5장. Deploying Red Hat Quay
To deploy the Red Hat Quay service on the nodes in your cluster, you use the same Quay container you used to create the configuration file. The differences here are that you:
- Identify directories where the configuration files and data are stored
-
Run the command with
--sysctl net.core.somaxconn=4096 -
Don’t use the
configoption or password
For a basic setup, you can deploy on a single node; for high availability you probably want three or more nodes (for example, quay01, quay02, and quay03).
The resulting Red Hat Quay service will listen on regular port 8080 and SSL port 8443. This is different from previous releases of Red Hat Quay, which listened on standard ports 80 and 443, respectively. In this document, we map 8080 and 8443 to standard ports 80 and 443 on the host, respectively. Througout the rest of this document, we assume you have mapped the ports in this way.
Here is what you do:
Create directories: Create two directories to store configuration information and data on the host. For example:
# mkdir -p /mnt/quay/config # #optional: if you don't choose to install an Object Store # mkdir -p /mnt/quay/storageCopy config files: Copy the tarball (
quay-config.tar.gz) to the configuration directory and unpack it. For example:# cp quay-config.tar.gz /mnt/quay/config/ # tar xvf quay-config.tar.gz config.yaml ssl.cert ssl.keyDeploy Red Hat Quay: Having already authenticated to Quay.io (see Accessing Red Hat Quay) run Red Hat Quay as a container, as follows:
참고Add
-e DEBUGLOG=trueto thepodman runcommand line for theQuaycontainer to enable debug level logging. Add-e IGNORE_VALIDATION=trueto bypass validation during the startup process.# sudo podman run --restart=always -p 443:8443 -p 80:8080 \ --sysctl net.core.somaxconn=4096 \ --privileged=true \ -v /mnt/quay/config:/conf/stack:Z \ -v /mnt/quay/storage:/datastorage:Z \ -d registry.redhat.io/quay/quay-rhel8:v3.15.4-
Open browser to UI: Once the
Quaycontainer has started, go to your web browser and open the URL, to the node running theQuaycontainer. - Log into Red Hat Quay: Using the superuser account you created during configuration, log in and make sure Red Hat Quay is working properly.
-
Add more Red Hat Quay nodes: At this point, you have the option of adding more nodes to this Red Hat Quay cluster by simply going to each node, then adding the tarball and starting the
Quaycontainer as just shown. - Add optional features: To add more features to your Red Hat Quay cluster, such as Clair images scanning and Repository Mirroring, continue on to the next section.
5.1. Add Clair image scanning to Red Hat Quay 링크 복사링크가 클립보드에 복사되었습니다!
Setting up and deploying Clair image scanning for your Red Hat Quay deployment is described in Clair Security Scanning