DevOps/ Kaniko

• Builds docker container in container (Can run in k8s)
• Run as docker image gcr.io/kaniko-project/executor

run local registry image

• sudo podman run --privileged -d --name registry -p 5000:5000 -v /var/lib/registry:/var/lib/registry --restart=always registry:2

• or non privelaged

  $ mkdir pod-registry
  $ podman run --name registry -p 5000:5000 -p 5003:443 --rm --restart=no \
     -v ${HOME}/pod-registry:/var/lib/registry \
     --mount type=bind,source="$(readlink -f /etc/letsencrypt/live/vigor.nz/fullchain.pem)",target=/certs/fullchain.pem \
     --mount type=bind,source="$(readlink -f /etc/letsencrypt/live/vigor.nz/privkey.pem)",target=/certs/privkey.pem \
     -e REGISTRY_HTTP_ADDR=0.0.0.0:443 \
     -e REGISTRY_HTTP_TLS_CERTIFICATE=/certs/fullchain.pem \
     -e REGISTRY_HTTP_TLS_KEY=/certs/privkey.pem \
     registry:2 

  • Get all repositories in localhost registry

    $ curl -k -X GET https://localhost:5003/v2/_catalog
    > {"repositories":["moinmoin","ubuntu"]}

• from output above pick repository e.g. moinmoin and get tags

  curl -k -X GET https://localhost:5000/v2/moinmoin/tags/list
  > {"name":"moinmoin","tags":["1.19"]}