1、下载私服镜像
docker pull registry

2、启动容器
docker run -d -p 5000:5000 -v /opt/data/registry:/var/lib/registry --restart=always registry

3、修改仓库地址
/lib/systemd/system/docker.service
[Unit]
Description=Docker Application Container Engine
Documentation=https://docs.docker.com
After=network.target

[Service]
Type=notify
# the default is not to use systemd for cgroups because the delegate issues still
# exists and systemd currently does not support the cgroup feature set required
# for containers run by docker
ExecStart=/usr/bin/dockerd
ExecReload=/bin/kill -s HUP $MAINPID
# Having non-zero Limit*s causes performance problems due to accounting overhead
# in the kernel. We recommend using cgroups to do container-local accounting.
LimitNOFILE=infinity
LimitNPROC=infinity
LimitCORE=infinity
# Uncomment TasksMax if your systemd version supports it.
# Only systemd 226 and above support this version.
#TasksMax=infinity
TimeoutStartSec=0
# set delegate yes so that systemd does not reset the cgroups of docker containers
Delegate=yes
# kill only the docker process, not all processes in the cgroup
KillMode=process

（新增此行）OPTIONS='--selinux-enabled --insecure-registry ip:5000'

[Install]
WantedBy=multi-user.target

4、重启docker生效
systemctl restart docker.service

问题：
http: server gave HTTP response to HTTPS client
解决：添加如下文件
root@docker1 docker]# more daemon.json
{"insecure-registries":["ip:5000"] }