Harbro-1.1.2版本仓库部署

其他 2020-01-20 17:06:47 阅读次数: 0

一、Harbor介绍

Docker容器应用的开发和运行离不开可靠的镜像管理，虽然Docker官方也提供了公共的镜像仓库，但是从安全和效率等方面考虑，部署私有环境内的Registry也是非常必要的。Harbor是由VMware公司开源的企业级的Docker Registry管理项目，它包括权限管理(RBAC)、LDAP、日志审核、管理界面、自我注册、镜像复制和中文支持等功能

二、环境准备

Harbor的所有服务组件都是在Docker中部署的，所以官方安装使用Docker-compose快速部署，所以需要安装Docker、Docker-compose。由于Harbor是基于Docker Registry V2版本，所以就要求Docker版本不小于1.10.0，Docker-compose版本不小于1.6.0

1、安装并启动docker

安装所需的包。yum-utils提供了yum-config-manager 效用，并device-mapper-persistent-data和lvm2由需要 devicemapper存储驱动程序

[root@localhost ~]# yum install -y yum-utils device-mapper-persistent-data lvm2

设置稳定库（二选一）

（国外源，下载慢）

[root@localhost ~]# yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo

（阿里源，速度快）

[root@localhost ~]# yum-config-manager --add-repo http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo

安装Docker CE

[root@localhost ~]# yum install -y docker-ce docker-ce-cli containerd.io

启动docker

[root@localhost ~]# systemctl start docker

2、安装Docker-compose

下载指定版本的docker-compose

[root@localhost ~]# curl -L https://github.com/docker/compose/releases/download/1.13.0/docker-compose-`uname -s`-`uname -m` > /usr/local/bin/docker-compose
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   617    0   617    0     0    497      0 --:--:--  0:00:01 --:--:--   498
100 8079k  100 8079k    0     0   191k      0  0:00:42  0:00:42 --:--:--  414k

对二进制文件赋可执行权限

[root@localhost ~]# chmod +x /usr/local/bin/docker-compose

验证docker-compose是否安装成功

[root@localhost ~]# docker-compose --version
docker-compose version 1.13.0, build 1719ceb

三、Harbor服务搭建及启动

1、下载Harbor安装文件

从GitHub上https://github.com/goharbor/harbor/releases下载指定版本的安装包

[root@localhost ~]# mkdir -p /harbor
[root@localhost ~]# cd /harbor/
[root@localhost harbor]# yum -y install wget
[root@localhost harbor]# wget https://github.com/vmware/harbor/releases/download/v1.1.2/harbor-online-installer-v1.1.2.tgz
[root@localhost harbor]# ll
-rw-r--r--. 1 root root 100313 Jun 12  2017 harbor-online-installer-v1.1.2.tgz
[root@localhost harbor]# tar -zxvf harbor-online-installer-v1.1.2.tgz

2、配置harbor

[root@localhost harbor]# ll
total 100
drwxr-xr-x. 3 root root    203 Jul 19 02:47 harbor
-rw-r--r--. 1 root root 100313 Jun 12  2017 harbor-online-installer-v1.1.2.tgz
[root@localhost harbor]# cd harbor
[root@localhost harbor]# ll
total 392
drwxr-xr-x. 3 root root     23 Jul 19 02:47 common
-rw-r--r--. 1 root root   1988 Jun 12  2017 docker-compose.notary.yml
-rw-r--r--. 1 root root   3155 Jun 12  2017 docker-compose.yml
-rw-r--r--. 1 root root   4304 Jun 12  2017 harbor_1_1_0_template
-rw-r--r--. 1 root root   4085 Jun 12  2017 harbor.cfg
-rwxr-xr-x. 1 root root   5169 Jun 12  2017 install.sh
-rw-r--r--. 1 root root 337600 Jun 12  2017 LICENSE
-rw-r--r--. 1 root root    472 Jun 12  2017 NOTICE
-rwxr-xr-x. 1 root root  16522 Jun 12  2017 prepare
-rwxr-xr-x. 1 root root   4550 Jun 12  2017 upgrade
[root@localhost harbor]# vim harbor.cfg

