\u5be6\u65bd\u4ee5\u4e0bshell\u6307\u4ee4\u78bc\u4f86\u76e3\u63a7\u93e1\u50cf\u52a0\u901f\u5668\u6548\u80fd\uff1a<\/p>\n

\r\n#!\/bin\/bash\r\n# mirror_health_check.sh\r\n\r\nMIRRORS=(\"mirror.gcr.io\" \"hk.mirror.aliyuncs.com\" \"registry.docker-cn.com\")\r\nTEST_IMAGE=\"ubuntu:latest\"\r\n\r\nfor mirror in \"${MIRRORS[@]}\"; do\r\n    echo \"\u6e2c\u8a66 $mirror...\"\r\n    time docker pull $mirror\/$TEST_IMAGE\r\n    docker rmi $mirror\/$TEST_IMAGE\r\ndone\r\n<\/code><\/pre>\n
\u9032\u968e\u914d\u7f6e\u8a2d\u5b9a<\/strong><\/h2>\n
\u4f7f\u7528\u9019\u4e9b\u6548\u80fd\u5c0e\u5411\u7684\u53c3\u6578\u5fae\u8abf\u60a8\u7684Docker\u5b88\u8b77\u7a0b\u5e8f\u914d\u7f6e\uff1a<\/p>\n
\r\n{\r\n  \"registry-mirrors\": [\r\n    \"https:\/\/mirror.gcr.io\",\r\n    \"https:\/\/hk.mirror.aliyuncs.com\"\r\n  ],\r\n  \"max-concurrent-downloads\": 10,\r\n  \"max-concurrent-uploads\": 5,\r\n  \"default-shm-size\": \"64M\",\r\n  \"storage-driver\": \"overlay2\",\r\n  \"log-driver\": \"json-file\",\r\n  \"log-opts\": {\r\n    \"max-size\": \"10m\",\r\n    \"max-file\": \"3\"\r\n  }\r\n}\r\n<\/code><\/pre>\n
\u9019\u4e9b\u8a2d\u5b9a\u512a\u5316\u4e86\u4e26\u884c\u64cd\u4f5c\u3001\u8a18\u61b6\u9ad4\u914d\u7f6e\u548c\u5132\u5b58\u6548\u7387\u3002overlay2\u5132\u5b58\u9a45\u52d5\u7a0b\u5f0f\u76f8\u6bd4\u8f03\u820a\u7684\u66ff\u4ee3\u65b9\u6848\u63d0\u4f9b\u4e86\u66f4\u512a\u8d8a\u7684\u6548\u80fd\uff0c\u9019\u5c0d\u65bc\u9999\u6e2f\u8cc7\u6599\u4e2d\u5fc3\u7684\u9ad8\u541e\u5410\u91cf\u74b0\u5883\u7279\u5225\u91cd\u8981\u3002<\/p>\n
\u7db2\u8def\u512a\u5316\u7b56\u7565<\/strong><\/h2>\n
\u5728\u9999\u6e2f\u7279\u6709\u7684\u7db2\u8def\u74b0\u5883\u4e2d\u904b\u884cDocker\u6642\uff0c\u5be6\u65bd\u9069\u7576\u7684\u7db2\u8def\u512a\u5316\u81f3\u95dc\u91cd\u8981\u3002\u8acb\u8003\u616e\u9019\u4e9b\u6280\u8853\u914d\u7f6e\uff1a<\/p>\n
\r\n# \u555f\u7528IP\u8f49\u767c\r\n$ sudo sysctl net.ipv4.ip_forward=1\r\n\r\n# \u512a\u5316\u7db2\u8def\u53c3\u6578\r\n$ sudo sysctl -w net.ipv4.tcp_keepalive_time=600\r\n$ sudo sysctl -w net.core.somaxconn=1024\r\n$ sudo sysctl -w net.ipv4.tcp_max_syn_backlog=1024\r\n<\/code><\/pre>\n
\u6545\u969c\u6392\u9664\u548c\u6548\u80fd\u5206\u6790<\/strong><\/h2>\n
\u5728\u9999\u6e2f\u7db2\u8def\u74b0\u5883\u4e2d\u4f7f\u7528\u93e1\u50cf\u52a0\u901f\u5668\u6642\uff0c\u5de5\u7a0b\u5e2b\u7d93\u5e38\u6703\u9047\u5230\u7279\u5b9a\u7684\u6311\u6230\u3002\u4ee5\u4e0b\u662f\u7cfb\u7d71\u8a3a\u65b7\u548c\u512a\u5316\u7684\u65b9\u6cd5\uff1a<\/p>\n
\u5e38\u898b\u554f\u984c\u548c\u89e3\u6c7a\u65b9\u6848<\/h3>\n
\r\n# \u6aa2\u67e5\u93e1\u50cf\u52a0\u901f\u5668\u9023\u63a5\u6027\r\n$ curl -I https:\/\/hk.mirror.aliyuncs.com\/v2\/\r\n\r\n# \u9a57\u8b49Docker\u5b88\u8b77\u7a0b\u5e8f\u65e5\u8a8c\r\n$ journalctl -u docker.service -n 50 --no-pager\r\n\r\n# \u6e2c\u8a66\u4e0d\u540c\u93e1\u50cf\u52a0\u901f\u5668\u7684\u62c9\u53d6\u901f\u5ea6\r\n$ time docker pull nginx:latest\r\n$ docker rmi nginx:latest\r\n<\/code><\/pre>\n
