k8s-部署本地仓库harbor

1.基础配置：

主机名	IP	系统版本
k8s-master	192.168.32.128	centos 7.6
k8s-node1	192.168.32.129	centos 7.6
k8s-node2	192.168.32.130	centos 7.6
k8s-harbor	192.168.32.131	centos 7.6

2.安装docker-compose

curl -L https://get.daocloud.io/docker/compose/releases/download/1.25.0/docker-compose-`uname -s`-`uname -m` > /usr/local/bin/docker-compose
#给docker-compose添加执行权限
sudo chmod +x /usr/local/bin/docker-compose
#查看docker-compose是否安装成功
$ docker-compose -version
docker-compose version 1.25.0, build 0a186604

3.下载Harbor的压缩包

https://github.com/goharbor/harbor/releases
#上传压缩包到linux，并解压
tar -xzf harbor-offline-installer-v2.1.0_2.tgz
mkdir /opt/harbor
mv harbor/* /opt/harbor
cd /opt/harbor

4.修改harbor配置

#没有的话复制harbor.yml.tmpl
cp -a harbor.yml.tmpl harbor.yml
vim harbor.yml
修改hostname和port
hostname: 172.21.3.23
port: 80
#注释掉https这段
# https related config
#https:
  # https port for harbor, default is 443
 # port: 443
  # The path of cert and key files for nginx
 # certificate: /your/certificate/path
  #private_key: /your/private/key/path

5.安装harbor

./install.sh	

6.启动、停止、重启

docker-compose up -d 启动
docker-compose stop 停止
docker-compose restart 重新启动

7.访问harbor

http://192.168.32.131
默认账户密码：admin/Harbor12345

8.配置仓库

[root@k8s-harbor harbor]# vim /etc/docker/daemon.json 
{
    
    
"insecure-registries": ["192.168.32.131"]
}

9.登录仓库

[root@k8s-n1 harbor]# docker login 192.168.32.131
Username: admin
Password:
WARNING! Your password will be stored unencrypted in /root/.docker/config.json.
Configure a credential helper to remove this warning. See
https://docs.docker.com/engine/reference/commandline/login/#credentials-store

Login Succeeded

10.编写Dockerfile nginx

FROM centos:7.2.1511
VOLUME /tmp
MAINTAINER Harry  # 作者名为Harry
ADD nginx-1.18.0.tar.gz /usr/src/  # 解压本地host中的nginx包到容器中的/usr/src目录
RUN useradd -r -s /sbin/nologin nginx
RUN yum install -y gcc pcre-devel openssl-devel zlib-devel make
ENV NGINX_DIR /usr/src/nginx-1.18.0 # 定义环境变量
WORKDIR $NGINX_DIR  # 进入容器中的解压目录
# 编译安装
RUN ./configure --prefix=/usr/local/nginx \
--user=nginx \
--with-http_ssl_module \
--with-http_v2_module \
--with-http_realip_module \
--with-http_stub_status_module \
--with-http_gzip_static_module \
--with-pcre \
--with-stream \
--with-stream_ssl_module \
--with-stream_realip_module 
RUN pwd
RUN make && make install
RUN ln -s /usr/local/nginx/sbin/nginx /usr/sbin/nginx
EXPOSE 80 #定义容器内部端口
# 后台启动nginx服务
CMD ["nginx", "-g", "daemon off;"]

11.执行Dockerfile

docker build -f Dockerfile -t nginx . >/dev/null 2>&1

12.上传镜像到私有仓库

12.1 给nginx:latest修改标记为192.168.32.131/nginx/nginx:22401
docker tag nginx:latest 192.168.32.131/nginx/nginx:22401
12.2推送镜像到192.168.32.131/nginx/nginx:22401
docker push 192.168.32.131/nginx/nginx:22401

启动docker例子：
-p: 9090(外部映射端口) 80（容器内部监控端口）
-d: 后台运行
docker run -id -d -p 9090:80 --name testnginx -v /usr/local/nginx/conf/nginx.conf:/usr/local/nginx/conf/nginx.conf 192.168.32.131/nginx/nginx:22401

进入镜像：
docker exec -it 镜像名 /bin/bash