配置文件harbor.cfg详解：

# hostname设置访问地址，可以使用ip、域名，不可以设置为127.0.0.1或localhost
hostname = 192.168.14.16

# 访问协议，默认是http，也可以设置https，如果设置https，则nginx ssl需要设置on
ui_url_protocol = http

# mysql数据库root用户默认密码root123，实际使用时修改下
db_password = 123456

max_job_workers = 3 

customize_crt = on

ssl_cert = /data/cert/server.crt
ssl_cert_key = /data/cert/server.key

secretkey_path = /data

admiral_url = NA
# 邮件设置，发送重置密码邮件时使用
email_identity = 

email_server = smtp.mydomain.com
email_server_port = 25
email_username = [email protected]
email_password = abc
email_from = admin <[email protected]>
email_ssl = false

# 启动Harbor后，管理员UI登录的密码，默认是Harbor12345
harbor_admin_password = 123456

# 认证方式，这里支持多种认证方式，如LADP、本次存储、数据库认证。默认是db_auth，mysql数据库认证
auth_mode = db_auth

# LDAP认证时配置项
ldap_url = ldaps://ldap.mydomain.com
#ldap_searchdn = uid=searchuser,ou=people,dc=mydomain,dc=com
#ldap_search_pwd = password
ldap_basedn = ou=people,dc=mydomain,dc=com
#ldap_filter = (objectClass=person)
ldap_uid = uid
ldap_scope = 3
ldap_timeout = 5

# 是否开启自注册
self_registration = on

# token有效时间，默认30分钟
token_expiration = 30

# 用户创建项目权限控制，默认是everyone（所有人），也可以设置为adminonly（只能管理员）
project_creation_restriction = everyone

verify_remote_cert = on

3、启动Harbor

修改完配置文件后，在的当前目录执行./install.sh，Harbor服务就会根据当期目录下的docker-compose.yml开始下载依赖的镜像，检测并按照顺序依次启动各个服务。如果失败就重新执行一次

[root@localhost harbor]# pwd
/harbor/harbor
[root@localhost harbor]# ./install.sh

Harbor依赖的镜像及启动服务如下：

[root@localhost harbor]# docker-compose ps 
       Name                     Command               State                                Ports                               
------------------------------------------------------------------------------------------------------------------------------
harbor-adminserver   /harbor/harbor_adminserver       Up                                                                       
harbor-db            docker-entrypoint.sh mysqld      Up      3306/tcp                                                         
harbor-jobservice    /harbor/harbor_jobservice        Up                                                                       
harbor-log           /bin/sh -c crond && rm -f  ...   Up      127.0.0.1:1514->514/tcp                                          
harbor-ui            /harbor/harbor_ui                Up                                                                       
nginx                nginx -g daemon off;             Up      0.0.0.0:443->443/tcp, 0.0.0.0:4443->4443/tcp, 0.0.0.0:80->80/tcp 
registry             /entrypoint.sh serve /etc/ ...   Up      5000/tcp

启动完成后，访问刚设置的hostname即可，默认是80端口，如果端口占用，可以去修改docker-compose.yml文件中，对应服务的端口映射

四、Harbor仓库使用

1、登录Harbor web

使用admin用户登录，密码为harbor.cfg设置的密码

2、上传镜像到Harbor仓库

我们新建一个名称为harbor的项目，设置不公开。当项目设为公开后，任何人都有此项目下镜像的读权限。命令行用户不需要docker login就可以拉取此项目下的镜像。

新建项目后，使用admin用户提交本地nginx镜像到Harbor仓库

3、docker 登录harbor

[root@localhost ~]# docker login 192.168.14.16
Username: admin
Password: 
Error response from daemon: Get https://192.168.14.16/v2/: dial tcp 192.168.14.16:443: connect: connection refused

解决方法：

查找docker。serevice所在的位置

[root@localhost ~]# find / -name docker.service -type f
/usr/lib/systemd/system/docker.service

修改配置文件，

ExecStart=/usr/bin/dockerd -H fd:// --containerd=/run/containerd/containerd.sock

修改为：ExecStart=/usr/bin/dockerd --insecure-registry=http://192.168.14.16

4、重启docker服务：

[root@localhost ~]# systemctl daemon-reload
[root@localhost ~]# systemctl restart docker

重启之后发现docker-compse已经停止，需要重新执行./install sh

[root@localhost ~]# docker-compose ps
ERROR: 
        Can't find a suitable configuration file in this directory or any
        parent. Are you in the right directory?

