1. 安裝
1.1 選擇線下安裝
1.2 復制到cent7上
[root@master01 ~]# ls
harbor-offline-installer-v1.6.2.tgz
[root@master01 ~]# tar -zxvf harbor-offline-installer-v1.6.2.tgz
[root@master01 ~]# ls
harbor-offline-installer-v1.6.2.tgz harbor
#刪除壓縮文件
[root@master01 ~]# rm -f harbor-offline-installer-v1.6.2.tgz
[root@master01 ~]# mkdir -p i/apps
[root@master01 ~]# mv harbor i/apps/
#修改配置文件
[root@master01 ~]# cd i/apps/harbor/
[root@master01 harbor]# ls
common docker-compose.notary.yml harbor.cfg LICENSE prepare
docker-compose.chartmuseum.yml docker-compose.yml harbor.v1.6.2.tar.gz NOTICE
docker-compose.clair.yml ha install.sh open_source_license
[root@master01 harbor]# vi harbor.cfg
#修改
hostname = reg.mydomain.com
hostname = hub.wanfei.com #是mac系統(tǒng)后面要加個端口8080
1.3 啟動(不是mac系統(tǒng)直接啟動)颅围，如果出現(xiàn)下面錯誤被饿，先 安裝docker-compose
[root@master01 harbor]# ./install.sh
[Step 0]: checking installation environment ...
Note: docker version: 18.03.1
? Need to install docker-compose(1.7.1+) by yourself first and run this script again.
1.4 如果是mac系統(tǒng)要修改掛載目錄在啟動（不是mac系統(tǒng)忽略這一步）
[root@master01 harbor]# vi docker-compose.yml
#修改后
version: '2'
services:
log:
image: goharbor/harbor-log:v1.6.2
container_name: harbor-log
restart: always
volumes:
- ./log/:/var/log/docker/:z #日志服務
- ./common/config/log/:/etc/logrotate.d/:z
ports:
- 127.0.0.1:1514:10514
networks:
- harbor
registry:
image: goharbor/registry-photon:v2.6.2-v1.6.2
container_name: registry
restart: always
volumes:
- ./data/registry:/storage:z #registry服務忠烛，存放所有鏡像數(shù)據(jù)
- ./common/config/registry/:/etc/registry/:z
- ./common/config/custom-ca-bundle.crt:/harbor_cust_cert/custom-ca-bundle.crt:z
networks:
- harbor
environment:
- GODEBUG=netdns=cgo
depends_on:
- log
logging:
driver: "syslog"
options:
syslog-address: "tcp://127.0.0.1:1514"
tag: "registry"
postgresql:
image: goharbor/harbor-db:v1.6.2
container_name: harbor-db
restart: always
volumes:
- ./data/database:/var/lib/postgresql/data:z #數(shù)據(jù)庫數(shù)據(jù)
networks:
- harbor
env_file:
- ./common/config/db/env
depends_on:
- log
logging:
driver: "syslog"
options:
syslog-address: "tcp://127.0.0.1:1514"
tag: "postgresql"
adminserver:
image: goharbor/harbor-adminserver:v1.6.2
container_name: harbor-adminserver
env_file:
- ./common/config/adminserver/env
restart: always
volumes:
- ./data/config/:/etc/adminserver/config/:z #3個adminserver掛載
- ./data/secretkey:/etc/adminserver/key:z
- ./data/:/data/:z
networks:
- harbor
depends_on:
- log
logging:
driver: "syslog"
options:
syslog-address: "tcp://127.0.0.1:1514"
tag: "adminserver"
ui:
image: goharbor/harbor-ui:v1.6.2
container_name: harbor-ui
env_file:
- ./common/config/ui/env
restart: always
volumes:
- ./common/config/ui/app.conf:/etc/ui/app.conf:z
- ./common/config/ui/private_key.pem:/etc/ui/private_key.pem:z
- ./common/config/ui/certificates/:/etc/ui/certificates/:z
- ./data/secretkey:/etc/ui/key:z #3個ui掛載
- ./data/ca_download/:/etc/ui/ca/:z
- ./data/psc/:/etc/ui/token/:z
networks:
- harbor
depends_on:
- log
- adminserver
- registry
logging:
driver: "syslog"
options:
syslog-address: "tcp://127.0.0.1:1514"
tag: "ui"
jobservice:
image: goharbor/harbor-jobservice:v1.6.2
container_name: harbor-jobservice
env_file:
- ./common/config/jobservice/env
restart: always
volumes:
- ./data/job_logs:/var/log/jobs:z #jobservice
- ./common/config/jobservice/config.yml:/etc/jobservice/config.yml:z
networks:
- harbor
depends_on:
- redis
- ui
- adminserver
logging:
driver: "syslog"
options:
syslog-address: "tcp://127.0.0.1:1514"
tag: "jobservice"
redis:
image: goharbor/redis-photon:v1.6.2
container_name: redis
restart: always
volumes:
- ./data/redis:/var/lib/redis #redis
networks:
- harbor
depends_on:
- log
logging:
driver: "syslog"
options:
syslog-address: "tcp://127.0.0.1:1514"
tag: "redis"
proxy:
image: goharbor/nginx-photon:v1.6.2
container_name: nginx
restart: always
volumes:
- ./common/config/nginx:/etc/nginx:z
networks:
- harbor
ports:
- 8080:80 #nginx對外的80端口mac不允許
- 443:443
- 4443:4443
depends_on:
- postgresql
- registry
- ui
- log
logging:
driver: "syslog"
options:
syslog-address: "tcp://127.0.0.1:1514"
tag: "proxy"
networks:
harbor:
external: false
1.5 安裝成功
? ----Harbor has been installed and started successfully.----
Now you should be able to visit the admin portal at http://hub.wanfei.com.