\u4e86\u89e3\u6548\u80fd\u6307\u6a19\u81f3\u95dc\u91cd\u8981\u3002\u4ee5\u4e0b\u662f\u7528\u65bc\u5206\u6790\u62c9\u53d6\u6642\u9593\u7684Python\u6307\u4ee4\u78bc\uff1a<\/p>\n
\r\n#!\/usr\/bin\/python3\r\nimport subprocess\r\nimport time\r\nimport json\r\n\r\ndef measure_pull_time(image, mirror):\r\n    start = time.time()\r\n    subprocess.run(['docker', 'pull', f'{mirror}\/{image}'], \r\n                  capture_output=True)\r\n    end = time.time()\r\n    return end - start\r\n\r\ndef main():\r\n    mirrors = [\r\n        'mirror.gcr.io',\r\n        'hk.mirror.aliyuncs.com'\r\n    ]\r\n    results = {}\r\n    \r\n    for mirror in mirrors:\r\n        pull_time = measure_pull_time('ubuntu:latest', mirror)\r\n        results[mirror] = pull_time\r\n        \r\n    print(json.dumps(results, indent=2))\r\n\r\nif __name__ == '__main__':\r\n    main()\r\n<\/code><\/pre>\n
\u5b89\u5168\u6027\u8003\u91cf<\/strong><\/h2>\n
\u5728\u512a\u5316Docker\u93e1\u50cf\u52a0\u901f\u5668\u7684\u540c\u6642\uff0c\u7dad\u8b77\u5b89\u5168\u6027\u81f3\u95dc\u91cd\u8981\u3002\u5be6\u65bd\u4ee5\u4e0b\u57fa\u672c\u5b89\u5168\u63aa\u65bd\uff1a<\/p>\n
\r\n# \u914d\u7f6e\u93e1\u50cf\u5009\u5eab\u8a8d\u8b49\r\n$ docker login your-private-registry.hk\r\n\r\n# \u6dfb\u52a0TLS\u6191\u8b49\r\n$ sudo mkdir -p \/etc\/docker\/certs.d\/your-registry:5000\r\n$ sudo cp domain.crt \/etc\/docker\/certs.d\/your-registry:5000\/ca.crt\r\n\r\n# \u9a57\u8b49\u93e1\u50cf\u7c3d\u540d\r\n$ docker trust inspect nginx:latest\r\n<\/code><\/pre>\n
\u914d\u7f6e\u5167\u5bb9\u4fe1\u4efb\u4ee5\u78ba\u4fdd\u93e1\u50cf\u5b8c\u6574\u6027\uff1a<\/p>\n
\r\n# \u555f\u7528Docker\u5167\u5bb9\u4fe1\u4efb\r\n$ export DOCKER_CONTENT_TRUST=1\r\n\r\n# \u7c3d\u540d\u4e26\u63a8\u9001\u93e1\u50cf\r\n$ docker trust sign your-registry.hk\/myapp:latest\r\n<\/code><\/pre>\n
\u6548\u80fd\u57fa\u6e96\u6e2c\u8a66\u548c\u76e3\u63a7<\/strong><\/h2>\n
\u5be6\u65bd\u6301\u7e8c\u76e3\u63a7\u6709\u52a9\u65bc\u7dad\u6301\u6700\u4f73\u7684\u93e1\u50cf\u52a0\u901f\u5668\u6548\u80fd\u3002\u4ee5\u4e0b\u662f\u4e00\u500b\u7d9c\u5408\u76e3\u63a7\u8a2d\u7f6e\uff1a<\/p>\n
\r\n# Docker\u7d71\u8a08\u76e3\u63a7\u6307\u4ee4\u78bc\r\n#!\/bin\/bash\r\n# monitor_registry_performance.sh\r\n\r\nLOG_FILE=\"\/var\/log\/docker\/registry_performance.log\"\r\n\r\nwhile true; do\r\n    echo \"$(date) - \u93e1\u50cf\u52a0\u901f\u5668\u6548\u80fd\u7d71\u8a08\" >> $LOG_FILE\r\n    docker system df >> $LOG_FILE\r\n    docker system info | grep Registry >> $LOG_FILE\r\n    sleep 300\r\ndone\r\n<\/code><\/pre>\n
\u6700\u4f73\u5be6\u52d9\u548c\u672a\u4f86\u8003\u91cf<\/strong><\/h2>\n