        Supported filenames: docker-compose.yml, docker-compose.yaml
        
[root@localhost ~]# cd /harbor/
[root@localhost harbor]# cd harbor
[root@localhost harbor]# pwd
/harbor/harbor
[root@localhost harbor]# ./install.sh

5、再次登录

[root@localhost ~]# docker login 192.168.14.16
Username: admin
Password: 
WARNING! Your password will be stored unencrypted in /root/.docker/config.json.
Configure a credential helper to remove this warning. See
https://docs.docker.com/engine/reference/commandline/login/#credentials-store

Login Succeeded

6、给现有镜像打tag

[root@localhost ~]# docker images
REPOSITORY                  TAG                 IMAGE ID            CREATED             SIZE
vmware/harbor-jobservice    v1.1.2              4ef0a7a33734        2 years ago         163MB
vmware/harbor-ui            v1.1.2              4ee8f190f366        2 years ago         183MB
vmware/harbor-adminserver   v1.1.2              cdcf1bed7eb4        2 years ago         142MB
vmware/harbor-db            v1.1.2              fcb8aa7a0640        2 years ago         329MB
vmware/registry             2.6.1-photon        0f6c96580032        2 years ago         150MB
vmware/nginx                1.11.5-patched      8ddadb143133        2 years ago         199MB
vmware/harbor-log           v1.1.2              9c46a7b5e517        2 years ago         192MB
[root@localhost ~]# docker tag vmware/nginx:1.11.5-patched 192.168.14.16/harbor/nginx:latest
[root@localhost ~]# docker images
REPOSITORY                   TAG                 IMAGE ID            CREATED             SIZE
vmware/harbor-jobservice     v1.1.2              4ef0a7a33734        2 years ago         163MB
vmware/harbor-ui             v1.1.2              4ee8f190f366        2 years ago         183MB
vmware/harbor-adminserver    v1.1.2              cdcf1bed7eb4        2 years ago         142MB
vmware/harbor-db             v1.1.2              fcb8aa7a0640        2 years ago         329MB
vmware/registry              2.6.1-photon        0f6c96580032        2 years ago         150MB
192.168.14.16/harbor/nginx   latest              8ddadb143133        2 years ago         199MB
vmware/nginx                 1.11.5-patched      8ddadb143133        2 years ago         199MB
vmware/harbor-log            v1.1.2              9c46a7b5e517        2 years ago         192MB

7、push到仓库

[root@localhost ~]# docker push 192.168.14.16/harbor/nginx:latest
The push refers to repository [192.168.14.16/harbor/nginx]
3569f62067e2: Pushed 
3f117c44afbb: Pushed 
c4a8b7411af4: Pushed 
fe4c16cbf7a4: Pushed 
latest: digest: sha256:3dce35afeadd7195877b17bf1514b9e388ed671afe428441fe5e0b02cdc26eeb size: 1160

上传成功后，登录Web Harbor，选择项目harbor，就可以查看刚刚上传的nginx镜像了

8、创建用户并分配权限

点击系统管理下的用户管理，点击创建用户，输入相关信息

将刚刚创建的用户添加到harbor项目成员中，点击项目，选择harbor项目，点击成员，点击添加成员，添加姓名选择角色

使用新建的用户将刚刚上传的nginx镜像拉取下来

先将刚刚nginx镜像删除

[root@localhost ~]# docker images
REPOSITORY                   TAG                 IMAGE ID            CREATED             SIZE
vmware/harbor-jobservice     v1.1.2              4ef0a7a33734        2 years ago         163MB
vmware/harbor-ui             v1.1.2              4ee8f190f366        2 years ago         183MB
vmware/harbor-adminserver    v1.1.2              cdcf1bed7eb4        2 years ago         142MB
vmware/harbor-db             v1.1.2              fcb8aa7a0640        2 years ago         329MB
vmware/registry              2.6.1-photon        0f6c96580032        2 years ago         150MB
192.168.14.16/harbor/nginx   latest              8ddadb143133        2 years ago         199MB
vmware/nginx                 1.11.5-patched      8ddadb143133        2 years ago         199MB
vmware/harbor-log            v1.1.2              9c46a7b5e517        2 years ago         192MB
[root@localhost ~]# docker rmi 192.168.14.16/harbor/nginx:latest
Untagged: 192.168.14.16/harbor/nginx:latest
Untagged: 192.168.14.16/harbor/nginx@sha256:3dce35afeadd7195877b17bf1514b9e388ed671afe428441fe5e0b02cdc26eeb

