标签：1.10 harbor root file docker configuration config
安装过程
[root@docker03 ~]# mv harbor-offline-installer-v1.10.1.tgz /usr/local/src/ [root@docker03 ~]# cd /usr/local/src/ [root@docker03 src]# tar xfz harbor-offline-installer-v1.10.1.tgz
[root@docker03 src]# cd harbor/ [root@docker03 harbor]# ll total 662120 -rw-r--r-- 1 root root 3398 Feb 10 2020 common.sh -rw-r--r-- 1 root root 677974489 Feb 10 2020 harbor.v1.10.1.tar.gz -rw-r--r-- 1 root root 5882 Feb 10 2020 harbor.yml -rwxr-xr-x 1 root root 2284 Feb 10 2020 install.sh -rw-r--r-- 1 root root 11347 Feb 10 2020 LICENSE -rwxr-xr-x 1 root root 1749 Feb 10 2020 prepare
编辑harbor.yml，不配置ssl
[root@docker03 harbor]# egrep -v "^$|#" harbor.yml
hostname: mytest.harbor.com
http:
port: 80
harbor_admin_password: Harbor12345
database:
password: root123
max_idle_conns: 50
max_open_conns: 100
data_volume: /data
clair:
updaters_interval: 12
jobservice:
max_job_workers: 10
notification:
webhook_job_max_retry: 10
chart:
absolute_url: disabled
log:
level: info
local:
rotate_count: 50
rotate_size: 200M
location: /var/log/harbor
_version: 1.10.0
proxy:
http_proxy:
https_proxy:
no_proxy:
components:
- core
- jobservice
- clair
安装
先执行安装前检查 ./prepare
[root@docker03 harbor]# ./prepare prepare base dir is set to /usr/local/src/harbor WARNING:root:WARNING: HTTP protocol is insecure. Harbor will deprecate http protocol in the future. Please make sure to upgrade to https Generated configuration file: /config/log/logrotate.conf Generated configuration file: /config/log/rsyslog_docker.conf Generated configuration file: /config/nginx/nginx.conf Generated configuration file: /config/core/env Generated configuration file: /config/core/app.conf Generated configuration file: /config/registry/config.yml Generated configuration file: /config/registryctl/env Generated configuration file: /config/db/env Generated configuration file: /config/jobservice/env Generated configuration file: /config/jobservice/config.yml Generated and saved secret to file: /secret/keys/secretkey Generated certificate, key file: /secret/core/private_key.pem, cert file: /secret/registry/root.crt Generated configuration file: /compose_location/docker-compose.yml Clean up the input dir
[root@docker03 harbor]# ./install.sh [Step 0]: checking if docker is installed ... Note: docker version: 18.09.9 [Step 1]: checking docker-compose is installed ... ✖ Need to install docker-compose(1.18.0+) by yourself first and run this script again.
