使用 Go 访问远程 docker 存储库

Question

我需要使用 Go 和协议 V2 访问私有 docker 注册表。我需要在私有注册表中列出存储库，获取它们的所有标签和其他信息。我应该为此使用 docker/distribution/registry/client 吗？是否有此类任务的样本？找不到。。。官网只提供http api文档。我写了一些代码：    registry, err := client.NewRegistry("https://registry-1.docker.io/", http.DefaultTransport)    if err != nil {        log.Error("Error creating the registry: {}", err)        return    }    ctx := context.Background()    entries := make([]string, 5)    numFilled, err := registry.Repositories(ctx, entries, "")    if err != io.EOF {        log.Error("Error getting the registry: {}", err)        return    }    log.Info("Number of repositories: {}", numFilled)    _ = registry当然，docker repo 需要认证。但是我应该如何提供呢？是否有此类任务的文档？

Answer 1

改编自源码包中的测试代码：

import (

    "github.com/docker/distribution/registry/client"

    "github.com/docker/distribution/registry/client/auth"

    "github.com/docker/distribution/registry/client/auth/challenge"

    "github.com/docker/distribution/registry/client/transport"

)

    

type regCredentialStore struct {

    username      string

    password      string

    refreshTokens map[string]string

}

func (tcs *regCredentialStore) Basic(*url.URL) (string, string) {

    return tcs.username, tcs.password

}

func (tcs *regCredentialStore) RefreshToken(u *url.URL, service string) string {

    return tcs.refreshTokens[service]

}

func (tcs *regCredentialStore) SetRefreshToken(u *url.URL, service string, token string) {

    if tcs.refreshTokens != nil {

        tcs.refreshTokens[service] = token

    }

}

func main() {

    creds := &regCredentialStore{username: "user", password: "pwd"}

    challengeManager := challenge.NewSimpleManager()

    _, err = ping(challengeManager, "https://registry-1.docker.io/v2/", "")

    if err != nil {

        .... exit .....

    }

    transport1 := transport.NewTransport(

        nil, auth.NewAuthorizer(challengeManager, auth.NewBasicHandler(creds)))

    reg, err := client.NewRegistry("https://registry-1.docker.io/", transport1)

    ...

}   

func ping(manager challenge.Manager, endpoint, versionHeader string) ([]auth.APIVersion, error) {

    resp, err := http.Get(endpoint)

    if err != nil {

        return nil, err

    }

    defer resp.Body.Close()

    if err := manager.AddResponse(resp); err != nil {

        return nil, err

    }

    return auth.APIVersions(resp, versionHeader), err

}

Answer 2

您可以使用 auth 标头触发简单的 http 调用（因为它只是 HTTP API），例如所选图像的列表标签：

req, _ := http.NewRequest("GET", "https://"+privateDockerRegistry+"/v2/"+dockerImage+"/tags/list", nil)

req.Header.Add("Authorization", "Basic "+base64.StdEncoding.EncodeToString([]byte(os.Getenv("DOCKER_USER")+":"+os.Getenv("DOCKER_PASSWORD"))))

req.Header.Add("Accept", "application/json")

resp, _ := client.Do(req)

...