退出admin帐号，使用刚刚创建的用户登录

[root@localhost ~]# docker logout 192.168.14.16
Removing login credentials for 192.168.14.16
[root@localhost ~]# docker login 192.168.14.16
Username: harbor
Password: 
WARNING! Your password will be stored unencrypted in /root/.docker/config.json.
Configure a credential helper to remove this warning. See
https://docs.docker.com/engine/reference/commandline/login/#credentials-store

Login Succeeded

将harbor中的nginx镜像拉取到本地

[root@localhost ~]# docker images
REPOSITORY                  TAG                 IMAGE ID            CREATED             SIZE
vmware/harbor-jobservice    v1.1.2              4ef0a7a33734        2 years ago         163MB
vmware/harbor-ui            v1.1.2              4ee8f190f366        2 years ago         183MB
vmware/harbor-adminserver   v1.1.2              cdcf1bed7eb4        2 years ago         142MB
vmware/harbor-db            v1.1.2              fcb8aa7a0640        2 years ago         329MB
vmware/registry             2.6.1-photon        0f6c96580032        2 years ago         150MB
vmware/nginx                1.11.5-patched      8ddadb143133        2 years ago         199MB
vmware/harbor-log           v1.1.2              9c46a7b5e517        2 years ago         192MB
[root@localhost ~]# docker pull 192.168.14.16/harbor/nginx:latest
latest: Pulling from harbor/nginx
Digest: sha256:3dce35afeadd7195877b17bf1514b9e388ed671afe428441fe5e0b02cdc26eeb
Status: Downloaded newer image for 192.168.14.16/harbor/nginx:latest
[root@localhost ~]# docker images
REPOSITORY                   TAG                 IMAGE ID            CREATED             SIZE
vmware/harbor-jobservice     v1.1.2              4ef0a7a33734        2 years ago         163MB
vmware/harbor-ui             v1.1.2              4ee8f190f366        2 years ago         183MB
vmware/harbor-adminserver    v1.1.2              cdcf1bed7eb4        2 years ago         142MB
vmware/harbor-db             v1.1.2              fcb8aa7a0640        2 years ago         329MB
vmware/registry              2.6.1-photon        0f6c96580032        2 years ago         150MB
192.168.14.16/harbor/nginx   latest              8ddadb143133        2 years ago         199MB
vmware/nginx                 1.11.5-patched      8ddadb143133        2 years ago         199MB
vmware/harbor-log            v1.1.2              9c46a7b5e517        2 years ago         192MB

五、客户端push或者pull镜像

1、参考上面步骤，客户端先安装docker，然后启动docker

[root@node1 ~]# systemctl start docker

2、任意下载一个nginx

[root@node1 ~]# docker pull nginx
Using default tag: latest
latest: Pulling from library/nginx
0a4690c5d889: Pull complete 
9719afee3eb7: Pull complete 
44446b456159: Pull complete 
Digest: sha256:b4b9b3eee194703fc2fa8afa5b7510c77ae70cfba567af1376a573a967c03dbb
Status: Downloaded newer image for nginx:latest

3、登录到harbor服务器

[root@node1 ~]# docker login 192.168.14.16
Username: harbor
Password: 
WARNING! Your password will be stored unencrypted in /root/.docker/config.json.
Configure a credential helper to remove this warning. See
https://docs.docker.com/engine/reference/commandline/login/#credentials-store

