安装Harbor镜像仓库
安装docker
curl -fsSL https://get.docker.com | bash -s docker --mirror Aliyun
下载harbor安装包
# 下载Docker Harbor安装包
wget https://github.com/goharbor/harbor/releases/download/v2.12.0/harbor-offline-installer-v2.12.0.tgz
# 解压安装包
[root@chenby ~]# tar xvf harbor-offline-installer-v2.12.0.tgz -C /usr/local/
harbor/harbor.v2.12.0.tar.gz
harbor/prepare
harbor/LICENSE
harbor/install.sh
harbor/common.sh
harbor/harbor.yml.tmpl
[root@chenby ~]# cd /usr/local/harbor/
创建证书
# 我用的是免费证书 Let's Encrypt 泛域名证书申请
https://www.oiox.cn/index.php/archives/139/
配置harbor服务
# 配置harbor文件
[root@chenby harbor]# cp harbor.yml.tmpl harbor.yml
[root@chenby harbor]# vim harbor.yml
[root@chenby harbor]# cat harbor.yml | grep -v '^#' | grep -v '^$' | grep -v ' #'
hostname: z.oiox.cn
http:
port: 18081
https:
port: 18082
certificate: /ssl/cert.pem
private_key: /ssl/cert.key
harbor_admin_password: Cby123..
database:
password: root123
max_idle_conns: 100
max_open_conns: 900
conn_max_lifetime: 5m
conn_max_idle_time: 0
data_volume: /data
trivy:
ignore_unfixed: false
skip_update: false
skip_java_db_update: false
offline_scan: false
security_check: vuln
insecure: false
timeout: 5m0s
jobservice:
max_job_workers: 10
job_loggers:
- STD_OUTPUT
- FILE
logger_sweeper_duration: 1 #days
notification:
webhook_job_max_retry: 3
webhook_job_http_client_timeout: 3 #seconds
log:
level: info
local:
rotate_count: 50
rotate_size: 200M
location: /var/log/harbor
_version: 2.12.0
proxy:
http_proxy:
https_proxy:
no_proxy:
components:
- core
- jobservice
- trivy
upload_purging:
enabled: true
age: 168h
interval: 24h
dryrun: false
cache:
enabled: false
expire_hours: 24
[root@chenby harbor]#
安装harbor
# 进行安装
[root@chenby harbor]# ./install.sh
[Step 0]: checking if docker is installed ...
Note: docker version: 27.3.1
[Step 1]: checking docker-compose is installed ...
Note: Docker Compose version v2.29.7
[Step 2]: loading Harbor images ...
910db7c25623: Loading layer [==================================================>] 40.51MB/40.51MB
c8cd0a1f5b0b: Loading layer [==================================================>] 107.6MB/107.6MB
15d8ff051c07: Loading layer [==================================================>] 46.48MB/46.48MB
d197fd97c185: Loading layer [==================================================>] 13.77MB/13.77MB
d88ec2163d81: Loading layer [==================================================>] 66.05kB/66.05kB
e63d6d00357d: Loading layer [==================================================>] 2.56kB/2.56kB
b802bc40d720: Loading layer [==================================================>] 1.536kB/1.536kB
8225980335b5: Loading layer [==================================================>] 12.29kB/12.29kB
3175598f5b32: Loading layer [==================================================>] 2.746MB/2.746MB
ef05ddf12dfe: Loading layer [==================================================>] 525.3kB/525.3kB
Loaded image: goharbor/prepare:v2.12.0
32cd15a4ebdd: Loading layer [==================================================>] 16.27MB/16.27MB
0dd22cb0da1b: Loading layer [==================================================>] 190.2MB/190.2MB
ac30f78bb9c1: Loading layer [==================================================>] 26.08MB/26.08MB
527459edc5ee: Loading layer [==================================================>] 18.6MB/18.6MB
0fe3e34fe571: Loading layer [==================================================>] 5.12kB/5.12kB
eb0883932a36: Loading layer [==================================================>] 6.144kB/6.144kB
49b31970580b: Loading layer [==================================================>] 3.072kB/3.072kB
478aa400459f: Loading layer [==================================================>] 2.048kB/2.048kB
c39207896960: Loading layer [==================================================>] 2.56kB/2.56kB
e3a89007fad0: Loading layer [==================================================>] 7.68kB/7.68kB
Loaded image: goharbor/harbor-db:v2.12.0
eb105901976e: Loading layer [==================================================>] 11.57MB/11.57MB
4c386227a4e4: Loading layer [==================================================>] 3.584kB/3.584kB
4f442ab7cc4c: Loading layer [==================================================>] 2.56kB/2.56kB
2fa6704b1ae6: Loading layer [==================================================>] 59.63MB/59.63MB
65c014dfa82d: Loading layer [==================================================>] 60.42MB/60.42MB
Loaded image: goharbor/harbor-jobservice:v2.12.0
4cab912836a2: Loading layer [==================================================>] 8.614MB/8.614MB
247df5f5c893: Loading layer [==================================================>] 4.096kB/4.096kB
9ee7df405168: Loading layer [==================================================>] 18.13MB/18.13MB
