Harbor安装(docker-compose) -- 企业级Registry仓库

根据Harbor官方描述:

Harbor是一个用于存储和分发Docker镜像的企业级Registry服务器，通过添加一些企业必需的功能特性，例如安全、标识和管理等，扩展了开源Docker Distribution。作为一个企业级私有Registry服务器，Harbor提供了更好的性能和安全。提升用户使用Registry构建和运行环境传输镜像的效率。Harbor支持安装在多个Registry节点的镜像资源复制，镜像全部保存在私有Registry中， 确保数据和知识产权在公司内部网络中管控。另外，Harbor也提供了高级的安全特性，诸如用户管理，访问控制和活动审计等。

部署环境：

centos-7.4   192.168.55.34

Docker version 1.13.

docker-compose version 1.21.

harbor-offline-installer-v1.5.0.tgz

安装docker-compose

方式1:

curl -L https://github.com/docker/compose/releases/download/1.9.0/docker-compose-`uname -s`-`uname -m` > /usr/local/bin/docker-compose

chmod +x /usr/local/bin/docker-compose

方式2:

wget https://bootstrap.pypa.io/get-pip.py

python get-pip.py

pip install docker-compose

安装docker

yum install docker -y

vim /etc/systemd/system/docker.service

-----------------------------------------------------

[Unit]

Description=Docker Application Container Engine

Documentation=https://docs.docker.com

After=network-online.target firewalld.service

Wants=network-online.target

[Service]

Type=notify

ExecStart=/usr/bin/dockerd --insecure-registry=192.168.55.34

ExecReload=/bin/kill -s HUP $MAINPID

LimitNOFILE=infinity

LimitNPROC=infinity

LimitCORE=infinity

TimeoutStartSec=

Delegate=yes

KillMode=process

Restart=on-failure

StartLimitBurst=

StartLimitInterval=60s

[Install]

WantedBy=multi-user.target

-----------------------------------------------------

说明： docker 需要上传 push 镜像，需要在 docker 中配置 --insecure-registry

docker加速

curl -sSL https://get.daocloud.io/daotools/set_mirror.sh | sh -s http://db411c61.m.daocloud.io #会生成 /etc/docker/daemon.json 文件

启动docker

systemctl daemon-reload

systemctl enable docker

systemctl start docker

systemctl status docker

安装harbor

harbor下载地址:

http://harbor.orientsoft.cn/

tar -xf harbor-offline-installer-v1.5.0.tgz

mv harbor /opt/

cd /opt/harbor/

vim harbor.cfg

-----------------------------------------------------

hostname = 192.168.55.34

#这里只是简单的测试，所以只编辑这一行，其他的默认不做修改；当然也可以根据你自己的实际情况做修改！

-----------------------------------------------------

执行安装脚本：

./instsll.sh

说明：安装报错 找不到docker-proxy 、 docker-runc

执行 ln -s /usr/libexec/docker/docker-runc-current /usr/bin/docker-runc

ln -s /usr/libexec/docker/docker-proxy-current /usr/bin/docker-proxy

Harbor容器的stop与start：

cd /opt/harbor/

docker-compose stop/start

到此便安装完成了，直接打开浏览器登陆即可：

默认用户密码是：admin/Harbor12345  #密码 /opt/harbor/harbor.cfg harbor_admin_password参数

harbor上传镜像

[root@docker2 /opt/tools/harbor ::&&]#docker login -u admin -p Harbor12345 http://192.168.159.34/v2  #账号密码： admin/Harbor12345

Username: admin

Password:

Login Succeeded

[root@docker2 /opt/tools/harbor ::&&]#docker images

REPOSITORY                    TAG                 IMAGE ID            CREATED             SIZE

docker.io/centos              latest              49f7960eb7e4         weeks ago          MB

docker tag docker.io/centos 192.168.55.34/linux/centos6:1.0   #打个镜像tag

docker push 192.168.55.34/linux/centos6:1.0   #上传镜像

说明： 格式为: userip/项目名/image名字:版本号   （项目名需要在webui 提前建好）

harbor修改端口号

原文地址: https://www.cnblogs.com/huangjc/p/6420355.html

、修改docker-compose.yml文件映射为1180端口：

cat /opt/harbor/docker-compose.yml

-----------------------------------------------------------------

version: ''

services:

  log:

    image: vmware/harbor-log:v1.5.0

    container_name: harbor-log

    restart: always

    volumes:

      - /var/log/harbor/:/var/log/docker/:z

      - ./common/config/log/:/etc/logrotate.d/:z

    ports:

      - 127.0.0.1::

    networks:

      - harbor

  registry:

    image: vmware/registry-photon:v2.6.2-v1.5.0

    container_name: registry

    restart: always

    volumes:

      - /data/registry:/storage:z

      - ./common/config/registry/:/etc/registry/:z

    networks:

      - harbor

    environment:

      - GODEBUG=netdns=cgo

    command:

