docker搭建Harbor仓库

业界资讯 2022-08-11 19:53:03 阅读次数: 0

搭建harbor私有镜像仓库

安装docker harbor
wget -c https://github.com/goharbor/harbor/releases/download/v2.3.5/harbor-offline-installer-v2.3.5.tgz
我的百度网盘
链接：https://pan.baidu.com/s/1eYsu5teqslfXE_SgCs_PeQ 
提取码：mq57

image-20220527140712357

解压harbor包
root@debian:~/docker# ls
harbor-offline-installer-v2.3.3.tgz
root@debian:~/docker# tar -zxf harbor-offline-installer-v2.3.3.tgz -C /usr/local/

image-20220527141033136

修改harbor配置文件
root@debian:/usr/local# cd harbor/
root@debian:/usr/local/harbor# ls
common.sh  harbor.v2.3.3.tar.gz  harbor.yml.tmpl  install.sh  LICENSE  prepare
root@debian:/usr/local/harbor# cp harbor.yml.tmpl harbor.yml

image-20220527141158893

配置本地解析

vim /etc/hosts

127.0.0.1       localhost
196.196.196.11  debian

# The following lines are desirable for IPv6 capable hosts
::1     localhost ip6-localhost ip6-loopback
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
196.196.196.11 harbor.example.com

image-20220527141359523

修改harbor.yml配置文件

我是用的这个 visual这个工具修改的

vim /usr/local/harbor/harbor.yml

第一处
hostname: harbor.example.com  196.196.196.11   #主机名修改为域名（也可以是ip）

image-20220527142332285

第二处
#注释掉以下没注释的
# https related config
# https:
  # https port for harbor, default is 443     #因为未做https，所以将https全部注释
  # port: 443
  # The path of cert and key files for nginx
  # certificate: /your/certificate/path
  # private_key: /your/private/key/path

image-20220527142735114

密码
harbor_admin_password: Harbor12345              #web界面登录密码

image-20220527142812277

启动脚本

//执行脚本
[root@harbor harbor]# ./install.sh 
[Step 5]: starting Harbor ...
Creating network "harbor_harbor" with the default driver
Creating harbor-log ... done
Creating redis         ... done
Creating harbor-portal ... done
Creating registry      ... done
Creating harbor-db     ... done
Creating registryctl   ... done
Creating harbor-core   ... done
Creating nginx             ... done
Creating harbor-jobservice ... done
✔ ----Harbor has been installed and started successfully.----		//安装成功

image-20220527143304405

启动报错

显示端口被占用，去查看端口或者改端口

image-20220527143353939

启动成功
image-20220527153601191

查看镜像

root@debian:/usr/local/harbor# docker images
REPOSITORY                      TAG       IMAGE ID       CREATED        SIZE
goharbor/harbor-exporter        v2.3.3    a75350aa1e3d   8 months ago   81.1MB
goharbor/chartmuseum-photon     v2.3.3    24b85ee1f3ff   8 months ago   179MB
goharbor/redis-photon           v2.3.3    5b8e952b8f45   8 months ago   165MB
goharbor/trivy-adapter-photon   v2.3.3    271525f11619   8 months ago   130MB
goharbor/notary-server-photon   v2.3.3    bea6e3465892   8 months ago   110MB
goharbor/notary-signer-photon   v2.3.3    c5116fef5e4c   8 months ago   108MB
goharbor/harbor-registryctl     v2.3.3    ffea0a2c3674   8 months ago   133MB
goharbor/registry-photon        v2.3.3    08b0e6fe666e   8 months ago   81.9MB
goharbor/nginx-photon           v2.3.3    43487013ae1e   8 months ago   45MB
goharbor/harbor-log             v2.3.3    77b2d1cb3ab2   8 months ago   168MB
goharbor/harbor-jobservice      v2.3.3    cb3b2c9d8f57   8 months ago   211MB
goharbor/harbor-core            v2.3.3    f065d61635a8   8 months ago   193MB
goharbor/harbor-portal          v2.3.3    eeb24c004c47   8 months ago   58.2MB
goharbor/harbor-db              v2.3.3    7f32a2a21263   8 months ago   237MB
goharbor/prepare                v2.3.3    9f7ce0f16ecc   8 months ago   262MB

