微信公众号搜"智元新知"关注
微信扫一扫可直接关注哦!

harbor仓库部署

harbor仓库部署

目录

Harbor简介

Harbor是由VMWare在Docker Registry的基础之上进行了二次封装,加进去了很多额外程序,而且提供了一个非常漂亮的web界面。

‎Project Harbor 是一个开源的可信云原生注册表项目,用于存储、签名和扫描上下文。‎

‎Harbor 通过添加用户通常需要的功能(如安全性、身份和管理)来扩展开源 Docker 分发版。‎

‎Harbor 支持高级功能,如用户管理、访问控制、活动监控和实例间复制‎.

Harbor的功能

‎羽毛:‎

  • ‎多租户内容签名和验证‎
  • ‎安全性和漏洞分析‎
  • ‎审核日志记录‎
  • ‎身份集成和基于角色的访问控制‎
  • ‎实例之间的映像复制‎
  • ‎可扩展的 API 和图形用户界面‎
  • ‎国际化(现为英文和中文)‎

Docker compose

Harbor在物理机上部署是非常难的,而为了简化Harbor的应用,Harbor官方直接把Harbor做成了在容器中运行的应用,而且这个容器在Harbor中依赖类似redisMysqL、pgsql等很多存储系统,所以它需要编排很多容器协同起来工作,因此VMWare Harbor在部署和使用时,需要借助于Docker的单机编排工具(Docker compose)来实现。

‎Compose 是用于定义和运行多容器 Docker 应用程序的工具。使用 Compose,您可以使用 YAML 文件来配置应用程序的服务。然后,使用单个命令,从配置中创建并启动所有服务。‎

Docker Compose官方文档

Harbor官方文档

部署条件

需要安装docker,有docker-compose命令

安装docker

[root@localhost ~]# cd /etc/yum.repos.d/
[root@localhost yum.repos.d]# wget https://mirrors.tuna.tsinghua.edu.cn/docker-ce/linux/centos/docker-ce.repo
[root@localhost yum.repos.d]# sed -i 's@https://download.docker.com@https://mirrors.tuna.tsinghua.edu.cn/docker-ce@g' docker-ce.repo
[root@localhost yum.repos.d]# dnf -y install docker-ce

配置镜像加速器

[root@localhost ~]# sudo mkdir -p /etc/docker
[root@localhost ~]# sudo tee /etc/docker/daemon.json <<-'EOF'
> {
>   "registry-mirrors": ["https://w673ojdv.mirror.aliyuncs.com"]
> }
> EOF
{
  "registry-mirrors": ["https://w673ojdv.mirror.aliyuncs.com"]
}
[root@localhost ~]# sudo systemctl daemon-reload
[root@localhost ~]# sudo systemctl restart docker
[root@localhost ~]# systemctl enable docker
Created symlink /etc/systemd/system/multi-user.target.wants/docker.service → /usr/lib/systemd/system/docker.service.

安装docker-compose

//修改名字
[root@harbor ~]# hostnamectl set-hostname harbor.example.com
[root@harbor ~]# bash
[root@harbor ~]# hostname
harbor.example.com

//安装docker-compose命令
[root@harbor ~]# ls -a
.  ..  .bash_history  .bash_logout  .bash_profile  .bashrc  .config  .cshrc  .tcshrc  .viminfo  .wget-hsts  anaconda-ks.cfg
[root@harbor ~]# DOCKER_CONfig=${DOCKER_CONfig:-$HOME/.docker}	//创建一个.docker目录
[root@harbor ~]# mkdir -p $DOCKER_CONfig/cli-plugins		//创建一个cli-plugins目录
[root@harbor ~]# ls -a
.  ..  .bash_history  .bash_logout  .bash_profile  .bashrc  .config  .cshrc  .docker  .tcshrc  .viminfo  .wget-hsts  anaconda-ks.cfg
[root@harbor ~]# cd .docker/
[root@harbor .docker]# ls
cli-plugins
[root@harbor .docker]# curl -SL https://github.com/docker/compose/releases/download/v2.7.0/docker-compose-linux-x86_64 -o $DOCKER_CONfig/cli-plugins/docker-compose		//docker-compose下载路径

//已经下载好的上传至root下
[root@harbor ~]# ls
anaconda-ks.cfg  docker-compose-linux-x86_64.octet-stream
[root@harbor ~]# mv docker-compose-linux-x86_64.octet-stream /root/.docker/cli-plugins/docker-compose

