安装搭建私有仓库Harbor

1.  Harbor介绍：Harbor是VMware公司开源的企业级DockerRegistry项目，其目标是帮助用户迅速搭建一个企业级的Docker registry服务。它以Docker公司开源的registry为基础，提供了管理UI，基于角色的访问控制(Role Based Access Control)，AD/LDAP集成、以及审计日志(Auditlogging) 等企业用户需求的功能，同时还原生支持中文。

2.  安装搭建Harbor：

        1>.  安装docker的编排工具docker compose ，如果没有安装docker也要安装docker-ce：

##方式一：
[root@centos7 ~]#curl -L https://get.daocloud.io/docker/compose/releases/download/1.25.1/docker-compose- `uname -s`-`uname -m` -o /usr/local/bin/docker-compose
 
[root@centos7 ~]# chmod +x /usr/local/bin/docker-compose
 
##方式二：
##配置扩展源
[root@centos7 ~]# wget -O /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-7.repo
 
##安装docker-compose
[root@centos7 ~]# yum install http://rpmfind.net/linux/epel/7/x86_64/Packages/d/docker-compose-1.18.0-4.el7.noarch.rpm
 
##查看docker-compose版本
[root@centos7 harbor]# docker-compose -v
docker-compose version 1.25.1, build a82fef07

        2>.  下载Harbor安装包：添加一块新硬盘格式化后挂载在/harbordata

# 使用ext4文件系统格式化sdb磁盘的sdb1分区
[root@centos7 ~]# mkfs.ext4 /dev/sdb1 
 
# 创建挂载目录
[root@centos7 ~]# mkdir /harbordata
 
# 将sdb1分区挂载到/harbordata上
[root@centos7 ~]# mount /dev/sdb1 /harbordata/
 
# 下载Harbor安装包
[root@centos7 ~]# wget https://storage.googleapis.com/harbor-releases/release- 1.7.0/harbor-offline-installer-v1.7.1.tgz
 
# 解压安装包到指定目录/harbordata/
[root@centos7 ~]# tar -C /harbordata/ -xvf harbor-offline-installer-v1.7.1.tgz

        3>.  修改harbor.cfg配置文件：

[root@centos7 harbor]# cd /harbordata/harbor/
 
[root@centos7 harbor]# vim harbor.cfg
 
_version = 1.7.0
hostname = harbor_test
ui_url_protocol = http
max_job_workers = 1
customize_crt = on
ssl_cert = /data/cert/server.crt
ssl_cert_key = /data/cert/server.key
secretkey_path = /data
log_rotate_count = 50
log_rotate_size = 200M
http_proxy =
https_proxy =
no_proxy = 127.0.0.1,localhost,core,registry
email_identity = 
email_server = smtp.mydomain.com
email_server_port = 25
email_username = sample_admin@mydomain.com
email_password = abc
email_from = admin <sample_admin@mydomain.com>
email_ssl = false
email_insecure = false
harbor_admin_password = Harbor12345
ldap_url = ldaps://ldap.mydomain.com
ldap_basedn = ou=people,dc=mydomain,dc=com
ldap_uid = uid 
LDAP_SCOPE_SUBTREE
ldap_scope = 2 
ldap_timeout = 5
ldap_verify_cert = true
ldap_group_basedn = ou=group,dc=mydomain,dc=com
ldap_group_filter = objectclass=group
ldap_group_gid = cn
ldap_group_scope = 2
self_registration = on
token_expiration = 30
project_creation_restriction = everyone
db_host = postgresql
db_password = root123
db_port = 5432
db_user = postgres
redis_host = redis
redis_port = 6379
redis_password = 
redis_db_index = 1,2,3
clair_db_password = root123
clair_db_username = postgres
clair_updaters_interval = 12
uaa_endpoint = uaa.mydomain.org
uaa_clientid = id
uaa_clientsecret = secret
uaa_verify_cert = true
uaa_ca_cert = /path/to/ca.pem
registry_storage_provider_name = filesystem
registry_storage_provider_config =
registry_custom_ca_bundle = 

[root@centos7 harbor]# ./install.sh

[root@centos7 harbor]# cat /etc/docker/daemon.json 
{
  "registry-mirrors": ["https://registry.docker-cn.com"],
  "insecure-registries": ["192.168.188.223:80"]
}
 
[root@centos7 harbor]# systemctl daemon-reload
 
[root@centos7 harbor]# systemctl restart docker
 
[root@centos7 harbor]# docker-compose up -d
 
[root@centos7 harbor]# cat /etc/hosts
127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
192.168.188.223  harbor_test    #添加解析

[root@centos7 harbor]# docker tag busybox:latest 192.168.188.223:80/test/busybox:latest

[root@centos7 harbor]# docker login 192.168.188.223:80
Authenticating with existing credentials...
WARNING! Your password will be stored unencrypted in /root/.docker/config.json.
Configure a credential helper to remove this warning. See
https://docs.docker.com/engine/reference/commandline/login/#credentials-store
 
Login Succeeded
[root@centos7 harbor]# 
 
也可以使用一些选项登录：
-u：指定用户名
-p：指定密码

[root@centos7 harbor]# docker push 192.168.188.223:80/test/busybox:latest 
The push refers to repository [192.168.188.223:80/test/busybox]
01fd6df81c8e: Pushed 
latest: digest: sha256:62ffc2ed7554e4c6d360bce40bbcf196573dd27c4ce080641a2c59867e732dee size: 527
[root@centos7 harbor]# 

# 暂停暂停harbor服务
[root@localhost harbor]# docker-compose pause
 
# 取消暂停harbor服务
[root@localhost harbor]# docker-compose unpause
 
# 关闭harbor服务
[root@localhost harbor]# docker-compose stop
 
# 开启harbor服务
[root@localhost harbor]# docker-compose start