Can't clean up docker external registry

How to Use GitLab System Administration
#1

Can’t clean up docker external registry on separate host:

gitlab-ctl registry-garbage-collect
Container registry is not enabled, exiting…

my config:
gitlab_rails[‘registry_host’] = “gitlab-registry.qqq.ru”
gitlab_rails[‘registry_api_url’] = “https://gitlab-registry.qqq.ru”
gitlab_rails[‘registry_key_path’] = “/etc/gitlab/registry-auth1.key”
gitlab_rails[‘registry_issuer’] = “gitlab-issuer”
registry[‘internal_key’] = "-----BEGIN PRIVATE KEY

gitlab-ee-12.9.2-ee.0.el7.x86_64

Which command should I use? Thank you.

#2

The gitlab-ctl registry-garbage-collect is effectively a wrapper command around the registry tool itself. It is meant to be used only when the registry is managed.

You can invoke your external registry’s binary directly against its configuration:

sudo -u REGISTRY_PROCESS_OWNER registry garbage-collect /path/to/custom/docker-registry/config.yml
1 Like
#3

I installed Registry on separate host by:
docker-compose.yml

registry:
image: registry:2
ports:
- “443:5000”
volumes:
- /etc/pki/web:/certs
- registry-data:/var/lib/registry
restart: always
environment:
- REGISTRY_AUTH_TOKEN_REALM=https://gitlab.qqq.ru/jwt/auth
- REGISTRY_AUTH_TOKEN_SERVICE=container_registry
- REGISTRY_AUTH_TOKEN_ISSUER=gitlab-issuer
- REGISTRY_AUTH_TOKEN_ROOTCERTBUNDLE=/certs/wildcard.qqq.ru.crt
- REGISTRY_HTTP_TLS_CERTIFICATE=/certs/wildcard.qqq.ru.crt
- REGISTRY_HTTP_TLS_KEY=/certs/wildcard.qqq.ru.key
- REGISTRY_STORAGE_DELETE_ENABLED=true

#4

I installed Registry on separate host. There is no config.yml

#5

docker-compose.yml

registry:
  image: registry:2
  ports:
    - "443:5000"
  volumes:
    - /etc/pki/web:/certs
    - registry-data:/var/lib/registry
  restart: always
  environment:
    - REGISTRY_AUTH_TOKEN_REALM=https://gitlab.qqq.ru/jwt/auth 
    - REGISTRY_AUTH_TOKEN_SERVICE=container_registry 
    - REGISTRY_AUTH_TOKEN_ISSUER=gitlab-issuer 
    - REGISTRY_AUTH_TOKEN_ROOTCERTBUNDLE=/certs/wildcard.qqq.ru.crt
    - REGISTRY_HTTP_TLS_CERTIFICATE=/certs/wildcard.qqq.ru.crt
    - REGISTRY_HTTP_TLS_KEY=/certs/wildcard.qqq.ru.key
    - REGISTRY_STORAGE_DELETE_ENABLED=true
#6

oh, my bad, understood.