diff --git a/_data/toc.yaml b/_data/toc.yaml index ebaa66f6842..1d4c08e7f02 100644 --- a/_data/toc.yaml +++ b/_data/toc.yaml @@ -777,6 +777,8 @@ toc: title: backup - path: /docker-trusted-registry/reference/dumpcerts/ title: dumpcerts + - path: /docker-trusted-registry/reference/images/ + title: images - path: /docker-trusted-registry/reference/install/ title: install - path: /docker-trusted-registry/reference/join/ @@ -789,6 +791,8 @@ toc: title: remove - path: /docker-trusted-registry/reference/restore/ title: restore + - path: /docker-trusted-registry/reference/upgrade/ + title: upgrade - sectiontitle: Configuration section: - path: /docker-trusted-registry/configure/configuration/ diff --git a/docker-trusted-registry/reference/backup.md b/docker-trusted-registry/reference/backup.md index 11b10715514..503a70dfa3a 100644 --- a/docker-trusted-registry/reference/backup.md +++ b/docker-trusted-registry/reference/backup.md @@ -16,8 +16,8 @@ Backup a DTR cluster to a tar file and stream it to stdout ## Usage ```bash -$ docker run -i --rm docker/dtr \ - backup [command options] > backup.tar +docker run -i --rm docker/dtr \ + backup [command options] > backup.tar ``` ## Description @@ -35,16 +35,17 @@ configured to store images on the filesystem or using a cloud provider. WARNING: This backup contains sensitive information and should be stored securely. - -| Option | Description | -|:------------------------|:--------------------------------------------------------------------------------------| -| `--ucp-url` | Specify the UCP controller URL [$UCP_URL] | -| `--ucp-username` | Specify the UCP admin username [$UCP_USERNAME] | -| `--ucp-password` | Specify the UCP admin password [$UCP_PASSWORD] | -| `--debug` | Enable debug mode, provides additional logging [$DEBUG] | -| `--hub-username` | Specify the Docker Hub username for pulling images [$HUB_USERNAME] | -| `--hub-password` | Specify the Docker Hub password for pulling images [$HUB_PASSWORD] | -| `--ucp-insecure-tls` | Disable TLS verification for UCP [$UCP_INSECURE_TLS] | -| `--ucp-ca` | Use a PEM-encoded TLS CA certificate for UCP [$UCP_CA] | -| `--existing-replica-id` | ID of an existing replica in a cluster [$DTR_EXISTING_REPLICA_ID] | -| `--config-only` | Backup/restore only the configurations of DTR and not the database [$DTR_CONFIG_ONLY] | +## Options + +| Option | Description | +|:------------------------|:-------------------------------------------------------------------| +| `--ucp-url` | Specify the UCP controller URL including domain and port | +| `--ucp-username` | Specify the UCP admin username | +| `--ucp-password` | Specify the UCP admin password | +| `--debug` | Enable debug mode, provides additional logging | +| `--hub-username` | Specify the Docker Hub username for pulling images | +| `--hub-password` | Specify the Docker Hub password for pulling images | +| `--ucp-insecure-tls` | Disable TLS verification for UCP | +| `--ucp-ca` | Use a PEM-encoded TLS CA certificate for UCP | +| `--existing-replica-id` | ID of an existing replica in a cluster | +| `--config-only` | Backup/restore only the configurations of DTR and not the database | diff --git a/docker-trusted-registry/reference/dumpcerts.md b/docker-trusted-registry/reference/dumpcerts.md index ab58f6398ad..6842f6c9534 100644 --- a/docker-trusted-registry/reference/dumpcerts.md +++ b/docker-trusted-registry/reference/dumpcerts.md @@ -16,7 +16,7 @@ Dump out the TLS certificates used by this DTR instance ## Usage ```bash -$ docker run -it --rm docker/dtr \ +docker run -i --rm docker/dtr \ dumpcerts [command options] > backup.tar ``` @@ -26,14 +26,16 @@ This command creates a backup of the certificates used by DTR for communicating across replicas with TLS. -| Option | Description | -|:------------------------|:-------------------------------------------------------------------| -| `--ucp-url ` | Specify the UCP controller URL [$UCP_URL] | -| `--ucp-username ` | Specify the UCP admin username [$UCP_USERNAME] | -| `--ucp-password` | Specify the UCP admin password [$UCP_PASSWORD] | -| `--debug` | Enable debug mode, provides additional logging [$DEBUG] | -| `--hub-username` | Specify the Docker Hub username for pulling images [$HUB_USERNAME] | -| `--hub-password ` | Specify the Docker Hub password for pulling images [$HUB_PASSWORD] | -| `--ucp-insecure-tls` | Disable TLS verification for UCP [$UCP_INSECURE_TLS] | -| `--ucp-ca` | Use a PEM-encoded TLS CA certificate for UCP [$UCP_CA] | -| `--existing-replica-id` | ID of an existing replica in a cluster [$DTR_EXISTING_REPLICA_ID] | +## Options + +| Option | Description | +|:------------------------|:---------------------------------------------------------| +| `--ucp-url` | Specify the UCP controller URL including domain and port | +| `--ucp-username` | Specify the UCP admin username | +| `--ucp-password` | Specify the UCP admin password | +| `--debug` | Enable debug mode, provides additional logging | +| `--hub-username` | Specify the Docker Hub username for pulling images | +| `--hub-password` | Specify the Docker Hub password for pulling images | +| `--ucp-insecure-tls` | Disable TLS verification for UCP | +| `--ucp-ca` | Use a PEM-encoded TLS CA certificate for UCP | +| `--existing-replica-id` | ID of an existing replica in a cluster | diff --git a/docker-trusted-registry/reference/images.md b/docker-trusted-registry/reference/images.md new file mode 100644 index 00000000000..609649ed4ed --- /dev/null +++ b/docker-trusted-registry/reference/images.md @@ -0,0 +1,26 @@ +--- +menu: + main: + description: Docker Trusted Registry images command reference. + identifier: dtr_reference_images + keywords: + - docker, registry, reference, images + parent: dtr_menu_reference +title: images +--- + +# docker/dtr images + +Lists all the images necessary to install DTR + +## Usage + +```bash +docker run -it --rm docker/dtr \ + images [command options] +``` + +## Description + + +This command lists all the images necessary to install DTR. diff --git a/docker-trusted-registry/reference/index.md b/docker-trusted-registry/reference/index.md index b0acad5f6e4..75b12486955 100644 --- a/docker-trusted-registry/reference/index.md +++ b/docker-trusted-registry/reference/index.md @@ -10,35 +10,23 @@ menu: title: Overview --- -# docker/dtr image overview +# docker/dtr overview This tool has commands to install, configure, and backup Docker Trusted Registry (DTR). It also allows uninstalling DTR. By default the tool runs in interactive mode. It prompts you for the values needed. -For running this tool in non-interactive mode, there are three -ways you can use to pass values: - -```bash -$ docker run -it --rm docker/dtr command --option value -$ docker run -e --rm docker/dtr command ENV_VARIABLE=value -$ docker run -e --rm docker/dtr command ENV_VARIABLE -``` Additional help is available for each command with the '--help' option. + ## Usage ```bash -$ docker run -it --rm docker/dtr \ +docker run -it --rm docker/dtr \ command [command options] ``` -## Options - -| Option | Description | -|:------------|:------------| -| `--help, h` | Show help | ## Commands @@ -51,4 +39,6 @@ $ docker run -it --rm docker/dtr \ | `restore` | Create a new DTR cluster from an existing backup | | `backup` | Backup a DTR cluster to a tar file and stream it to stdout | | `migrate` | Migrate configurations, accounts, and repository metadata from DTR 1.4.3 to 2.0 | +| `upgrade` | Upgrade a v2.0.0 or later cluster to this version of DTR | | `dumpcerts` | Dump out the TLS certificates used by this DTR instance | +| `images` | Lists all the images necessary to install DTR | diff --git a/docker-trusted-registry/reference/install.md b/docker-trusted-registry/reference/install.md index ecc5adb2fa5..d3b5f09199a 100644 --- a/docker-trusted-registry/reference/install.md +++ b/docker-trusted-registry/reference/install.md @@ -16,7 +16,7 @@ Install Docker Trusted Registry on this Docker Engine ## Usage ```bash -$ docker run -it --rm docker/dtr \ +docker run -it --rm docker/dtr \ install [command options] ``` @@ -28,25 +28,29 @@ the 'join' command. ## Options -| Option | Description | -|:---------------------------|:-------------------------------------------------------------------------------------------------| -| `--ucp-url` | Specify the UCP controller URL [$UCP_URL] | -| `--ucp-username` | Specify the UCP admin username [$UCP_USERNAME] | -| `--ucp-password` | Specify the UCP admin password [$UCP_PASSWORD] | -| `--debug` | Enable debug