从本地专用码头注册表创建奇点容器

Question

从Docker镜像创建Singularity图像时，如何在本地不安全的私有注册表中正确引用Docker镜像？

Bootstrap: docker 
Registry: localhost:5000 
From: tensorflow:latest 

%runscript 

    exec /usr/bin/python "$@" 

%post 

    echo "Post install stuffs!" 

结果如下：

Executing Prebootstrap module 
VERBOSE [U=0,P=22966]  message.c:52:init()      : Set messagelevel to: 5 
DEBUG [U=0,P=22966]  get-section.c:66:main()     : Iterating through /proc/mounts 
Executing Bootstrap 'docker' module 
From: tensorflow:latest 
Registry: https://localhost:5000 
library/tensorflow:latest 
scope=repository:library/tensorflow:pull 
URL: https://localhost:5000/v2/library/tensorflow/manifests/latest 
Traceback (most recent call last): 
    File "/usr/lib/x86_64-linux-gnu/singularity/python/cli.py", line 198, in <module> 
    main() 
    File "/usr/lib/x86_64-linux-gnu/singularity/python/cli.py", line 146, in main 
    auth=doauth) 
    File "/usr/lib/x86_64-linux-gnu/singularity/python/docker/api.py", line 156, in get_manifest 
    response = api_get(base,headers=token,default_header=True) 
    File "/usr/lib/x86_64-linux-gnu/singularity/python/utils.py", line 139, in api_get 
    response = urllib2.urlopen(request) 
    File "/usr/lib/python2.7/urllib2.py", line 154, in urlopen 
    return opener.open(url, data, timeout) 
    File "/usr/lib/python2.7/urllib2.py", line 429, in open 
    response = self._open(req, data) 
    File "/usr/lib/python2.7/urllib2.py", line 447, in _open 
    '_open', req) 
    File "/usr/lib/python2.7/urllib2.py", line 407, in _call_chain 
    result = func(*args) 
    File "/usr/lib/python2.7/urllib2.py", line 1241, in https_open 
    context=self._context) 
    File "/usr/lib/python2.7/urllib2.py", line 1198, in do_open 
    raise URLError(err) 
urllib2.URLError: <urlopen error [SSL: UNKNOWN_PROTOCOL] unknown protocol (_ssl.c:661)> 
Executing Postbootstrap module 
ERROR: Container does not contain the valid minimum requirement of /bin/sh 
DEBUG [U=0,P=22936]  fork.c:52:handle_sigchld()     : Checking child pids: 22941 22941 

奇异正在对HTTPS的私有注册的假设

利用奇异2.2.1，使用spec文件尝试。

谢谢， 码头。

P.S.我无法创建“Singularity”标签，因为我没有足够的声望点，但在此帖子中显示它是有意义的。

Answer 1

在回答我自己的问题 - 事实证明，我需要做两件事情：

• 明确添加http：//与对本地注册表URL
• 前缀泊坞窗映像名称“/ “，这样它不会使用前缀 ”/库/“

例spec文件：

Bootstrap: docker 
Registry: http://localhost:5000 
From: /tensorflow:latest 

%runscript 

    exec /usr/bin/python "$@" 

%post 

    echo "Post install stuffs!"