Login Succeeded

4、给镜像打tag，注意格式是：仓库IP/harbor仓库名字/镜像名字

[root@node1 ~]# docker images
REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
nginx               latest              98ebf73aba75        34 hours ago        109MB
[root@node1 ~]# docker tag  nginx:latest 192.168.14.16/harbor/nginx:new
[root@node1 ~]# docker images
REPOSITORY                   TAG                 IMAGE ID            CREATED             SIZE
192.168.14.16/harbor/nginx   new                 98ebf73aba75        34 hours ago        109MB
nginx                        latest              98ebf73aba75        34 hours ago        109MB
[root@node1 ~]# docker push 192.168.14.16/harbor/nginx:new
The push refers to repository [192.168.14.16/harbor/nginx]
589561a3ffb4: Pushed 
ef7dbb0cfc81: Pushed 
d56055da3352: Pushed 
new: digest: sha256:f83b2ffd963ac911f9e638184c8d580cc1f3139d5c8c33c87c3fb90aebdebf76 size: 948

5、这里查看客户端本地镜像>删除镜像>拉取镜像>查看镜像

[root@node1 ~]# docker images
REPOSITORY                   TAG                 IMAGE ID            CREATED             SIZE
192.168.14.16/harbor/nginx   new                 98ebf73aba75        34 hours ago        109MB
nginx                        latest              98ebf73aba75        34 hours ago        109MB
[root@node1 ~]# docker rmi 192.168.14.16/harbor/nginx:new
Untagged: 192.168.14.16/harbor/nginx:new
Untagged: 192.168.14.16/harbor/nginx@sha256:f83b2ffd963ac911f9e638184c8d580cc1f3139d5c8c33c87c3fb90aebdebf76
[root@node1 ~]# docker images
REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
nginx               latest              98ebf73aba75        34 hours ago        109MB
[root@node1 ~]# docker pull 192.168.14.16/harbor/nginx:new
new: Pulling from harbor/nginx
Digest: sha256:f83b2ffd963ac911f9e638184c8d580cc1f3139d5c8c33c87c3fb90aebdebf76
Status: Downloaded newer image for 192.168.14.16/harbor/nginx:new
[root@node1 ~]# docker images
REPOSITORY                   TAG                 IMAGE ID            CREATED             SIZE
192.168.14.16/harbor/nginx   new                 98ebf73aba75        34 hours ago        109MB
nginx                        latest              98ebf73aba75        34 hours ago        109MB

6、至此，本地和客户端都能正常上传和拉取镜像

站内首发文章
友人a笔记
发布了132 篇原创文章 · 获赞 118 · 访问量 26万+
私信 关注

猜你喜欢

转载自blog.csdn.net/tladagio/article/details/96479841
今日推荐
基于大语言模型的开源知识库问答系统 MaxKB GitHub Star 数量突破 5,000 个！
美国拟限制 AI 大模型出口中国和俄罗斯
苹果将与 OpenAI 达成协议，将 ChatGPT 应用于 iPhone
openKylin 社区生态委员会第六次会议圆满召开
阿里云正式发布通义千问 2.5
Python 3.13 发布首个 Beta：实验性自由线程模式和 JIT、改进交互式解释器
Stack Overflow 拿我的代码去训练 AI 大模型，还封了我的账号
Pop!_OS 的 COSMIC 桌面完成 App Store 上架工作
《2024 年一季度互联网投融资运行情况》研究报告
报告：Django 仍然是 74% 开发者的首选
15 年前上了“FFmpeg 耻辱柱”，今天他还得谢谢咱——腾讯QQPlayer一雪前耻？
TIOBE 5 月榜单：Fortran “复活”进入 Top 10
周排行
记一下去大梅沙的准备（2018-05-26）
Spring 注解 事务
基于HTTP协议的客户端缓存
阿里云rds 备份和还原
[PHP] 几个拖慢 PHP 程序/API 运行速度的点
python 代码风格------------PEP8规则
js控制json生成菜单——自制菜单（一）
将字符串: 'k:1|k1:2|k2:3|k3:4 ' ,处理成 python 字典: {'k':1, 'k1':2, ...}
微信小程序转支付宝小程序
Qt551.窗口滚动条
每日归档
更多
2024-05-13(18)
2024-05-12(0)
2024-05-11(38)
2024-05-10(38)
2024-05-09(35)
2024-05-08(42)
2024-05-07(14)
2024-05-06(40)
2024-05-05(0)
2024-05-04(7)

代码天地 © 2018 codetd.com

境外服务器   最新电视剧2022