安装docker-compose
[root@docker03 harbor]# yum install docker-compose -y 或者 [root@docker03 harbor]# yum install -y python3-pip [root@docker03 harbor]# pip3 install docker-compose
查看docker-compose安装结果
[root@docker03 harbor]# docker-compose -v docker-compose version 1.18.0, build 8dd22a9
开始安装harbor，使用install.sh
[root@docker03 harbor]# ./install.sh [Step 0]: checking if docker is installed ... Note: docker version: 18.09.9 [Step 1]: checking docker-compose is installed ... Note: docker-compose version: 1.18.0 [Step 2]: loading Harbor images ... Loaded image: goharbor/clair-adapter-photon:v1.0.1-v1.10.1 Loaded image: goharbor/harbor-jobservice:v1.10.1 Loaded image: goharbor/redis-photon:v1.10.1 Loaded image: goharbor/notary-server-photon:v0.6.1-v1.10.1 Loaded image: goharbor/clair-photon:v2.1.1-v1.10.1 Loaded image: goharbor/harbor-log:v1.10.1 Loaded image: goharbor/registry-photon:v2.7.1-patch-2819-2553-v1.10.1 Loaded image: goharbor/notary-signer-photon:v0.6.1-v1.10.1 Loaded image: goharbor/chartmuseum-photon:v0.9.0-v1.10.1 Loaded image: goharbor/harbor-registryctl:v1.10.1 Loaded image: goharbor/nginx-photon:v1.10.1 Loaded image: goharbor/harbor-migrator:v1.10.1 Loaded image: goharbor/prepare:v1.10.1 Loaded image: goharbor/harbor-portal:v1.10.1 Loaded image: goharbor/harbor-core:v1.10.1 Loaded image: goharbor/harbor-db:v1.10.1 [Step 3]: preparing environment ... [Step 4]: preparing harbor configs ... prepare base dir is set to /usr/local/src/harbor WARNING:root:WARNING: HTTP protocol is insecure. Harbor will deprecate http protocol in the future. Please make sure to upgrade to https Clearing the configuration file: /config/log/logrotate.conf Clearing the configuration file: /config/log/rsyslog_docker.conf Clearing the configuration file: /config/nginx/nginx.conf Clearing the configuration file: /config/core/env Clearing the configuration file: /config/core/app.conf Clearing the configuration file: /config/registry/config.yml Clearing the configuration file: /config/registryctl/env Clearing the configuration file: /config/registryctl/config.yml Clearing the configuration file: /config/db/env Clearing the configuration file: /config/jobservice/env Clearing the configuration file: /config/jobservice/config.yml Generated configuration file: /config/log/logrotate.conf Generated configuration file: /config/log/rsyslog_docker.conf Generated configuration file: /config/nginx/nginx.conf Generated configuration file: /config/core/env Generated configuration file: /config/core/app.conf Generated configuration file: /config/registry/config.yml Generated configuration file: /config/registryctl/env Generated configuration file: /config/db/env Generated configuration file: /config/jobservice/env Generated configuration file: /config/jobservice/config.yml Creating harbor-log ... done Generated configuration file: /compose_location/docker-compose.yml Clean up the input dir Creating redis ... done Creating harbor-core ... done Creating network "harbor_harbor" with the default driver Creating nginx ... done Creating harbor-portal ... Creating registryctl ... Creating redis ... Creating registry ... Creating harbor-db ... Creating harbor-core ... Creating nginx ... Creating harbor-jobservice ... ✔ ----Harbor has been installed and started successfully.----
设置harbor自启动
[root@docker03 harbor]# vi /usr/lib/systemd/system/harbor.service [Unit] Description=Harbor After=docker.service systemd-networkd.service systemd-resolved.service Requires=docker.service Documentation=http://github.com/vmware/harbor [Service] Type=simple Restart=on-failure RestartSec=5 ExecStart=/usr/bin/docker-compose -f /usr/local/src/harbor/docker-compose.yml up ExecStop=/usr/bin/docker-compose -f /usr/local/src/harbor/docker-compose.yml down [Install] WantedBy=multi-user.target