      ["serve", "/etc/registry/config.yml"]

    depends_on:

      - log

    logging:

      driver: "syslog"

      options:

        syslog-address: "tcp://127.0.0.1:1514"

        tag: "registry"

  mysql:

    image: vmware/harbor-db:v1.5.0

    container_name: harbor-db

    restart: always

    volumes:

      - /data/database:/var/lib/mysql:z

    networks:

      - harbor

    env_file:

      - ./common/config/db/env

    depends_on:

      - log

    logging:

      driver: "syslog"

      options:

        syslog-address: "tcp://127.0.0.1:1514"

        tag: "mysql"

  adminserver:

    image: vmware/harbor-adminserver:v1.5.0

    container_name: harbor-adminserver

    env_file:

      - ./common/config/adminserver/env

    restart: always

    volumes:

      - /data/config/:/etc/adminserver/config/:z

      - /data/secretkey:/etc/adminserver/key:z

      - /data/:/data/:z

    networks:

      - harbor

    depends_on:

      - log

    logging:

      driver: "syslog"

      options:

        syslog-address: "tcp://127.0.0.1:1514"

        tag: "adminserver"

  ui:

    image: vmware/harbor-ui:v1.5.0

    container_name: harbor-ui

    env_file:

      - ./common/config/ui/env

    restart: always

    volumes:

      - ./common/config/ui/app.conf:/etc/ui/app.conf:z

      - ./common/config/ui/private_key.pem:/etc/ui/private_key.pem:z

      - ./common/config/ui/certificates/:/etc/ui/certificates/:z

      - /data/secretkey:/etc/ui/key:z

      - /data/ca_download/:/etc/ui/ca/:z

      - /data/psc/:/etc/ui/token/:z

    networks:

      - harbor

    depends_on:

      - log

      - adminserver

      - registry

    logging:

      driver: "syslog"

      options:

        syslog-address: "tcp://127.0.0.1:1514"

        tag: "ui"

  jobservice:

    image: vmware/harbor-jobservice:v1.5.0

    container_name: harbor-jobservice

    env_file:

      - ./common/config/jobservice/env

    restart: always

    volumes:

      - /data/job_logs:/var/log/jobs:z

      - ./common/config/jobservice/config.yml:/etc/jobservice/config.yml:z

    networks:

      - harbor

    depends_on:

      - redis

      - ui

      - adminserver

    logging:

      driver: "syslog"

      options:

        syslog-address: "tcp://127.0.0.1:1514"

        tag: "jobservice"

  redis:

    image: vmware/redis-photon:v1.5.0

    container_name: redis

    restart: always

    volumes:

      - /data/redis:/data

    networks:

      - harbor

    depends_on:

      - log

    logging:

      driver: "syslog"

      options:

        syslog-address: "tcp://127.0.0.1:1514"

        tag: "redis"

  proxy:

    image: vmware/nginx-photon:v1.5.0

    container_name: nginx

    restart: always

    volumes:

      - ./common/config/nginx:/etc/nginx:z

    networks:

      - harbor

    ports:

      - 1180:80

      - :

      - :

    depends_on:

      - mysql

      - registry

      - ui

      - log

    logging:

      driver: "syslog"

      options:

        syslog-address: "tcp://127.0.0.1:1514"

        tag: "proxy"

networks:

  harbor:

    external: false

------------------------------------------------------------------

、修改common/templates/registry/config.yml文件加入1180端口：

cat /opt/harbor/common/templates/registry/config.yml

------------------------------------------------------------------

version: 0.1

log:

  level: info

  fields:

    service: registry

storage:

  cache:

    layerinfo: inmemory

  $storage_provider_info

  maintenance:

    uploadpurging:

      enabled: false

  delete:

    enabled: true

http:

  addr: :

  secret: placeholder

  debug:

    addr: localhost:

auth:

  token:

    issuer: harbor-token-issuer

    realm: $public_url:1180/service/token

    rootcertbundle: /etc/registry/root.crt

    service: harbor-registry

notifications:

  endpoints:

  - name: harbor

    disabled: false

    url: $ui_url/service/notifications

    timeout: 3000ms

    threshold:

    backoff: 1s

------------------------------------------------------------------

、停止harbor，重新启动并生成配置文件：

#docker-compose stop

# ./install.sh

、修改docker启动文件，设置信任的主机与端口：

#vim /etc/systemd/system/docker.service  修改如下一行

ExecStart=/usr/bin/dockerd --insecure-registry=192.168.55.34:1180

、重新启动docker：

systemctl daemon-reload

systemctl restart docker.service

. 最后，测试验证：

# docker login 192.168.55.34:

Username: admin

Password: Harbor12345

Login Succeeded

巴特西

Harbor安装(docker-compose) -- 企业级Registry仓库

根据Harbor官方描述:

部署环境：

安装docker-compose

安装docker

安装harbor

harbor上传镜像

harbor修改端口号

最新文章

热门文章