e3a\u9ad8\u6548\u7684\u5bb9\u5668\u90e8\u7f72\u63d0\u4f9b\u4e86\u575a\u5b9e\u7684\u57fa\u7840\u3002\u968f\u7740\u5bb9\u5668\u6280\u672f\u7684\u53d1\u5c55\uff0c\u6301\u7eed\u66f4\u65b0\u955c\u50cf\u52a0\u901f\u5668\u4f18\u5316\u5bf9\u4e8e\u5728\u9999\u6e2f\u52a8\u6001\u7684\u670d\u52a1\u5668\u79df\u7528\u73af\u5883\u4e2d\u4fdd\u6301\u7ade\u4e89\u4f18\u52bf\u53d8\u5f97\u8d8a\u6765\u8d8a\u91cd\u8981\u3002<\/p>\n
\u65e0\u8bba\u60a8\u662f\u5728\u7ba1\u7406\u5c0f\u578b\u5f00\u53d1\u73af\u5883\u8fd8\u662f\u5927\u89c4\u6a21\u751f\u4ea7\u57fa\u7840\u8bbe\u65bd\uff0c\u8fd9\u4e9bDocker\u955c\u50cf\u52a0\u901f\u5668\u4f18\u5316\u90fd\u5c06\u663e\u8457\u63d0\u5347\u60a8\u5728\u9999\u6e2f\u670d\u52a1\u5668\u79df\u7528\u73af\u5883\u4e2d\u7684\u5bb9\u5668\u90e8\u7f72\u5de5\u4f5c\u6d41\u7a0b\u3002\u6301\u7eed\u76d1\u63a7\u6027\u80fd\u6307\u6807\u5e76\u6839\u636e\u9700\u6c42\u7684\u53d8\u5316\u8c03\u6574\u914d\u7f6e\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"
\u5728\u5feb\u901f\u53d1\u5c55\u7684\u5bb9\u5668\u90e8\u7f72\u4e16\u754c\u4e2d\uff0c\u4f18\u5316\u9999\u6e2f\u670d\u52a1\u5668\u4e0a\u7684Docker\u6027\u80fd\u5bf9DevOps\u56e2\u961f\u6765\u8bf4\u53d8\u5f97\u81f3\u5173\u91cd\u8981\u3002\u8bbe\u7f6eDocker\u955c\u50cf\u52a0\u901f\u5668\u4e0d\u4ec5\u53ef\u4ee5\u52a0\u5feb\u955c\u50cf\u62c9\u53d6\u901f\u5ea6\uff0c\u8fd8\u53ef\u4ee5\u964d\u4f4e\u5e26\u5bbd\u6210\u672c\u5e76\u63d0\u9ad8\u90e8\u7f72\u53ef\u9760\u6027\u3002\u672c\u7efc\u5408\u6307\u5357\u5c06\u63a2\u8ba8\u4e13\u95e8\u4e3a\u9999\u6e2f\u670d\u52a1\u5668\u914d\u7f6e\u955c\u50cf\u52a0\u901f\u5668\u7684\u6280\u672f\u7ec6\u8282\u3002 \u7406\u89e3Docker\u955c\u50cf\u52a0\u901f\u5668 Docker\u955c\u50cf\u52a0\u901f\u5668\u4f5c\u4e3a\u5bb9\u5668\u955c\u50cf\u7684\u672c\u5730\u7f13\u5b58\uff0c\u53ef\u62e6\u622a\u5bf9Docker Hub\u7684\u62c9\u53d6\u8bf7\u6c42\u5e76\u5b58\u50a8\u5e38\u7528\u955c\u50cf\u3002\u4e0e\u4f20\u7edf\u4ee3\u7406\u670d\u52a1\u5668\u4e0d\u540c\uff0c\u955c\u50cf\u52a0\u901f\u5668\u7ef4\u62a4\u955c\u50cf\u7684\u540c\u6b65\u526f\u672c\uff0c\u5b9e\u73b0\u66f4\u5feb\u7684\u540e\u7eed\u62c9\u53d6\u5e76\u51cf\u5c11\u5916\u90e8\u5e26\u5bbd\u6d88\u8017\u3002\u5bf9\u4e8e\u9999\u6e2f\u7684\u57fa\u7840\u8bbe\u65bd\u800c\u8a00\uff0c\u7531\u4e8e\u8bbf\u95ee\u56fd\u9645Docker\u955c\u50cf\u4ed3\u5e93\u53ef\u80fd\u5b58\u5728\u7f51\u7edc\u5ef6\u8fdf\uff0c\u8fd9\u4e00\u70b9\u5c24\u4e3a\u91cd\u8981\u3002 \u73af\u5883\u5148\u51b3\u6761\u4ef6 \u5728\u5f00\u59cb\u914d\u7f6e\u4e4b\u524d\uff0c\u786e\u4fdd\u60a8\u7684\u9999\u6e2f\u670d\u52a1\u5668\u6ee1\u8db3\u4ee5\u4e0b\u6280\u672f\u8981\u6c42\uff1a # \u7cfb\u7edf\u8981\u6c42 – Ubuntu 20.04 LTS\u6216\u66f4\u9ad8\u7248\u672c – \u6700\u5c112GB\u5185\u5b58 – 20GB\u53ef\u7528\u78c1\u76d8\u7a7a\u95f4 – Docker Engine 20.10.x\u6216\u66f4\u65b0\u7248\u672c – Root\u6216sudo\u8bbf\u95ee\u6743\u9650 # \u9a8c\u8bc1Docker\u5b89\u88c5 $ docker –version $ systemctl status docker \u955c\u50cf\u52a0\u901f\u5668\u5b9e\u65bd \u5b9e\u65bd\u8fc7\u7a0b\u5305\u542b\u51e0\u4e2a\u5173\u952e\u6b65\u9aa4\u3002\u9996\u5148\uff0c\u6211\u4eec\u5c06\u521b\u5efa\u5fc5\u8981\u7684\u914d\u7f6e\u76ee\u5f55\u548c\u6587\u4ef6\uff1a # \u521b\u5efa\u5b88\u62a4\u8fdb\u7a0b\u914d\u7f6e\u76ee\u5f55 $ sudo mkdir -p \/etc\/docker # \u521b\u5efa\u6216\u4fee\u6539daemon.json\u6587\u4ef6 $ sudo nano \/etc\/docker\/daemon.json # \u6dfb\u52a0\u4ee5\u4e0b\u914d\u7f6e { “registry-mirrors”: [ “https:\/\/mirror.gcr.io”, “https:\/\/hk.mirror.aliyuncs.com”, “https:\/\/registry.docker-cn.com” ] […]<\/p>\n
Read More…<\/a><\/p>\n","protected":false},"author":3,"featured_media":22645,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[62],"tags":[6714,6715,6716,6717,248],"class_list":["post-22647","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hong-kong-dedicated-server-sc","tag-docker-registry-mirror-sc","tag-container-optimization-sc","tag-docker-acceleration-sc","tag-registry-configuration-sc","tag-hong-kong-server-rental-sc"],"acf":[],"yoast_head":"\n