8.3.7.3. 创建 registry podman 容器（可选）

流程

1. 在 /opt/registry/auth 中创建一个 htpasswd 文件供容器使用。

   $ htpasswd -bBc /opt/registry/auth/htpasswd <user> <passwd>

   Copy to Clipboard Toggle word wrap

   将 <user> 替换为用户名，将 <passwd> 替换为密码。

2. 创建并启动 registry 容器。

   $ podman create \
     --name ocpdiscon-registry \
     -p 5000:5000 \
     -e "REGISTRY_AUTH=htpasswd" \
     -e "REGISTRY_AUTH_HTPASSWD_REALM=Registry" \
     -e "REGISTRY_HTTP_SECRET=ALongRandomSecretForRegistry" \
     -e "REGISTRY_AUTH_HTPASSWD_PATH=/auth/htpasswd" \
     -e "REGISTRY_HTTP_TLS_CERTIFICATE=/certs/domain.crt" \
     -e "REGISTRY_HTTP_TLS_KEY=/certs/domain.key" \
     -e "REGISTRY_COMPATIBILITY_SCHEMA1_ENABLED=true" \
     -v /opt/registry/data:/var/lib/registry:z \
     -v /opt/registry/auth:/auth:z \
     -v /opt/registry/certs:/certs:z \
     docker.io/library/registry:2

   Copy to Clipboard Toggle word wrap

   $ podman start ocpdiscon-registry

   Copy to Clipboard Toggle word wrap