Docker搭建私有仓库Harbor

待我称王封你为后i 2021-12-11 03:15 426阅读 0赞

## 一、harbor介绍 ##

Harbor是一个用于存储和分发Docker镜像的企业级Registry服务器。

由下面几个组件组成：

*  proxy：nginx前端代理，主要是分发前端页面ui访问和镜像上传和下载流量

*  registry：镜像仓库，负责存储镜像文件

*  核心服务：提供web ui，数据库，token认证，webhook等功能

*  日志服务

*  database：用来存储核心服务的一些数据

![1090817-20181213170809288-1263603549.png][]

因为是vmware出品的，所以支持下面几种部署方式

*  在线安装

*  离线安装

*  ova安装，这个直接在vcenter上导入就可以了

官方最小配置

*  2个cpu

*  4g内存

*  40g硬盘，因为是存储镜像的所以推荐硬盘大点

## 二、搭建过程 ##

### Install Docker CE ###

root@localhost:~# apt-get update
    root@localhost:~# apt-get install apt-transport-https ca-certificates software-properties-common curl
    root@localhost:~# curl -fsSL https://download.docker.com/linux/ubuntu/gpg |sudo apt-key add -
    root@localhost:~# apt-key fingerprint 0EBFCD88
    root@localhost:~# add-apt-repository "deb [arch=amd64] https://download.docker.com/linux/ubuntu $(lsb_release -cs) stable"
    root@localhost:~# apt-get update
    root@localhost:~# apt-get install docker-ce

### Install Docker-compose ###

root@localhost:~# curl -L "https://github.com/docker/compose/releases/download/1.22.0/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose
    root@localhost:~# chmod +x /usr/local/bin/docker-compose
    #查看版本
    root@localhost:~# docker --version
    Docker version 18.09.0, build 4d60db4
    root@localhost:~# docker-compose --version
    docker-compose version 1.22.0, build f46880fe

### Install harbor ###

root@localhost:~# wget https://storage.googleapis.com/harbor-releases/release-1.6.0/harbor-offline-installer-v1.6.0.tgz
    root@localhost:~# tar -zxvf harbor-offline-installer-v1.6.0.tgz
    #编辑配置文件
    root@localhost:~# cd harbor/
    root@localhost:~/harbor# vim harbor.cfg
    hostname = 114.112.34.27
    project_creation_restriction = adminonly
    #Python环境
    root@localhost:~/harbor# apt-get install python
    root@localhost:~/harbor# export LC_ALL=C
    root@localhost:~/harbor# ln -s /usr/bin/python3 /usr/bin/python
    #安装服务
    root@localhost:~/harbor# ./install.sh

看到以下内容，说明安装成功：

![1090817-20181213171616893-1147557669.png][]

启动服务：

root@localhost:~/harbor# docker-compose start
    Starting log         ... done
    Starting registry    ... done
    Starting postgresql  ... done
    Starting adminserver ... done
    Starting ui          ... done
    Starting redis       ... done
    Starting jobservice  ... done
    Starting proxy       ... done
    
    root@localhost:~/harbor# docker-compose ps
           Name                     Command                  State                                    Ports
    -------------------------------------------------------------------------------------------------------------------------------------
    harbor-adminserver   /harbor/start.sh                 Up (healthy)
    harbor-db            /entrypoint.sh postgres          Up (healthy)   5432/tcp
    harbor-jobservice    /harbor/start.sh                 Up
    harbor-log           /bin/sh -c /usr/local/bin/ ...   Up (healthy)   127.0.0.1:1514->10514/tcp
    harbor-ui            /harbor/start.sh                 Up (healthy)
    nginx                nginx -g daemon off;             Up (healthy)   0.0.0.0:443->443/tcp, 0.0.0.0:4443->4443/tcp, 0.0.0.0:80->80/tcp
    redis                docker-entrypoint.sh redis ...   Up             6379/tcp
    registry             /entrypoint.sh /etc/regist ...   Up (healthy)   5000/t

配置HTTPS

##如果不做HTTPS，只需将hostname设置为IP，protocol改为HTTP即可，也不必生成CA
    root@localhost:~/harbor# vi harbor.cfg

![1090817-20181213171726206-1776842514.png][]

#创建目录
    root@localhost:~/harbor# mkdir -p /data/cert/
    #生成ca证书和签名
    root@localhost:~/harbor# openssl genrsa -out /data/cert/ca.key 2048
    root@localhost:~/harbor# openssl req -x509 -new -nodes -key /data/cert/ca.key -subj "/CN=test.harbor.com" -days 5000 -out /data/cert/ca.crt
    #启动服务
    root@localhost:~/harbor# ./prepare
    root@localhost:~/harbor# docker-compose down
    root@localhost:~/harbor# docker-compose up -d