image-20220527153638687

查看运行的 容器
root@debian:/usr/local/harbor# docker ps
CONTAINER ID   IMAGE                                COMMAND                  CREATED             STATUS                       PORTS                                   NAMES
34143c398fff   goharbor/nginx-photon:v2.3.3         "nginx -g 'daemon of…"   About an hour ago   Up About an hour (healthy)   0.0.0.0:80->8080/tcp, :::80->8080/tcp   nginx
41c5b9d90528   goharbor/harbor-jobservice:v2.3.3    "/harbor/entrypoint.…"   About an hour ago   Up About an hour (healthy)                                           harbor-jobservice
190899f26070   goharbor/harbor-core:v2.3.3          "/harbor/entrypoint.…"   About an hour ago   Up About an hour (healthy)                                           harbor-core
0be822fafc7b   goharbor/harbor-registryctl:v2.3.3   "/home/harbor/start.…"   About an hour ago   Up About an hour (healthy)                                           registryctl
f205740cd5f3   goharbor/harbor-portal:v2.3.3        "nginx -g 'daemon of…"   About an hour ago   Up About an hour (healthy)                                           harbor-portal
f2e42ca499c2   goharbor/registry-photon:v2.3.3      "/home/harbor/entryp…"   About an hour ago   Up About an hour (healthy)                                           registry
9559788d6d05   goharbor/redis-photon:v2.3.3         "redis-server /etc/r…"   About an hour ago   Up About an hour (healthy)                                           redis
17ed48abfc39   goharbor/harbor-db:v2.3.3            "/docker-entrypoint.…"   About an hour ago   Up About an hour (healthy)                                           harbor-db
4c206b580e82   goharbor/harbor-log:v2.3.3           "/bin/sh -c /usr/loc…"   About an hour ago   Up About an hour (healthy)   127.0.0.1:1514->10514/tcp               harbor-log

image-20220527153902929

查看端口占用
root@debian:/usr/local/harbor# ss -antl
State      Recv-Q     Send-Q              Local Address:Port         Peer Address:Port    
LISTEN     0          128                     127.0.0.1:6011              0.0.0.0:*       
LISTEN     0          128                     127.0.0.1:1514              0.0.0.0:*       
LISTEN     0          128                       0.0.0.0:80                0.0.0.0:*       
LISTEN     0          128                       0.0.0.0:22                0.0.0.0:*       
LISTEN     0          5                       127.0.0.1:631               0.0.0.0:*       
LISTEN     0          128                         [::1]:6011                 [::]:*       
LISTEN     0          50             [::ffff:127.0.0.1]:9600                    *:*       
LISTEN     0          128                          [::]:80                   [::]:*       
LISTEN     0          128                             *:9200                    *:*       
LISTEN     0          128                             *:9300                    *:*       
LISTEN     0          128                          [::]:22                   [::]:*       
LISTEN     0          5                           [::1]:631                  [::]:*

image-20220527154023613

使用IP登录管理Harbor

账户：admin
密码：Harbor12345

image-20220527154131894

登陆之后页面
image-20220527154223327

配置https方式访问

[root@kub-k8s-master ~]# mkdir -pv /data/cert/
[root@kub-k8s-master ~]# openssl genrsa -out /data/cert/server.key 2048
Generating RSA private key, 2048 bit long modulus
............................................+++
............+++
e is 65537 (0x10001)
[root@kub-k8s-master ~]# openssl req -x509 -new -nodes -key /data/cert/server.key -subj "/CN=192.168.246.166" -days 3650 -out /data/cert/server.crt
[root@kub-k8s-master ~]# ll -a /data/cert
[root@kub-k8s-master ~]# cd harbor
[root@kub-k8s-master harbor]# vim harbor.yml   #编辑如下

image-20220527170814236

重启
重启
[root@kub-k8s-master harbor]# ./prepare 
prepare base dir is set to /root/harbor
Clearing the configuration file: /config/log/logrotate.conf
Clearing the configuration file: /config/nginx/nginx.conf
Clearing the configuration file: /config/core/env
Clearing the configuration file: /config/core/app.conf
Clearing the configuration file: /config/registry/config.yml
Clearing the configuration file: /config/registry/root.crt
Clearing the configuration file: /config/registryctl/env
Clearing the configuration file: /config/registryctl/config.yml
Clearing the configuration file: /config/db/env
Clearing the configuration file: /config/jobservice/env
Clearing the configuration file: /config/jobservice/config.yml
Generated configuration file: /config/log/logrotate.conf
Generated configuration file: /config/nginx/nginx.conf
Generated configuration file: /config/core/env
Generated configuration file: /config/core/app.conf
Generated configuration file: /config/registry/config.yml
Generated configuration file: /config/registryctl/env
Generated configuration file: /config/db/env
Generated configuration file: /config/jobservice/env
Generated configuration file: /config/jobservice/config.yml
loaded secret from file: /secret/keys/secretkey
Generated configuration file: /compose_location/docker-compose.yml
Clean up the input dir

如果出错，重启Docker服务，再次执行./prepare 
[root@kub-k8s-master harbor]# docker-compose down
Stopping nginx             ... done
Stopping harbor-portal     ... done
Stopping harbor-jobservice ... done
Stopping harbor-core       ... done
Stopping harbor-db         ... done
Stopping redis             ... done
Stopping registryctl       ... done
Stopping registry          ... done
Stopping harbor-log        ... done
Removing nginx             ... done
Removing harbor-portal     ... done
Removing harbor-jobservice ... done
Removing harbor-core       ... done
Removing harbor-db         ... done
Removing redis             ... done
Removing registryctl       ... done
Removing registry          ... done
Removing harbor-log        ... done
Removing network harbor_harbor
[root@kub-k8s-master harbor]# docker-compose up -d  #放后台

image-20220527170909905

查看
image-20220527170934197

访问测试

image-20220527171020894

image-20220527171158823

配置push镜像配置
[root@harbor harbor]# vim /etc/docker/daemon.json
[root@harbor harbor]# cat /etc/docker/daemon.json
{
    