\u70ba\u4e86\u5728\u9999\u6e2f\u4f3a\u670d\u5668\u79df\u7528\u74b0\u5883\u4e2d\u4fdd\u6301\u6301\u7e8c\u7684\u6548\u80fd\uff0c\u8acb\u8003\u616e\u9019\u4e9b\u9032\u968e\u5be6\u65bd\u7b56\u7565\uff1a<\/p>\n
\n
\u5be6\u65bd\u93e1\u50cf\u52a0\u901f\u5668\u6545\u969c\u8f49\u79fb\u93c8<\/li>\n
\u8a2d\u7f6e\u672c\u5730\u5feb\u53d6\u4ee3\u7406<\/li>\n
\u914d\u7f6e\u983b\u5bec\u898f\u5247<\/li>\n
\u76e3\u63a7\u93e1\u50cf\u52a0\u901f\u5668\u5065\u5eb7\u72c0\u614b<\/li>\n<\/ul>\n
\r\n# \u93e1\u50cf\u52a0\u901f\u5668\u6545\u969c\u8f49\u79fb\u914d\u7f6e\u793a\u4f8b\r\n{\r\n  \"registry-mirrors\": [\r\n    \"https:\/\/private-mirror.hk:5000\",\r\n    \"https:\/\/hk.mirror.aliyuncs.com\",\r\n    \"https:\/\/mirror.gcr.io\"\r\n  ],\r\n  \"insecure-registries\": [],\r\n  \"max-concurrent-downloads\": 10,\r\n  \"dns\": [\"8.8.8.8\", \"8.8.4.4\"]\r\n}\r\n<\/code><\/pre>\n
\u7d50\u8ad6\u548c\u672a\u4f86\u5c55\u671b<\/strong><\/h2>\n
\u5728\u9999\u6e2f\u4f3a\u670d\u5668\u4e0a\u512a\u5316Docker\u93e1\u50cf\u52a0\u901f\u5668\u9700\u8981\u5728\u6548\u80fd\u3001\u5b89\u5168\u6027\u548c\u53ef\u9760\u6027\u4e4b\u9593\u53d6\u5f97\u5e73\u8861\u3002\u672c\u6307\u5357\u4e2d\u8a73\u8ff0\u7684\u6280\u8853\u548c\u914d\u7f6e\u70ba\u9ad8\u6548\u7684\u5bb9\u5668\u90e8\u7f72\u63d0\u4f9b\u4e86\u5805\u5be6\u7684\u57fa\u790e\u3002\u96a8\u8457\u5bb9\u5668\u6280\u8853\u7684\u767c\u5c55\uff0c\u6301\u7e8c\u66f4\u65b0\u93e1\u50cf\u52a0\u901f\u5668\u512a\u5316\u5c0d\u65bc\u5728\u9999\u6e2f\u52d5\u614b\u7684\u4f3a\u670d\u5668\u79df\u7528\u74b0\u5883\u4e2d\u4fdd\u6301\u7af6\u722d\u512a\u52e2\u8b8a\u5f97\u8d8a\u4f86\u8d8a\u91cd\u8981\u3002<\/p>\n
\u7121\u8ad6\u60a8\u662f\u5728\u7ba1\u7406\u5c0f\u578b\u958b\u767c\u74b0\u5883\u9084\u662f\u5927\u898f\u6a21\u751f\u7522\u57fa\u790e\u8a2d\u65bd\uff0c\u9019\u4e9bDocker\u93e1\u50cf\u52a0\u901f\u5668\u512a\u5316\u90fd\u5c07\u986f\u8457\u63d0\u5347\u60a8\u5728\u9999\u6e2f\u4f3a\u670d\u5668\u79df\u7528\u74b0\u5883\u4e2d\u7684\u5bb9\u5668\u90e8\u7f72\u5de5\u4f5c\u6d41\u7a0b\u3002\u6301\u7e8c\u76e3\u63a7\u6548\u80fd\u6307\u6a19\u4e26\u6839\u64da\u9700\u6c42\u7684\u8b8a\u5316\u8abf\u6574\u914d\u7f6e\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"
\u5728\u5feb\u901f\u767c\u5c55\u7684\u5bb9\u5668\u90e8\u7f72\u4e16\u754c\u4e2d\uff0c\u512a\u5316\u9999\u6e2f\u4f3a\u670d\u5668\u4e0a\u7684Docker\u6548\u80fd\u5c0dDevOps\u5718\u968a\u4f86\u8aaa\u8b8a\u5f97\u81f3\u95dc\u91cd\u8981\u3002\u8a2d\u7f6eDock […]<\/p>\n
Read More…<\/a><\/p>\n","protected":false},"author":3,"featured_media":22644,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[61],"tags":[6713,6711,6710,6712,247],"class_list":["post-22646","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hong-kong-dedicated-server-tc","tag-registry-configuration-tc","tag-container-optimization-tc","tag-docker-registry-mirror-tc","tag-docker-acceleration-tc","tag-hong-kong-server-rental-tc"],"acf":[],"yoast_head":"\n