测试

<table> 
 <tbody> 
  <tr> 
   <td> <p>1</p> <p>2</p> <p>3</p> <p>4</p> <p>5</p> <p>6</p> </td> 
   <td> <p><code>修改本地host，添加一行内容</code></p> <p><code>114.112.34.27&nbsp; &nbsp;</code><code>test</code><code>.harbor.com</code></p> <p>&nbsp;</p> <p><code>在浏览器中访问</code></p> <p><code>http:</code><code>//test</code><code>.harbor.com/</code></p> <p><code>默认用户名/密码：admin</code><code>/Harbor12345</code></p> </td> 
  </tr> 
 </tbody> 
</table>

![1090817-20181213171939061-726049299.png][]

登录成功后会看到如下页面：

![1090817-20181213172002827-2116588794.png][]

添加项目：

![1090817-20181213172255890-968779908.png][]

进入此项目，可以看到推送镜像的命令：

![1090817-20181213172315944-1818653213.png][]

删除项目：

确认项目不再使用时，选中项目，点击删除

![1090817-20181213172547818-1769974295.png][]

点击删除：

![1090817-20181213172734861-571236044.png][]

在服务器进行测试

修改本地Docker默认仓库，指向Harbor

root@localhost:/data/cert# cp ca.crt /usr/local/share/ca-certificates/
    root@localhost:/data/cert# update-ca-certificates
    #修改docker配置文件，指向Harbor
    root@localhost:~/harbor# vi /etc/default/docker
    #添加一行内容
    DOCKER_OPTS="--insecure-registry=test.harbor.com"
    #重启docker服务
    root@localhost:~# service docker restart

<table> 
 <tbody> 
  <tr> 
   <td> <p>1</p> </td> 
   <td> <p><code>将本地Ubuntu镜像上传至Harbor</code></p> </td> 
  </tr> 
 </tbody> 
</table>

#将本地镜像打一个tag
    root@localhost:~# docker tag ubuntu:16.04 test.harbor.com/paas/ubuntu:v1.0
    #推送到Harbor上
    root@localhost:~/harbor# docker push test.harbor.com/paas/ubuntu:v1.0

<table> 
 <tbody> 
  <tr> 
   <td> <p>1</p> </td> 
   <td> <p><code>下载Harbor镜像至本地</code></p> </td> 
  </tr> 
 </tbody> 
</table>

root@localhost:~/harbor# docker pull test.harbor.com/paas/ubuntu:v1.0
    v1.0: Pulling from paas/ubuntu
    Digest: sha256:078d30763ae6697b7d55e49f4cb9e61407abd2137cafb5625f131aa47c1a47af
    Status: Downloaded newer image for test.harbor.com/paas/ubuntu:v1.0

转发：[https://www.cnblogs.com/zhaomeng/p/10115115.html][https_www.cnblogs.com_zhaomeng_p_10115115.html]

[1090817-20181213170809288-1263603549.png]: /images/20211211/c0ae0aaf4b7746e8a1f4cf5e0e799841.png
[1090817-20181213171616893-1147557669.png]: /images/20211211/3a84cb66f9614cb7b24f4e53c190179b.png
[1090817-20181213171726206-1776842514.png]: /images/20211211/bd9a4710d89f4fe187d5b5a7b4c68722.png
[1090817-20181213171939061-726049299.png]: /images/20211211/fe0f470a36a545c3a110e4af60bea18f.png
[1090817-20181213172002827-2116588794.png]: /images/20211211/9ce203671d5149e68cb0503f2655ca4f.png
[1090817-20181213172255890-968779908.png]: /images/20211211/bd7a51edb32e4eb59bdca6055ec636d1.png
[1090817-20181213172315944-1818653213.png]: /images/20211211/a51a16d34b95473184c6597ac11841f3.png
[1090817-20181213172547818-1769974295.png]: https://img2018.cnblogs.com/blog/1090817/201812/1090817-20181213172547818-1769974295.png
[1090817-20181213172734861-571236044.png]: https://img2018.cnblogs.com/blog/1090817/201812/1090817-20181213172734861-571236044.png
[https_www.cnblogs.com_zhaomeng_p_10115115.html]: https://www.cnblogs.com/zhaomeng/p/10115115.html