    
        "dns": ["8.8.8.8","8.8.4.4"],
        "insecure-registries": [""https://harbor.example.com","https://196.196.196.11""]
}

image-20220527172221565

重启服务 systemctl restart docker 重启服务以后需要再跑一遍脚本，80端口才会启动
登录harbor仓库
[root@harbor harbor]# docker login 196.196.196.11


我这里报错了，遇到下面报错

image-20220527172905565

解决账号登陆报错

默认时，client 与 Registry 的交互是通过 https 通信的。在 install Registry 时，若未配置任何tls 相关的 key 和 crt 文件，https 访问必然失败。使用 "–insecure-registry "可以指定 client 与 Registry 以 http 的方式进行通信。
修改 /lib/systemd/system/docker.service 文件里的 ExecStart= 行：
vim /lib/systemd/system/docker.service
添加这个
ExecStart=/usr/bin/dockerd -H fd:// --insecure-registry=196.196.196.11

image-20220527175822636

重载、重启 docker 服务，验证配置是否生效
python@job:/lib/systemd/system$ systemctl daemon-reload
python@job:/lib/systemd/system$ systemctl restart docker
python@job:/lib/systemd/system$ docker info
————————————————

可以看到

Insecure Registries:
 196.196.196.11
 127.0.0.0/8

image-20220527180028028

登陆成功
root@debian:/usr/local/harbor# docker login 196.196.196.11
Username: admin
Password: 
WARNING! Your password will be stored unencrypted in /root/.docker/config.json.
Configure a credential helper to remove this warning. See
https://docs.docker.com/engine/reference/commandline/login/#credentials-store

Login Succeeded

创建harbor账号

image-20220527174147248

image-20220527174327052

账号：aike
密码：Aike@52100

项目授权

image-20220527174454675

再次登录harbor仓库
推送前创建一个项目

image-20220527154341600

image-20220527155019271

重新打包镜像并推送

docker pull daocloud.io/library/nginx

root@debian:/usr/local/harbor# docker images | grep nginx
goharbor/nginx-photon           v2.3.3    43487013ae1e   8 months ago    45MB
nginx/ceshi                     v2.3.3    43487013ae1e   8 months ago    45MB
daocloud.io/library/nginx       latest    298ec0e28760   15 months ago   133MB

root@debian:/usr/local/harbor# docker tag daocloud.io/library/nginx:latest 196.196.196.11/bimuyu/nginx

image-20220527182542697

推送镜像

The push refers to repository [196.196.196.11/bimuyu/nginx]
d9eb91d66e2a: Pushed 
ae1f545e4c08: Pushed 
c20672db3628: Pushed 
4cbb728cd302: Pushed 
9eb82f04c782: Pushed 
latest: digest: sha256:1a53eb723d17523512bd25c27299046cfa034cce309f4ed330c943a304513f59 size: 1362

image-20220527182653208

效果

inx


[外链图片转存中...(img-3Tf9U9Ee-1659600781403)]

### 推送镜像

```shell
The push refers to repository [196.196.196.11/bimuyu/nginx]
d9eb91d66e2a: Pushed 
ae1f545e4c08: Pushed 
c20672db3628: Pushed 
4cbb728cd302: Pushed 
9eb82f04c782: Pushed 
latest: digest: sha256:1a53eb723d17523512bd25c27299046cfa034cce309f4ed330c943a304513f59 size: 1362

[外链图片转存中…(img-h9UAdwQo-1659600781403)]

效果

image-20220527182710250

猜你喜欢

转载自blog.csdn.net/tianmingqing0806/article/details/126161627
今日推荐
TIOBE 5 月榜单：Fortran “复活”进入 Top 10
GCC 14.1 发布
面壁智能发布 Eurux-8x22B 开源大模型 —— 堪称「理科状元」
开源日报 | 谷歌扶持鸿蒙上位；开源Rabbit R1；Docker加持的安卓手机；微软的焦虑和野心；海尔电器把开放平台关了
中国码农的“35岁魔咒”
蘭雅 CorelDRAW 插件 2024.5.1 国际劳动节版，免费下载
Arc Browser for Windows 1.0 正式 GA
90后程序员开发视频搬运软件、不到一年获利超 700 万，结局很刑！
周排行
Java自定义时间格式
同步整形电路
在开发中最最最常用的字符串的属性大集合
Linux 查看端口占用并杀掉
Java基础四：ArrayList
多线程之死锁就是这么简单
mysql 基础命令集
awk 命令详解
Centos6.3编译安装nginx+php步骤
OCR （Optical Character Recognition，光学字符识别）
每日归档
更多
2024-05-08(42)
2024-05-07(14)
2024-05-06(40)
2024-05-05(0)
2024-05-04(7)
2024-05-03(19)
2024-05-02(0)
2024-05-01(4)
2024-04-30(1)
2024-04-29(40)

代码天地 © 2018 codetd.com

境外服务器   最新电视剧2022