Docker从入门到精通-企业级私有仓库harbor

转载

mob604756f318e7 2021-07-19 10:01:00

文章标签 docker nginx github redis linux 文章分类 代码人生

Harbor是一个CNCF（cloud native computing foundtion）毕业的项目，是一个被广泛使用的企业级私有仓库管理平台。支持安全漏洞分析、内容签名和验证、支持多租户、跨多个中心的复制、身份集成和基于角色的访问控制、可扩展的API和Web UI。

Harbor2.3 安装

环境准备

主机名	IP	CPU	内存	操作系统	磁盘空间
vm0	192.168.22.186	1核(生产环境最少2核)	4G(生产环境最少4G）	CentOS Linux release 7.6.1810 (Core)	60G(最少40G)

安装

到docker-compose github官方仓库，下载docker-compose 最新版本，这里我们使用的是1.29.2

sudo wget https://github.com/docker/compose/releases/download/1.29.2/docker-compose-Linux-x86_64
sudo mv docker-compose-Linux-x86_64 docker-compose && sudo mv docker-compose /usr/bin/
sudo chmod +x /usr/bin/docker-compose
docker-compose -v

到harbor github官方仓库，下载harbor 最新稳定版安装包, 我们这里使用的为2.3.0版本，由于安装包比较大需要等待一会儿

sudo yum -y install wget
sudo wget https://github.com/goharbor/harbor/releases/download/v2.3.0/harbor-offline-installer-v2.3.0.tgz

解压缩

tar -zxvf harbor-offline-installer-v2.3.0.tgz  && cd harbor
cd harbor && cp harbor.yml.tmpl harbor.yml

修改配置文件内容如下,由于是测试环境，这里我们使用http的方式通过ip地址进行访问：

[op@vm0 harbor]$ diff harbor.yml harbor.yml.tmpl
5c5
< hostname: 192.168.22.186
---
> hostname: reg.mydomain.com
13,18c13,18
< #https:
< #  # https port for harbor, default is 443
< #  port: 443
< #  # The path of cert and key files for nginx
< #  certificate: /your/certificate/path
< #  private_key: /your/private/key/path
---
> https:
>   # https port for harbor, default is 443
>   port: 443
>   # The path of cert and key files for nginx
>   certificate: /your/certificate/path
>   private_key: /your/private/key/path

开始安装harbor

sudo ./install.sh

检查安装结果

[op@vm0 harbor]$ sudo docker-compose ps
      Name                     Command                  State                      Ports
--------------------------------------------------------------------------------------------------------
harbor-core         /harbor/entrypoint.sh            Up (healthy)
harbor-db           /docker-entrypoint.sh 96 13      Up (healthy)
harbor-jobservice   /harbor/entrypoint.sh            Up (healthy)
harbor-log          /bin/sh -c /usr/local/bin/ ...   Up (healthy)   127.0.0.1:1514->10514/tcp
harbor-portal       nginx -g daemon off;             Up (healthy)
nginx               nginx -g daemon off;             Up (healthy)   0.0.0.0:80->8080/tcp,:::80->8080/tcp
redis               redis-server /etc/redis.conf     Up (healthy)
registry            /home/harbor/entrypoint.sh       Up (healthy)
registryctl         /home/harbor/start.sh            Up (healthy)