d628a65e4634: Loading layer [==================================================>] 3.072kB/3.072kB
1759c807e026: Loading layer [==================================================>] 36.96MB/36.96MB
bee402e81ccd: Loading layer [==================================================>] 55.88MB/55.88MB
Loaded image: goharbor/harbor-registryctl:v2.12.0
afc604caf53d: Loading layer [==================================================>] 11.57MB/11.57MB
f9eb13f95461: Loading layer [==================================================>] 37.01MB/37.01MB
e98d25e4c661: Loading layer [==================================================>] 4.608kB/4.608kB
8dd3c4f177e1: Loading layer [==================================================>] 37.8MB/37.8MB
Loaded image: goharbor/harbor-exporter:v2.12.0
31e9c30e4a21: Loading layer [==================================================>] 16.27MB/16.27MB
bfcf2dfddce8: Loading layer [==================================================>] 125.1MB/125.1MB
1660b90f9dc7: Loading layer [==================================================>] 3.072kB/3.072kB
93c9be43608f: Loading layer [==================================================>] 59.9kB/59.9kB
d69d92256927: Loading layer [==================================================>] 61.95kB/61.95kB
Loaded image: goharbor/redis-photon:v2.12.0
769c4aa8c0a4: Loading layer [==================================================>] 8.614MB/8.614MB
9cd556727275: Loading layer [==================================================>] 4.096kB/4.096kB
0edc0bc0fa32: Loading layer [==================================================>] 3.072kB/3.072kB
30823cd3e953: Loading layer [==================================================>] 18.13MB/18.13MB
31ffd46d4827: Loading layer [==================================================>] 18.92MB/18.92MB
Loaded image: goharbor/registry-photon:v2.12.0
8f8c2600e204: Loading layer [==================================================>] 130.1MB/130.1MB
676f1d057a8c: Loading layer [==================================================>] 6.731MB/6.731MB
71425f9960bc: Loading layer [==================================================>] 252.9kB/252.9kB
8ce274b4eb81: Loading layer [==================================================>] 1.497MB/1.497MB
Loaded image: goharbor/harbor-portal:v2.12.0
4ed6c9567d72: Loading layer [==================================================>] 11.57MB/11.57MB
68c5cae40c58: Loading layer [==================================================>] 3.584kB/3.584kB
a29956692eb6: Loading layer [==================================================>] 2.56kB/2.56kB
d4eac84f665a: Loading layer [==================================================>] 70.77MB/70.77MB
c2d39ec31cb3: Loading layer [==================================================>] 5.632kB/5.632kB
81df0033286e: Loading layer [==================================================>] 126.5kB/126.5kB
847040daf450: Loading layer [==================================================>] 201.7kB/201.7kB
cba56604cbfc: Loading layer [==================================================>] 71.89MB/71.89MB
6d8fda582e88: Loading layer [==================================================>] 2.56kB/2.56kB
Loaded image: goharbor/harbor-core:v2.12.0
8dd98fe70bfa: Loading layer [==================================================>] 139.8MB/139.8MB
c0691b0983da: Loading layer [==================================================>] 3.584kB/3.584kB
a205646db971: Loading layer [==================================================>] 3.072kB/3.072kB
36bea9385de7: Loading layer [==================================================>] 2.56kB/2.56kB
624bbccc716a: Loading layer [==================================================>] 3.072kB/3.072kB
cee989d2b0b0: Loading layer [==================================================>] 3.584kB/3.584kB
73035228c2e1: Loading layer [==================================================>] 20.48kB/20.48kB
Loaded image: goharbor/harbor-log:v2.12.0
d397faf073f1: Loading layer [==================================================>] 130.1MB/130.1MB
Loaded image: goharbor/nginx-photon:v2.12.0
3e1f1096c4bf: Loading layer [==================================================>] 9.106MB/9.106MB
9cc192b1539e: Loading layer [==================================================>] 4.096kB/4.096kB
a4448f8ca935: Loading layer [==================================================>] 3.072kB/3.072kB
38c665e4daa5: Loading layer [==================================================>] 133.8MB/133.8MB
867c3a3ec63e: Loading layer [==================================================>] 15.55MB/15.55MB
e04b98ae7085: Loading layer [==================================================>] 150.1MB/150.1MB
Loaded image: goharbor/trivy-adapter-photon:v2.12.0
[Step 3]: preparing environment ...