mode, provides additional logging [$DEBUG] | -| `--hub-username` | Specify the Docker Hub username for pulling images [$HUB_USERNAME] | -| `--hub-password` | Specify the Docker Hub password for pulling images [$HUB_PASSWORD] | -| `--http-proxy` | Set the HTTP proxy for outgoing requests [$DTR_HTTP_PROXY] | -| `--https-proxy` | Set the HTTPS proxy for outgoing requests [$DTR_HTTPS_PROXY] | -| `--no-proxy` | Set the list of domains to not proxy to [$DTR_NO_PROXY] | -| `--replica-http-port "0"` | Specify the public HTTP port for the DTR replica [$REPLICA_HTTP_PORT] | -| `--replica-https-port "0"` | Specify the public HTTPS port for the DTR replica [$REPLICA_HTTPS_PORT] | -| `--log-protocol` | The protocol for sending container logs: tcp, udp or internal. Default: internal [$LOG_PROTOCOL] | -| `--log-host` | Endpoint to send logs to, required if --log-protocol is tcp or udp [$LOG_HOST] | -| `--log-level` | Log level for container logs. Default: INFO [$LOG_LEVEL] | -| `--dtr-external-url` | Specify the domain name and port for the DTR load balancer [$DTR_LOAD_BALANCER] | -| `--ucp-insecure-tls` | Disable TLS verification for UCP [$UCP_INSECURE_TLS] | -| `--ucp-ca` | Use a PEM-encoded TLS CA certificate for UCP [$UCP_CA] | -| `--ucp-node` | Specify the host to install Docker Trusted Registry [$UCP_NODE] | -| `--replica-id` | Specify the replica Id. Must be unique per replica, leave blank for random [$DTR_REPLICA_ID] | -| `--unsafe` | Enable this flag to skip safety checks when installing or joining [$DTR_UNSAFE] | +| Option | Description | +|:----------------------------|:--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| `--ucp-url` | Specify the UCP controller URL including domain and port | +| `--ucp-username` | Specify the UCP admin username | +| `--ucp-password` | Specify the UCP admin password | +| `--debug` | Enable debug mode, provides additional logging | +| `--hub-username` | Specify the Docker Hub username for pulling images | +| `--hub-password` | Specify the Docker Hub password for pulling images | +| `--http-proxy` | Set the HTTP proxy for outgoing requests | +| `--https-proxy` | Set the HTTPS proxy for outgoing requests | +| `--no-proxy` | Set the list of domains to not proxy to | +| `--replica-http-port` | Specify the public HTTP port for the DTR replica; 0 means unchanged/default | +| `--replica-https-port` | Specify the public HTTPS port for the DTR replica; 0 means unchanged/default | +| `--log-protocol` | The protocol for sending container logs: tcp, udp or internal. Default: internal | +| `--log-host` | Endpoint to send logs to, required if --log-protocol is tcp or udp | +| `--log-level` | Log level for container logs. Default: INFO | +| `--dtr-external-url` | Specify the external domain name and port for DTR. If using a load balancer, use its external URL instead. | +| `--etcd-heartbeat-interval` | Set etcd's frequency (ms) that its leader will notify followers that it is still the leader. | +| `--etcd-election-timeout` | Set etcd's timeout (ms) for how long a follower node will go without hearing a heartbeat before attempting to become leader itself. | +| `--etcd-snapshot-count` | Set etcd's number of changes before creating a snapshot. | +| `--ucp-insecure-tls` | Disable TLS verification for UCP | +| `--ucp-ca` | Use a PEM-encoded TLS CA certificate for UCP | +| `--ucp-node` | Specify the host to install Docker Trusted Registry | +| `--replica-id` | Specify the replica ID. Must be unique per replica, leave blank for random | +| `--unsafe` | Enable this flag to skip safety checks when installing or joining | +| `--extra-envs` | List of extra environment variables to use for deploying the DTR containers for the replica. This can be used to specify swarm constraints. Separate the environment variables with ampersands (&). You can escape actual ampersands with backslashes (\). Can't be used in combination with --ucp-node | diff --git a/docker-trusted-registry/reference/join.md b/docker-trusted-registry/reference/join.md index 41463c5c7f2..503e7e168ff 100644 --- a/docker-trusted-registry/reference/join.md +++ b/docker-trusted-registry/reference/join.md @@ -13,13 +13,6 @@ title: join Add a new replica to an existing DTR cluster -## Usage - -```bash -$ docker