Container Registry:Basic operations on Docker

Background Information

• Before you use Container Registry, you must install Docker. For more information, see Install Docker.

• A Container Registry Enterprise Edition instance is created. For more information, see the "Step 1: Create a Container Registry Enterprise Edition instance" section of the Use a Container Registry Enterprise Edition instance to push and pull images topic.

docker login

This section provides an example on how to log on to a Container Registry Enterprise Edition instance. In this example, the instance is located in the China (Hangzhou) region.

1. Specify the domain name of the Container Registry Enterprise Edition instance and enter your username and logon password.

   Note

   • You can run the docker login <Domain name of the Container Registry Enterprise Edition instance> command to access the Enterprise Edition instance. Example of the Domain name: <Name of the Container Registry Enterprise Edition instance>-registry.cn-hangzhou.cr.aliyuncs.com. You can obtain the domain name of the Enterprise Edition instance on the Access Control page of the instance in the Container Registry console.

   • The logon password is different from the password for your Alibaba Cloud account. You must set the logon password. For information about how to set the logon password, see Configure access credentials for a Container Registry Enterprise Edition instance.

   After you log on to the Container Registry Enterprise Edition instance, Login Succeeded is displayed.

   docker login <Name of the Container Registry Enterprise Edition instance>-registry.cn-hangzhou.cr.aliyuncs.com
   Username: ****@test.com
   Password:
   Login Succeeded

2. View the config.json file to confirm your logon information.

   Sample command:

   cat ~/.docker/config.json

   Expected output:

   {
       "auths": {
           "<Name of the Container Registry Enterprise Edition instance>-registry.cn-hangzhou.cr.aliyuncs.com": {
               "auth": "****"
           }
       }
   }        

docker pull

You can run docker pull commands to pull docker images. In the following example, the <Name of the Container Registry Enterprise Edition instance>-registry.cn-hangzhou.cr.aliyuncs.com/acs/agent:0.8 image is pulled.

Sample command:

docker pull <Name of the Container Registry Enterprise Edition instance>-registry.cn-hangzhou.cr.aliyuncs.com/acs/agent:0.8

Expected output:

0.8: Pulling from acs/agent
5a026b6c4964: Already exists
e4b621e8d9cb: Already exists
8bc2fd04bdd4: Pull complete
a977b0087b3e: Pull complete
8f6e00ea13c6: Pull complete
875dd8c9666f: Pull complete
9c07bcabc35d: Pull complete
Digest: sha256:cac848bd31bccf2a041bda7b57e3051341093abde6859df9ee9d332dfec6ddd9
Status: Downloaded newer image for <Name of the Container Registry Enterprise Edition instance>-registry.cn-hangzhou.cr.aliyuncs.com/acs/agent:0.8            

You can run the docker images command to view the pulled images. Check the repository locations and image tags in the command output.

docker images

Expected output:

REPOSITORY                                                     TAG                 IMAGE ID            CREATED             SIZE
<Name of the Container Registry Enterprise Edition instance>-registry.cn-hangzhou.cr.aliyuncs.com/acs/agent   0.8                 b9ba5841bdb0        24 hours ago        42.18 MB            

docker push

After on-premises images are built or packaged, you can push them to a Container Registry Enterprise Edition instance.

The preparation for pushing images is basically the same as that for pulling images. Make sure that you have the permissions on the repository. Otherwise, error messages are returned after you run the docker push command.

Sample command:

docker push <Name of the Container Registry Enterprise Edition instance>-registry.cn-hangzhou.cr.aliyuncs.com/acs/agent:0.8

Expected output:

The push refers to a repository [<Name of the Container Registry Enterprise Edition instance>-registry.cn-hangzhou.cr.aliyuncs.com/acs/agent:0.8]
359f80267111: Layer already exists
7e5fa28d90b8: Layer already exists
b20d7f600f63: Layer already exists
4a159b4f8370: Layer already exists
7c3712ebe877: Layer already exists
d91d130a53aa: Layer already exists
fcad8ad5a40f: Layer already exists
unauthorized: authentication required            

Use a RAM user to log on to a Container Registry Enterprise Edition instance

1. Log on to the Container Registry console as a RAM user. On the Access Credential page, set the logon password.

2. Use <RAM username>@<Enterprise alias> as the logon username.

   You can set and view the enterprise alias of an Alibaba Cloud account in the RAM console. If no enterprise alias is available, the enterprise alias is the UID of the Alibaba Cloud account by default.

   Assume that the RAM user is subaccount and the enterprise alias is accoun-alias. The following sample code provides a logon example:

   docker login <Name of the Container Registry Enterprise Edition instance>-registry.cn-hangzhou.cr.aliyuncs.com
   Username: subaccount@account-alias
   Password:
   Login Succeeded