[Step 4]: preparing harbor configs ...
prepare base dir is set to /usr/local/harbor
Generated configuration file: /config/portal/nginx.conf
Generated configuration file: /config/log/logrotate.conf
Generated configuration file: /config/log/rsyslog_docker.conf
Generated configuration file: /config/nginx/nginx.conf
Generated configuration file: /config/core/env
Generated configuration file: /config/core/app.conf
Generated configuration file: /config/registry/config.yml
Generated configuration file: /config/registryctl/env
Generated configuration file: /config/registryctl/config.yml
Generated configuration file: /config/db/env
Generated configuration file: /config/jobservice/env
Generated configuration file: /config/jobservice/config.yml
Generated and saved secret to file: /data/secret/keys/secretkey
Successfully called func: create_root_cert
Generated configuration file: /compose_location/docker-compose.yml
Clean up the input dir
Note: stopping existing Harbor instance ...
[Step 5]: starting Harbor ...
[+] Running 10/10
✔ Network harbor_harbor Created 0.2s
✔ Container harbor-log Started 0.4s
✔ Container harbor-db Started 0.6s
✔ Container redis Started 0.7s
✔ Container registryctl Started 0.7s
✔ Container harbor-portal Started 0.7s
✔ Container registry Started 0.6s
✔ Container harbor-core Started 0.8s
✔ Container nginx Started 1.1s
✔ Container harbor-jobservice Started 1.0s
✔ ----Harbor has been installed and started successfully.----
[root@chenby harbor]#
配置解析和docker
# FQDN解析
cat >> /etc/hosts <<EOF
192.168.1.120 z.oiox.cn
EOF
# 例如docker的配置
# 如果没有正式的域名以及ssl证书就需要配置 insecure-registries 参数
[root@chenby ~]# cat > /etc/docker/daemon.json <<EOF
{
"exec-opts": ["native.cgroupdriver=systemd"],
"insecure-registries": ["z.oiox.cn:18082"],
"registry-mirrors": [
"https://xxxxx.mirror.aliyuncs.com"
],
"max-concurrent-downloads": 10,
"log-driver": "json-file",
"log-level": "warn",
"log-opts": {
"max-size": "10m",
"max-file": "3"
},
"data-root": "/var/lib/docker"
}
EOF
# 重新启动docker
[root@chenby ~]# systemctl restart docker && systemctl status docker -l
测试使用
# 登陆
[root@chenby ~]# docker login z.oiox.cn:18082
Username: admin
Password:
WARNING! Your password will be stored unencrypted in /root/.docker/config.json.
Configure a credential helper to remove this warning. See
https://docs.docker.com/engine/reference/commandline/login/#credential-stores
Login Succeeded
[root@chenby ~]#
# 构建镜像
[root@chenby ~]# cat > Dockerfile <<EOF
FROM nginx
RUN echo '这是一个本地构建的nginx镜像，第一版' > /usr/share/nginx/html/index.html
EOF
docker build -t z.oiox.cn:18082/library/cby:v1 .
[root@chenby ~]# cat > Dockerfile <<EOF
FROM nginx
RUN echo '这是一个本地构建的nginx镜像，第二版' > /usr/share/nginx/html/index.html
EOF
docker build -t z.oiox.cn:18082/library/cby:v2 .
docker push z.oiox.cn:18082/library/cby:v1
docker push z.oiox.cn:18082/library/cby:v2
docker rmi z.oiox.cn:18082/library/cby:v1
docker rmi z.oiox.cn:18082/library/cby:v2
docker pull z.oiox.cn:18082/library/cby:v1
docker pull z.oiox.cn:18082/library/cby:v2
关于
https://www.oiox.cn/
https://www.oiox.cn/index.php/start-page.html
CSDN、GitHub、51CTO、知乎、开源中国、思否、掘金、简书、华为云、阿里云、腾讯云、哔哩哔哩、今日头条、新浪微博、个人博客
全网可搜《小陈运维》
文章主要发布于微信公众号