run -it --rm docker/dtr \ - join [command options] -``` - ## Description This command installs DTR on the Docker Engine that runs the command, @@ -28,21 +21,23 @@ and joins the new installation to an existing cluster. To set up a cluster with high-availability, add 3, 5, or 7 nodes to the cluster. - -| Option | Description | -|:---------------------------|:---------------------------------------------------------------------------------------------| -| `--ucp-url` | Specify the UCP controller URL [$UCP_URL] | -| `--ucp-username` | Specify the UCP admin username [$UCP_USERNAME] | -| `--ucp-password` | Specify the UCP admin password [$UCP_PASSWORD] | -| `--debug` | Enable debug mode, provides additional logging [$DEBUG] | -| `--hub-username` | Specify the Docker Hub username for pulling images [$HUB_USERNAME] | -| `--hub-password` | Specify the Docker Hub password for pulling images [$HUB_PASSWORD] | -| `--ucp-insecure-tls` | Disable TLS verification for UCP [$UCP_INSECURE_TLS] | -| `--ucp-ca` | Use a PEM-encoded TLS CA certificate for UCP [$UCP_CA] | -| `--ucp-node` | Specify the host to install Docker Trusted Registry [$UCP_NODE] | -| `--replica-id` | Specify the replica Id. Must be unique per replica, leave blank for random [$DTR_REPLICA_ID] | -| `--unsafe` | Enable this flag to skip safety checks when installing or joining [$DTR_UNSAFE] | -| `--existing-replica-id` | ID of an existing replica in a cluster [$DTR_EXISTING_REPLICA_ID] | -| `--replica-http-port "0"` | Specify the public HTTP port for the DTR replica [$REPLICA_HTTP_PORT] | -| `--replica-https-port "0"` | Specify the public HTTPS port for the DTR replica [$REPLICA_HTTPS_PORT] | -| `--skip-network-test` | Whether to skip the overlay networking test or not [$DTR_SKIP_NETWORK_TEST] | +## Options + +| Option | Description | +|:------------------------|:--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| `--ucp-url` | Specify the UCP controller URL including domain and port | +| `--ucp-username` | Specify the UCP admin username | +| `--ucp-password` | Specify the UCP admin password | +| `--debug` | Enable debug mode, provides additional logging | +| `--hub-username` | Specify the Docker Hub username for pulling images | +| `--hub-password` | Specify the Docker Hub password for pulling images | +| `--ucp-insecure-tls` | Disable TLS verification for UCP | +| `--ucp-ca` | Use a PEM-encoded TLS CA certificate for UCP | +| `--ucp-node` | Specify the host to install Docker Trusted Registry | +| `--replica-id` | Specify the replica ID. Must be unique per replica, leave blank for random | +| `--unsafe` | Enable this flag to skip safety checks when installing or joining | +| `--existing-replica-id` | ID of an existing replica in a cluster | +| `--replica-http-port` | Specify the public HTTP port for the DTR replica; 0 means unchanged/default | +| `--replica-https-port` | Specify the public HTTPS port for the DTR replica; 0 means unchanged/default | +| `--skip-network-test` | Enable this flag to skip the overlay networking test | +| `--extra-envs` | List of extra environment variables to use for deploying the DTR containers for the replica. This can be used to specify swarm constraints. Separate the environment variables with ampersands (&). You can escape actual ampersands with backslashes (\). Can't be used in combination with --ucp-node | diff --git a/docker-trusted-registry/reference/migrate.md b/docker-trusted-registry/reference/migrate.md index 60ee05f6fcd..accb4d14376 100644 --- a/docker-trusted-registry/reference/migrate.md +++ b/docker-trusted-registry/reference/migrate.md @@ -16,7 +16,7 @@ Migrate configurations, accounts, and repository metadata from DTR 1.4.3 to 2.0 ## Usage ```bash -$ docker run -it --rm docker/dtr \ +docker run -it --rm -v /var/run/docker.sock:/var/run/docker.sock docker/dtr \ migrate [command options] ``` @@ -31,20 +31,22 @@ migrate the data to the new installation. Finally, you decommission your DTR 1.4.3 by uninstalling it. -| Option | Description | -|:-----------------------|:-------------------------------------------------------------------------------------| -| `--ucp-url ` | Specify the UCP controller URL [$UCP_URL] | -| `--ucp-username` | Specify the UCP admin username [$UCP_USERNAME] | -| `--ucp-password` | Specify the UCP admin password [$UCP_PASSWORD] | -| `--debug` | Enable debug mode, provides additional logging [$DEBUG] | -| `--hub-username` | Specify the Docker Hub username for pulling images [$HUB_USERNAME] | -| `--hub-password` | Specify the Docker Hub password for pulling images [$HUB_PASSWORD] | -| `--ucp-insecure-tls` | Disable TLS verification for UCP [$UCP_INSECURE_TLS] | -| `--ucp-ca` | Use a PEM-encoded TLS CA certificate for UCP [$UCP_CA] | -| `--run-full-migration` | Run full migration procedure instead of dumping configurations [$RUN_FULL_MIGRATION] | -| `--dtr-load-balancer` | Specify the domain name and port for the DTR load balancer [$DTR_LOAD_BALANCER] | -| `--dtr-insecure-tls` | Disable TLS verification for DTR [$DTR_INSECURE_TLS] | -| `--dtr-ca` | PEM-encoded TLS CA cert for DTR [$DTR_CA] | -| `--http-proxy` | Set the HTTP proxy for outgoing requests [$DTR_HTTP_PROXY] | -| `--https-proxy` | Set the HTTPS proxy for outgoing requests [$DTR_HTTPS_PROXY] | -| `--no-proxy` | Set the list of domains to not proxy to [$DTR_NO_PROXY] | +## Options + +| Option | Description | +|:-----------------------|:-----------------------------------------------------------------------------------------------------------| +| `--ucp-url` | Specify the UCP controller URL including domain and port | +| `--ucp-username` | Specify the UCP admin username | +| `--ucp-password` | Specify the UCP admin password | +| `--debug` | Enable debug mode, provides additional logging | +| `--hub-username` | Specify the Docker Hub username for pulling images | +| `--hub-password` | Specify the Docker Hub password for pulling images | +| `--ucp-insecure-tls` | Disable TLS verification for UCP | +| `--ucp-ca` | Use a PEM-encoded TLS CA certificate for UCP | +| `--run-full-migration` | Run full migration procedure instead of dumping configurations | +| `--dtr-external-url` | Specify the external domain name and port for DTR. If using a load balancer, use its external URL instead. | +| `--dtr-insecure-tls` | Disable TLS verification for DTR | +| `--dtr-ca` | PEM-encoded TLS CA cert for DTR | +| `--http-proxy` | Set the HTTP proxy for outgoing requests | +| `--https-proxy` | Set the HTTPS proxy for outgoing requests | +| `--no-proxy` | Set the list of domains to not proxy to | diff --git a/docker-trusted-registry/reference/reconfigure.md b/docker-trusted-registry/reference/reconfigure.md index 7e8c8250a7f..1ee2cb01e64 100644 --- a/docker-trusted-registry/reference/reconfigure.md +++ b/docker-trusted-registry/reference/reconfigure.md @@ -13,11 +13,11 @@ title: reconfigure Change DTR configurations -# Usage +## Usage ```bash -$ docker run -it --rm docker/dtr \ - reconfigure [command options] +docker run -it --rm docker/dtr \ + reconfigure [command options] ``` ## Description @@ -28,24 +28,28 @@ existing configurations in its original state. WARNING: DTR is restarted for the new configurations to take effect. To have no down time, configure your DTR for high-availability. - -| Option | Description | -|:---------------------------|:-------------------------------------------------------------------------------------------------| -| `--ucp-url` | Specify the UCP controller URL [$UCP_URL] | -| `--ucp-username` | Specify the UCP admin username [$UCP_USERNAME] | -| `--ucp-password` | Specify the UCP admin password [$UCP_PASSWORD] | -| `--debug` | Enable debug mode, provides additional logging [$DEBUG] | -| `--hub-username` | Specify the Docker Hub username for pulling images [$HUB_USERNAME] | -| `--hub-password` | Specify the Docker Hub password for pulling images [$HUB_PASSWORD] | -| `--http-proxy` | Set the HTTP proxy for outgoing requests [$DTR_HTTP_PROXY] | -| `--https-proxy` | Set the HTTPS proxy for outgoing requests [$DTR_HTTPS_PROXY] | -| `--no-proxy` | Set the list of domains to not proxy to [$DTR_NO_PROXY] | -| `--replica-http-port "0"` | Specify the public HTTP port for the DTR replica [$REPLICA_HTTP_PORT] | -| `--replica-https-port "0"` | Specify the public HTTPS port for the DTR replica [$REPLICA_HTTPS_PORT] | -| `--log-protocol` | The protocol for sending container logs: tcp, udp or internal. Default: internal [$LOG_PROTOCOL] | -| `--log-host` | Endpoint to send