VMware Harbor部署

上篇瞭解了vmware harbor的基本架構，終究還是要用起來的，所以本篇就瞭解一下怎麼部署harbor。

 

系統

    OS：Ubuntu 16.04.3 LTS

    Kernel：ubuntu16.04-2 4.4.0-87-generic

下載docker-ce

我跟她https://download.docker.com/linux/ubuntu/dists/xenial/pool/stable/amd64/docker-ce_18.03.0~ce-0~ubuntu_amd64.deb

安裝docker-ce

dpkg -i docker-ce_18.03.0_ce-0_ubuntu_amd64.deb

檢查docker-ce

docker info

依賴安裝

apt-get install python2.7  python-minimal

docker-compose安裝

 

curl -L https://github.com/docker/compose/releases/download/1.19.0/docker-compose-`uname -s`-`uname -m` -o /usr/local/bin/docker-compose
chmod +x /usr/local/bin/docker-compose

     ps：不要apt-get install docker-compose安裝，默認倉庫中的docker-compose版本太低

docker-compose自動補全插件安裝

curl -L https://raw.githubusercontent.com/docker/compose/1.19.0/contrib/completion/bash/docker-compose -o /etc/bash_completion.d/docker-compose

harbor離線包下載

cd  /opt/programs
wget https://storage.googleapis.com/harbor-releases/release-1.5.0/harbor-offline-installer-v1.5.1.tgz
=========================下載完解壓========================================
tar zxvf harbor-offline-installer-v1.5.1.tgz

工作目錄設定

/opt/programs/harbor

調整harbor.cfg配置

    文件在/opt/programs/harbor/harbor.cfg

_version = 1.5.0
hostname = 192.168.1.6
ui_url_protocol = http
max_job_workers = 5
customize_crt = on
ssl_cert = /data/cert/server.crt
ssl_cert_key = /data/cert/server.key
secretkey_path = /data
admiral_url = NA
log_rotate_count = 5
log_rotate_size = 200M
http_proxy =
https_proxy =
no_proxy = 127.0.0.1,172.31.68.243,ui
email_identity = 
email_server = smtp.mydomain.com
email_server_port = 25
email_username = [email protected]
email_password = abc
email_from = admin <[email protected]>
email_ssl = false
email_insecure = false
harbor_admin_password = Harbor12345
auth_mode = db_auth
ldap_url = ldaps://ldap.mydomain.com
ldap_basedn = ou=people,dc=mydomain,dc=com
ldap_uid = uid 
ldap_scope = 2 
ldap_timeout = 5
ldap_verify_cert = true
ldap_group_basedn = ou=group,dc=mydomain,dc=com
ldap_group_filter = objectclass=group
ldap_group_gid = cn
ldap_group_scope = 2
self_registration = on
token_expiration = 30
project_creation_restriction = everyone
db_host = mysql
db_password = root123
db_port = 3306
db_user = root
redis_url = redis:6379
clair_db_host = postgres
clair_db_password = password
clair_db_port = 5432
clair_db_username = postgres
clair_db = postgres
uaa_endpoint = uaa.mydomain.org
uaa_clientid = id
uaa_clientsecret = secret
uaa_verify_cert = true
uaa_ca_cert = /path/to/ca.pem
registry_storage_provider_name = filesystem
registry_storage_provider_config =

安裝harbor

./install.sh

查看harbor image

docker image ls

查看harbor container

docker container ls

docker-compose查看

docker-compose ps

登錄harbor

http://192.168.1.6

    ps：默認用戶名密碼是admin/Harbor12345

管理界面

       ps：怎麼使用就不詳細描述了，下面講解一下怎麼push鏡像上去，換一臺機ubuntu機器執行以下命令(ubuntu16.04-2)

調整docker默認配置

#/etc/docker/daemon.json
{
  "registry-mirrors": ["http://aa2fd190.m.daocloud.io"],
  "insecure-registries":["http://172.31.68.241"]
}

調整docker啓動配置文件

#/lib/systemd/system/docker.service
# 在service模塊下調整ExecStart項
[Service]
Type=notify
ExecStart=/usr/bin/dockerd -H tcp://0.0.0.0:2375 -H unix:///var/run/docker.sock

配置生效

systemctl daemon-reload
systemctl restart docker.service

查看docker狀態

systemctl status docker.service

CLI登錄harbor

docker login 192.168.1.6

[email protected]:~#docker login 192.168.1.6
Username (admin): admin
Password: 
Login Succeeded
[email protected]:~#

image打tag

    先檢查當前主機上的image

    針對hello-world打tag

        ps：裏面的ip換成192.168.1.6(實在是沒圖了)

docker tag hello-world:latest 172.31.68.241/library/hello-world:latest

push鏡像

docker push 172.31.68.241/library/hello-world:latest

pull鏡像

    調整docker配置文件

#/etc/default/docker
# 調整DOCKER_OPTS如下
DOCKER_OPTS="--registry-mirror=http://172.31.68.241 --insecure-registry 172.31.68.241"

    重啓docker

systemctl daemon-reload
systemctl restart docker.service

    pull鏡像

docker pull 172.31.68.241/library/hello-world