//配置docker-compose
[root@harbor ~]# cd /root/.docker/cli-plugins/
[root@harbor cli-plugins]# ls
docker-compose
[root@harbor cli-plugins]# chmod +x docker-compose 
[root@harbor cli-plugins]# ll
total 25188
-rwxr-xr-x. 1 root root 25792512 Aug 11 18:31 docker-compose
[root@harbor cli-plugins]# ./docker-compose 		//可以使用了
[root@harbor cli-plugins]# pwd
/root/.docker/cli-plugins		//目前只能在文件夹里使用
[root@harbor cli-plugins]# ln -s /root/.docker/cli-plugins/docker-compose /usr/bin/		//创建软链接
[root@harbor cli-plugins]# cd 
[root@harbor ~]# which docker-compose
/usr/bin/docker-compose
[root@harbor ~]# docker compose version
Docker Compose version v2.7.0

部署harbor

安装harbor

[root@harbor ~]# wget https://github.com/goharbor/harbor/releases/download/v2.5.3/harbor-offline-installer-v2.5.3.tgz

//已经下载好的上传至root下
[root@harbor ~]# ls
anaconda-ks.cfg  harbor-offline-installer-v2.5.3.tgz
[root@harbor ~]# tar xf harbor-offline-installer-v2.5.3.tgz -C /usr/local/

//配置harbor
[root@harbor ~]# cd /usr/local/
[root@harbor local]# ls
bin  etc  games  harbor  include  lib  lib64  libexec  sbin  share  src
[root@harbor local]# cd harbor/
[root@harbor harbor]# ls
LICENSE  common.sh  harbor.v2.5.3.tar.gz  harbor.yml.tmpl  install.sh  prepare
[root@harbor harbor]# cp harbor.yml.tmpl harbor.yml
[root@harbor harbor]# vim harbor.yml
hostname: harbor.example.com		//修改为域名或者IP

#https:						//注释掉
  # https port for harbor, default is 443
  #port: 443
  # The path of cert and key files for Nginx
  #certificate: /your/certificate/path		//注释掉
  #private_key: /your/private/key/path		//注释掉
[root@harbor harbor]# ./install.sh 		//拉取镜像
[+] Running 10/10
 ⠿ Network harbor_harbor        Created                                                                                                     0.2s
 ⠿ Container harbor-log         Started                                                                                                     0.5s
 ⠿ Container registryctl        Started                                                                                                     2.0s
 ⠿ Container registry           Started                                                                                                     2.0s
 ⠿ Container redis              Started                                                                                                     2.1s
 ⠿ Container harbor-db          Started                                                                                                     2.0s
 ⠿ Container harbor-portal      Started                                                                                                     1.6s
 ⠿ Container harbor-core        Started                                                                                                     2.4s
 ⠿ Container Nginx              Started                                                                                                     3.2s
 ⠿ Container harbor-jobservice  Started                                                                                                     3.2s
✔ ----Harbor has been installed and started successfully.----
[root@harbor harbor]# ss -anlt
State            Recv-Q           Send-Q                     Local Address:Port                     Peer Address:Port          Process           
LISTEN           0                128                            127.0.0.1:1514                          0.0.0.0:*                               
LISTEN           0                128                              0.0.0.0:22                            0.0.0.0:*                               
LISTEN           0                128                              0.0.0.0:443                           0.0.0.0:*                               
LISTEN           0                128                                 [::]:22                               [::]:*                               
LISTEN           0                128                                 [::]:443                              [::]:*                               