logs to, required if --log-protocol is tcp or udp [$LOG_HOST] | -| `--log-level` | Log level for container logs. Default: INFO [$LOG_LEVEL] | -| `--dtr-load-balancer` | Specify the domain name and port for the DTR load balancer [$DTR_LOAD_BALANCER] | -| `--ucp-insecure-tls` | Disable TLS verification for UCP [$UCP_INSECURE_TLS] | -| `--ucp-ca` | Use a PEM-encoded TLS CA certificate for UCP [$UCP_CA] | -| `--existing-replica-id` | ID of an existing replica in a cluster [$DTR_EXISTING_REPLICA_ID] | +## Options + +| Option | Description | +|:----------------------------|:------------------------------------------------------------------------------------------------------------------------------------| +| `--ucp-url` | Specify the UCP controller URL including domain and port | +| `--ucp-username` | Specify the UCP admin username | +| `--ucp-password` | Specify the UCP admin password | +| `--debug` | Enable debug mode, provides additional logging | +| `--hub-username` | Specify the Docker Hub username for pulling images | +| `--hub-password` | Specify the Docker Hub password for pulling images | +| `--http-proxy` | Set the HTTP proxy for outgoing requests | +| `--https-proxy` | Set the HTTPS proxy for outgoing requests | +| `--no-proxy` | Set the list of domains to not proxy to | +| `--replica-http-port` | Specify the public HTTP port for the DTR replica; 0 means unchanged/default | +| `--replica-https-port` | Specify the public HTTPS port for the DTR replica; 0 means unchanged/default | +| `--log-protocol` | The protocol for sending container logs: tcp, udp or internal. Default: internal | +| `--log-host` | Endpoint to send logs to, required if --log-protocol is tcp or udp | +| `--log-level` | Log level for container logs. Default: INFO | +| `--dtr-external-url` | Specify the external domain name and port for DTR. If using a load balancer, use its external URL instead. | +| `--etcd-heartbeat-interval` | Set etcd's frequency (ms) that its leader will notify followers that it is still the leader. | +| `--etcd-election-timeout` | Set etcd's timeout (ms) for how long a follower node will go without hearing a heartbeat before attempting to become leader itself. | +| `--etcd-snapshot-count` | Set etcd's number of changes before creating a snapshot. | +| `--ucp-insecure-tls` | Disable TLS verification for UCP | +| `--ucp-ca` | Use a PEM-encoded TLS CA certificate for UCP | +| `--existing-replica-id` | ID of an existing replica in a cluster | diff --git a/docker-trusted-registry/reference/remove.md b/docker-trusted-registry/reference/remove.md index 00347ce175e..8a52e1fca1c 100644 --- a/docker-trusted-registry/reference/remove.md +++ b/docker-trusted-registry/reference/remove.md @@ -16,8 +16,8 @@ Remove a replica from a DTR cluster ## Usage ```bash -$ docker run -it --rm docker/dtr \ - remove [command options] +docker run -it --rm docker/dtr \ + remove [command options] ``` ## Description @@ -25,17 +25,18 @@ $ docker run -it --rm docker/dtr \ This command removes a replica from the cluster, stops and removes all DTR containers, and deletes all DTR volumes. -| Option | Description | -|:------------------------|:---------------------------------------------------------------------------------------------| -| `--ucp-url` | Specify the UCP controller URL [$UCP_URL] | -| `--ucp-username` | Specify the UCP admin username [$UCP_USERNAME] | -| `--ucp-password` | Specify the UCP admin password [$UCP_PASSWORD] | -| `--debug` | Enable debug mode, provides additional logging [$DEBUG] | -| `--hub-username` | Specify the Docker Hub username for pulling images [$HUB_USERNAME] | -| `--hub-password` | Specify the Docker Hub password for pulling images [$HUB_PASSWORD] | -| `--ucp-insecure-tls` | Disable TLS verification for UCP [$UCP_INSECURE_TLS] | -| `--ucp-ca` | Use a PEM-encoded TLS CA certificate for UCP [$UCP_CA] | -| `--ucp-node` | Specify the host to install Docker Trusted Registry [$UCP_NODE] | -| `--force-remove` | Force removal of replica even if it will break your cluster's state [$DTR_CONFIG_ONLY] | -| `--replica-id` | Specify the replica Id. Must be unique per replica, leave blank for random [$DTR_REPLICA_ID] | -| `--existing-replica-id` | ID of an existing replica in a cluster [$DTR_EXISTING_REPLICA_ID] | +## Options + +| Option | Description | +|:------------------------|:-------------------------------------------------------------------------------------------------------------------------------| +| `--ucp-url` | Specify the UCP controller URL including domain and port | +| `--ucp-username` | Specify the UCP admin username | +| `--ucp-password` | Specify the UCP admin password | +| `--debug` | Enable debug mode, provides additional logging | +| `--hub-username` | Specify the Docker Hub username for pulling images | +| `--hub-password` | Specify the Docker Hub password for pulling images | +| `--ucp-insecure-tls` | Disable TLS verification for UCP | +| `--ucp-ca` | Use a PEM-encoded TLS CA certificate for UCP | +| `--force-remove` | Force removal of replica even if it can break your cluster's state. Necessary only when --existing-replica-id == --replica-id. | +| `--replica-id` | Specify the replica ID. Must be unique per replica, leave blank for random | +| `--existing-replica-id` | ID of an existing replica in a cluster | diff --git a/docker-trusted-registry/reference/restore.md b/docker-trusted-registry/reference/restore.md index f663f865b98..1b4921aaee6 100644 --- a/docker-trusted-registry/reference/restore.md +++ b/docker-trusted-registry/reference/restore.md @@ -16,8 +16,8 @@ Create a new DTR cluster from an existing backup ## Usage ```bash -$ docker run -i --rm docker/dtr \ - restore [command options] < backup.tar +docker run -i --rm docker/dtr \ + restore [command options] < backup.tar ``` ## Description @@ -37,25 +37,30 @@ After restoring DTR, you can add more nodes to the DTR cluster with the 'join' command. -| Option | Description | -|:---------------------------|:-------------------------------------------------------------------------------------------------| -| `--ucp-url` | Specify the UCP controller URL [$UCP_URL] | -| `--ucp-username` | Specify the UCP admin username [$UCP_USERNAME] | -| `--ucp-password` | Specify the UCP admin password [$UCP_PASSWORD] | -| `--debug` | Enable debug mode, provides additional logging [$DEBUG] | -| `--hub-username` | Specify the Docker Hub username for pulling images [$HUB_USERNAME] | -| `--hub-password` | Specify the Docker Hub password for pulling images [$HUB_PASSWORD] | -| `--http-proxy` | Set the HTTP proxy for outgoing requests [$DTR_HTTP_PROXY] | -| `--https-proxy` | Set the HTTPS proxy for outgoing requests [$DTR_HTTPS_PROXY] | -| `--no-proxy` | Set the list of domains to not proxy to [$DTR_NO_PROXY] | -| `--replica-http-port "0"` | Specify the public HTTP port for the DTR replica [$REPLICA_HTTP_PORT] | -| `--replica-https-port "0"` | Specify the public HTTPS port for the DTR replica [$REPLICA_HTTPS_PORT] | -| `--log-protocol` | The protocol for sending container logs: tcp, udp or internal. Default: internal [$LOG_PROTOCOL] | -| `--log-host` | Endpoint to send logs to, required if --log-protocol is tcp or udp [$LOG_HOST] | -| `--log-level` | Log level for container logs. Default: INFO [$LOG_LEVEL] | -| `--dtr-load-balancer` | Specify the domain name and port for the DTR load balancer [$DTR_LOAD_BALANCER] | -| `--ucp-insecure-tls` | Disable TLS verification for UCP [$UCP_INSECURE_TLS] | -| `--ucp-ca` | Use a PEM-encoded TLS CA certificate for UCP [$UCP_CA] | -| `--ucp-node` | Specify the host to install Docker Trusted Registry [$UCP_NODE] | -| `--replica-id` | Specify the replica Id. Must be unique per replica, leave blank for random [$DTR_REPLICA_ID] | -| `--config-only` | Backup/restore only the configurations of DTR and not the database [$DTR_CONFIG_ONLY] | +## Options + +| Option | Description | +|:----------------------------|:------------------------------------------------------------------------------------------------------------------------------------| +| `--ucp-url` | Specify the UCP controller URL including domain and port | +| `--ucp-username` | Specify the UCP admin username | +| `--ucp-password` | Specify the UCP admin password | +| `--debug` | Enable debug mode, provides additional logging | +| `--hub-username` | Specify the Docker Hub username for pulling images | +| `--hub-password` | Specify the Docker Hub password for pulling images | +| `--http-proxy` | Set the HTTP proxy for