云原生应用6：用VMware的开源产品 Harbor 搭建私有Registry仓库

女爷i 2024-04-17 22:48 31阅读 0赞

Harbor，是VMware公司基于docker registry进行二次开发后的产品，因有美观的图形界面，多租户等特性被很多人员使用

Harbor 在Github地址：[https://github.com/goharbor/harbor][https_github.com_goharbor_harbor]

##### Harbor 的特性 #####

*  **Cloud native registry**: 云原生仓库.
 *  **Role based access control**: 用户角色权限访问控制.
 *  **Policy based replication**: 镜像复制，镜像高可用.
 *  **Vulnerability Scanning**: 扫描漏洞.
 *  **LDAP/AD support**: .
 *  **OIDC support**: .
 *  **Image deletion & garbage collection**: 可以删除镜像并回收其空间.
 *  **Notary**: 确保镜像真实性.
 *  **Graphical user portal**: 用户可在图形界面上浏览、搜索、管理项目.
 *  **Auditing**: 审计，所有到存储库的操作都会被跟踪.
 *  **RESTful API**: RESTful APIs ，可使用Swagger UI来测试API.
 *  **Easy deployment**: 易于部署，提供在线和离线安装程序

依赖环境：On a Linux host: docker 17.06.0-ce+ and docker-compose 1.23.0+  
安装教程可参考：[https://github.com/goharbor/harbor/blob/master/docs/installation\_guide.md][https_github.com_goharbor_harbor_blob_master_docs_installation_guide.md]

##### 下面开始安装 Harbor，由于harbor一套程序有多个容器，VMware为简单部署，使用了docker-compose单机编排工具，因此要先安装docker与docker-compose #####

*  1.**安装docker-compose**，yum -y install docker-compose  
    a.下载 curl -L https://github.com/docker/compose/releases/download/1.24.1/docker-compose-`uname -s`\-`uname -m` \-o /usr/local/bin/docker-compose  
    b.赋权 chmod +x /usr/local/bin/docker-compose  
    c.验证 docker-compose --version
 *  2.**下载 harbor 文件**，wget https://storage.googleapis.com/harbor-releases/release-1.8.0/harbor-offline-installer-v1.8.2.tgz
 *  3.解压，tar -xvzf harbor-offline-installer-v1.8.2.tgz -C /usr/local/，进入harbor目录，cd harbor/  
    ![在这里插入图片描述][20190902162433451.png]
 *  4.修改配置，vi harbor.yml，修改必须的参数，hostname=192.168.68.135，harbor默认监听宿主机80端口，下面还有登录图形要用到的账户和密码，默认 admin Harbor12345，还有mysql的账户和密码，默认 root root123，镜像存储路径等等可选配置
 *  5.启动私有仓库，sh install.sh ，包比较大，548M，等待时间比较久，它会先把harbor.v1.8.2.tar.gz里面的镜像load到本地，看到下面的 successfully 说明harbor安装成功  
    ![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3podXl1MTk5MTEwMTY1MjA_size_16_color_FFFFFF_t_70]
 *  6.查看端口， netstat -tnl，可以看到宿主机80端口被监听了
 *  7.在浏览器中访问，http://192.168.68.135，使用admin Harbor12345登录  
    ![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3podXl1MTk5MTEwMTY1MjA_size_16_color_FFFFFF_t_70 1]  
    ![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3podXl1MTk5MTEwMTY1MjA_size_16_color_FFFFFF_t_70 2]
 *  8.harbor是个多租户平台，因此可以创建zhuyu的新用户，新用户登录后创建 dev 项目，项目下有仓库，可以点击进去，按照下图推送镜像区域的提示，按上面的规则把镜像打标签，提示中显示打标签为 centos2/dev/IMAGE格式，但centos2要改为harbor机器所在的 Ip 192.168.68.135，就可以推送镜像到Harbor了  
    ![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3podXl1MTk5MTEwMTY1MjA_size_16_color_FFFFFF_t_70 3]  
    ![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3podXl1MTk5MTEwMTY1MjA_size_16_color_FFFFFF_t_70 4]
 *  9.镜像打标签，docker tag webhttpd:v0.2 192.168.68.135/dev/webhttpd:v0.2  
    ![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3podXl1MTk5MTEwMTY1MjA_size_16_color_FFFFFF_t_70 5]
 *  10.推送成功后可以在 harbor 界面上看到刚刚推送的镜像，点进去还能看到每个标签、大小、作者等信息  
    ![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3podXl1MTk5MTEwMTY1MjA_size_16_color_FFFFFF_t_70 6]
 *  11.在其他机器上pull刚刚push的镜像，docker pull 192.168.68.135/dev/webhttpd:v0.2 ，下载成功  
    ![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3podXl1MTk5MTEwMTY1MjA_size_16_color_FFFFFF_t_70 7]

docker-compose下载地址：[https://github.com/docker/compose/releases][https_github.com_docker_compose_releases]

[https_github.com_goharbor_harbor]: https://github.com/goharbor/harbor
[https_github.com_goharbor_harbor_blob_master_docs_installation_guide.md]: https://github.com/goharbor/harbor/blob/master/docs/installation_guide.md
[20190902162433451.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/17/8932eb11759f443caa557c53432b3023.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3podXl1MTk5MTEwMTY1MjA_size_16_color_FFFFFF_t_70]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/17/a77a3fe62cad4819aa451d8f74fb76da.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3podXl1MTk5MTEwMTY1MjA_size_16_color_FFFFFF_t_70 1]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/17/92a30636ef024aa597a00960a3dfb92f.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3podXl1MTk5MTEwMTY1MjA_size_16_color_FFFFFF_t_70 2]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/17/0d74bba32f0043edace9049e4bdd96fc.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3podXl1MTk5MTEwMTY1MjA_size_16_color_FFFFFF_t_70 3]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/17/0abf69d1d4fe4164bc44cd28259fc04d.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3podXl1MTk5MTEwMTY1MjA_size_16_color_FFFFFF_t_70 4]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/17/46e30d1fdea3453da7755ca764c2c917.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3podXl1MTk5MTEwMTY1MjA_size_16_color_FFFFFF_t_70 5]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/17/0bdc55f188ba409f9db68d5140effb35.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3podXl1MTk5MTEwMTY1MjA_size_16_color_FFFFFF_t_70 6]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/17/c4315ecd417e470e85f0df39e0789f4f.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3podXl1MTk5MTEwMTY1MjA_size_16_color_FFFFFF_t_70 7]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/17/6eadf5c0a2a04560b8d85ca7f1348e41.png
[https_github.com_docker_compose_releases]: https://github.com/docker/compose/releases