访问测试
登录后新建一个项目仓库
其他docker服务器配置镜像仓库
[root@docker01 src]# vim /etc/docker/daemon.json
{
"registry-mirrors": ["https://05eotbde.mirror.aliyuncs.com"],
"insecure-registries": ["zhanghao:443","mytest.harbor.com:80"]
}
重启docker
[root@docker01 src]# systemctl daemon-reload [root@docker01 src]# systemctl restart docker
测试登录docker
[root@docker01 src]# docker login -u admin http://mytest.harbor.com:80 Password: WARNING! Your password will be stored unencrypted in /root/.docker/config.json. Configure a credential helper to remove this warning. See https://docs.docker.com/engine/reference/commandline/login/#credentials-store Login Succeeded
给镜像打标并推送至仓库
[root@docker01 src]# docker tag nginx:1.16.1-alpine mytest.harbor.com:80/test/nginx:1.16.1-alpine [root@docker01 src]# docker push mytest.harbor.com:80/test/nginx:1.16.1-alpine The push refers to repository [mytest.harbor.com:80/test/nginx] 08065237b498: Layer already exists 531743b7098c: Layer already exists 1.16.1-alpine: digest: sha256:0dfc8450deb8c7f06fbaac27e453ac3262df7d3a93639c4e2f48ee39434ec017 size: 739
如果打标时，项目名写错了，会报出权限错误
denied: requested access to the resource is denied
[root@docker01 src]# docker push mytest.harbor.com:80/test123/nginx:1.16.1-alpine The push refers to repository [mytest.harbor.com:80/test123/nginx] 08065237b498: Preparing 531743b7098c: Preparing denied: requested access to the resource is denied
在仓库中查看镜像
测试从其他服务器拉去镜像
[root@docker04 ~]# cat /etc/docker/daemon.json
{
"registry-mirrors": ["https://05eotbde.mirror.aliyuncs.com"],
"insecure-registries": ["zhanghao:443","mytest.harbor.com:80"]
}
重启docker
[root@docker04 ~]# systemctl daemon-reload [root@docker04 ~]# systemctl restart docker
拉取镜像
[root@docker04 ~]# docker login -u admin mytest.harbor.com:80/ Password: WARNING! Your password will be stored unencrypted in /root/.docker/config.json. Configure a credential helper to remove this warning. See https://docs.docker.com/engine/reference/commandline/login/#credentials-store Login Succeeded [root@docker04 ~]# docker pull mytest.harbor.com:80/test/nginx:1.16.1-alpine 1.16.1-alpine: Pulling from test/nginx 4167d3e14976: Pull complete d9176111d0ef: Pull complete Digest: sha256:0dfc8450deb8c7f06fbaac27e453ac3262df7d3a93639c4e2f48ee39434ec017 Status: Downloaded newer image for mytest.harbor.com:80/test/nginx:1.16.1-alpine [root@docker04 ~]# docker images REPOSITORY TAG IMAGE ID CREATED SIZE test1 latest 5cbae2543770 6 days ago 133MB nginx latest 4cdc5dd7eaad 10 days ago 133MB mytest.harbor.com:80/test/nginx 1.16.1-alpine 5fad07aba15a 18 months ago 21.8MB
如果镜像仓库没有设置公开（也就是私有仓库），那么拉取镜像是需要登录的，如果设置成公开仓库，就不需要登录了
[root@docker04 ~]# docker pull mytest.harbor.com/test/nginx:1.16.1-alpine 1.16.1-alpine: Pulling from test/nginx 4167d3e14976: Pull complete d9176111d0ef: Pull complete Digest: sha256:0dfc8450deb8c7f06fbaac27e453ac3262df7d3a93639c4e2f48ee39434ec017 Status: Downloaded newer image for mytest.harbor.com/test/nginx:1.16.1-alpine
标签：1.10,harbor,root,file,docker,configuration,config 来源： https://www.cnblogs.com/zh-dream/p/15025530.html
本站声明： 1. iCode9 技术分享网（下文简称本站）提供的所有内容，仅供技术学习、探讨和分享； 2. 关于本站的所有留言、评论、转载及引用，纯属内容发起人的个人观点，与本站观点和立场无关； 3. 关于本站的所有言论和文字，纯属内容发起人的个人观点，与本站观点和立场无关； 4. 本站文章均是网友提供，不完全保证技术分享内容的完整性、准确性、时效性、风险性和版权归属；如您发现该文章侵犯了您的权益，可联系我们第一时间进行删除； 5. 本站为非盈利性的个人网站，所有内容不会用来进行牟利，也不会利用任何形式的广告来间接获益，纯粹是为了广大技术爱好者提供技术内容和技术思想的分享性交流网站。