outgoing requests | +| `--https-proxy` | Set the HTTPS proxy for outgoing requests | +| `--no-proxy` | Set the list of domains to not proxy to | +| `--replica-http-port` | Specify the public HTTP port for the DTR replica; 0 means unchanged/default | +| `--replica-https-port` | Specify the public HTTPS port for the DTR replica; 0 means unchanged/default | +| `--log-protocol` | The protocol for sending container logs: tcp, udp or internal. Default: internal | +| `--log-host` | Endpoint to send logs to, required if --log-protocol is tcp or udp | +| `--log-level` | Log level for container logs. Default: INFO | +| `--dtr-external-url` | Specify the external domain name and port for DTR. If using a load balancer, use its external URL instead. | +| `--etcd-heartbeat-interval` | Set etcd's frequency (ms) that its leader will notify followers that it is still the leader. | +| `--etcd-election-timeout` | Set etcd's timeout (ms) for how long a follower node will go without hearing a heartbeat before attempting to become leader itself. | +| `--etcd-snapshot-count` | Set etcd's number of changes before creating a snapshot. | +| `--ucp-insecure-tls` | Disable TLS verification for UCP | +| `--ucp-ca` | Use a PEM-encoded TLS CA certificate for UCP | +| `--ucp-node` | Specify the host to install Docker Trusted Registry | +| `--replica-id` | Specify the replica ID. Must be unique per replica, leave blank for random | +| `--config-only` | Backup/restore only the configurations of DTR and not the database | diff --git a/docker-trusted-registry/reference/upgrade.md b/docker-trusted-registry/reference/upgrade.md new file mode 100644 index 00000000000..5433f6ee724 --- /dev/null +++ b/docker-trusted-registry/reference/upgrade.md @@ -0,0 +1,54 @@ +--- +description: Docker Trusted Registry upgrade command reference. +keywords: +- docker, registry, restore, upgrade +menu: + main: + identifier: dtr_reference_upgrade + parent: dtr_menu_reference +title: upgrade +--- + +# docker/dtr upgrade + +Upgrade a v2.0.0 or later cluster to this version of DTR + +## Usage + +```bash +docker run -it --rm docker/dtr \ + upgrade [command options] +``` + +## Description + + +This command upgrades an existing DTR 2.0.0 or later cluster to the current version of +this bootstrapper. + + +## Options + +| Option | Description | +|:----------------------------|:------------------------------------------------------------------------------------------------------------------------------------| +| `--ucp-url` | Specify the UCP controller URL including domain and port | +| `--ucp-username` | Specify the UCP admin username | +| `--ucp-password` | Specify the UCP admin password | +| `--debug` | Enable debug mode, provides additional logging | +| `--hub-username` | Specify the Docker Hub username for pulling images | +| `--hub-password` | Specify the Docker Hub password for pulling images | +| `--http-proxy` | Set the HTTP proxy for outgoing requests | +| `--https-proxy` | Set the HTTPS proxy for outgoing requests | +| `--no-proxy` | Set the list of domains to not proxy to | +| `--replica-http-port` | Specify the public HTTP port for the DTR replica; 0 means unchanged/default | +| `--replica-https-port` | Specify the public HTTPS port for the DTR replica; 0 means unchanged/default | +| `--log-protocol` | The protocol for sending container logs: tcp, udp or internal. Default: internal | +| `--log-host` | Endpoint to send logs to, required if --log-protocol is tcp or udp | +| `--log-level` | Log level for container logs. Default: INFO | +| `--dtr-external-url` | Specify the external domain name and port for DTR. If using a load balancer, use its external URL instead. | +| `--etcd-heartbeat-interval` | Set etcd's frequency (ms) that its leader will notify followers that it is still the leader. | +| `--etcd-election-timeout` | Set etcd's timeout (ms) for how long a follower node will go without hearing a heartbeat before attempting to become leader itself. | +| `--etcd-snapshot-count` | Set etcd's number of changes before creating a snapshot. | +| `--ucp-insecure-tls` | Disable TLS verification for UCP | +| `--ucp-ca` | Use a PEM-encoded TLS CA certificate for UCP | +| `--existing-replica-id` | ID of an existing replica in a cluster |