访问测试

image

image

设置开机自启动

[root@harbor harbor]# docker ps
CONTAINER ID   IMAGE                                COMMAND                  CREATED         STATUS                   PORTS                                   NAMES
39dd86d1eec2   goharbor/harbor-jobservice:v2.5.3    "/harbor/entrypoint.…"   3 minutes ago   Up 3 minutes (healthy)                                           harbor-jobservice
71bf08bfd7da   goharbor/Nginx-photon:v2.5.3         "Nginx -g 'daemon of…"   3 minutes ago   Up 3 minutes (healthy)   0.0.0.0:80->8080/tcp, :::80->8080/tcp   Nginx
61c050421868   goharbor/harbor-core:v2.5.3          "/harbor/entrypoint.…"   3 minutes ago   Up 3 minutes (healthy)                                           harbor-core
664cf7c60665   goharbor/redis-photon:v2.5.3         "redis-server /etc/r…"   3 minutes ago   Up 3 minutes (healthy)                                           redis
60a295df8091   goharbor/registry-photon:v2.5.3      "/home/harbor/entryp…"   3 minutes ago   Up 3 minutes (healthy)                                           registry
37374fefa729   goharbor/harbor-portal:v2.5.3        "Nginx -g 'daemon of…"   3 minutes ago   Up 3 minutes (healthy)                                           harbor-portal
8530ed5fdee7   goharbor/harbor-db:v2.5.3            "/docker-entrypoint.…"   3 minutes ago   Up 3 minutes (healthy)                                           harbor-db
a1741a70ff7d   goharbor/harbor-registryctl:v2.5.3   "/home/harbor/start.…"   3 minutes ago   Up 3 minutes (healthy)                                           registryctl
5d7a2d387ec8   goharbor/harbor-log:v2.5.3           "/bin/sh -c /usr/loc…"   3 minutes ago   Up 3 minutes (healthy)   127.0.0.1:1514->10514/tcp               harbor-log

//创建脚本进行自启动
[root@harbor ~]# vim /etc/rc.local 
#!/bin/bash						//开头位置
cd /usr/lcoal/harbor			//添加
docker-compose start			//添加
[root@harbor ~]# ll /etc/rc.d/rc.local 
-rw-r--r--. 1 root root 517 Aug 11 19:26 /etc/rc.d/rc.local
[root@harbor ~]# chmod +x /etc/rc.d/rc.local 

//重启查看是否开机自启动
[root@harbor ~]# reboot
[root@harbor ~]# ss -anlt
State            Recv-Q           Send-Q                     Local Address:Port                     Peer Address:Port          Process           
LISTEN           0                128                            127.0.0.1:1514                          0.0.0.0:*                               
LISTEN           0                128                              0.0.0.0:80                            0.0.0.0:*                               
LISTEN           0                128                              0.0.0.0:22                            0.0.0.0:*                               
LISTEN           0                128                                 [::]:80                               [::]:*                               
LISTEN           0                128                                 [::]:22                               [::]:*                               
[root@harbor ~]# docker ps
CONTAINER ID   IMAGE                                COMMAND                  CREATED         STATUS                             PORTS                                   NAMES
39dd86d1eec2   goharbor/harbor-jobservice:v2.5.3    "/harbor/entrypoint.…"   5 minutes ago   Up 10 seconds (health: starting)                                           harbor-jobservice
71bf08bfd7da   goharbor/Nginx-photon:v2.5.3         "Nginx -g 'daemon of…"   5 minutes ago   Up 10 seconds (health: starting)   0.0.0.0:80->8080/tcp, :::80->8080/tcp   Nginx
61c050421868   goharbor/harbor-core:v2.5.3          "/harbor/entrypoint.…"   5 minutes ago   Up 12 seconds (health: starting)                                           harbor-core
664cf7c60665   goharbor/redis-photon:v2.5.3         "redis-server /etc/r…"   5 minutes ago   Up 11 seconds (health: starting)                                           redis
60a295df8091   goharbor/registry-photon:v2.5.3      "/home/harbor/entryp…"   5 minutes ago   Up 11 seconds (health: starting)                                           registry
37374fefa729   goharbor/harbor-portal:v2.5.3        "Nginx -g 'daemon of…"   5 minutes ago   Up 11 seconds (health: starting)                                           harbor-portal
8530ed5fdee7   goharbor/harbor-db:v2.5.3            "/docker-entrypoint.…"   5 minutes ago   Up 12 seconds (health: starting)                                           harbor-db
a1741a70ff7d   goharbor/harbor-registryctl:v2.5.3   "/home/harbor/start.…"   5 minutes ago   Up 11 seconds (health: starting)                                           registryctl
5d7a2d387ec8   goharbor/harbor-log:v2.5.3           "/bin/sh -c /usr/loc…"   5 minutes ago   Up 12 seconds (health: starting)   127.0.0.1:1514->10514/tcp               harbor-log

版权声明:本文内容由互联网用户自发贡献,该文观点与技术仅代表作者本人。本站仅提供信息存储空间服务,不拥有所有权,不承担相关法律责任。如发现本站有涉嫌侵权/违法违规的内容, 请发送邮件至 dio@foxmail.com 举报,一经查实,本站将立刻删除。

相关推荐