For more details, please visit https://github.com/goharbor/harbor
2. 訪問
2.1 先配置host
2.2 訪問http://hub.wanfei.com
2.3 查看密碼
[root@master01 harbor]# vim harbor.cfg
- 按
/搜索harbor_admin_password發(fā)現(xiàn)密碼是Harbor12345
2.4 新建項目
2.5 進入項目
-
成員:
- 復制：生產(chǎn)環(huán)境多個機房之間網(wǎng)速很快阎毅，跨機房網(wǎng)速變差来涨，每個機房部署一個harbor晒夹，再通過一個中心的harbor，當有鏡像的時候會自動的同步到這兩臺鏡像服務器僚稿，復制規(guī)則可以針對項目
2.6 添加用戶
-
創(chuàng)建成功后可以在項目里面添加成員
-
指定剛才創(chuàng)建的成員為項目的開發(fā)人員
3. idea上傳鏡像到harbor
3.1 Docker Toolbox添加鏡像源為http訪問(因為沒有證書)
- 首先凡桥，我們剛打開 Docker Quickstart Terminal 進入的是 Windows 命令行界面，此時輸入下述命令進入虛擬 docker bash 中去：
#后面的 default 也可以不用輸入蚀同，會自動補上
docker-machine ssh default
- 然后缅刽，我們已經(jīng)進入了虛擬 docker bash 中去了，此時我們需要編輯
/var/lib/boot2docker/profile文件中的EXTRA_ARGS信息：
sudo vi /var/lib/boot2docker/profile
- 此時蠢络，我們在
--label provider=virtualbox的下一行添加下述代碼：
--insecure-registry xxx.xxx.xxx.xxx:yyy
這里需要解釋的是衰猛， xxx.xxx.xxx.xxx 是我們的私有鏡像倉庫的 ip 地址或域名，yyy 是你配置私有鏡像倉庫時設定的端口號刹孔，80端口可以不寫
- 最后啡省，不要忘了，我們還需要重啟 docker 服務的：
#在虛擬 docker 環(huán)境中
sudo /etc/init.d/docker restart
#或者
#退出虛擬 docker 環(huán)境（使用 exit 命令）然后在 Windows 命令行下敲入下列命令
docker-machine restart
3.2 idea Terminal登錄harbor并推送鏡像到hatbor倉庫
16872@DESKTOP-LF85VK5 MINGW64 /d/javaProject/idea/springcloud (master)
$ docker login hub.wanfei.com
Username: www19930327
Password:
Login Succeeded
$ docker tab hub.wanfei.com/springcloud/test .
$ docker push hub.wanfei.com/springcloud/test:latest
The push refers to repository [hub.wanfei.com/springcloud/test]
bd7a66c91889: Preparing
a78d86126896: Preparing
30125717c842: Retrying in 4 seconds
011b303988d2: Preparing
error parsing HTTP 405 response body: invalid character '<' looking for beginning of value: "<html><title>405: Method Not Allowed</title><body>405: Method Not Allowed</body></html>"
如果出現(xiàn)405: Method Not Allowed錯誤（上面）
是因為配置的域名沒有在Docker Toolbox里面添加hosts映射
- 打開 Docker Quickstart Terminal髓霞，添加host映射
docker@default:/$ sudo vi /etc/hosts
127.0.0.1 default localhost localhost.local
# The following lines are desirable for IPv6 capable hosts
# (added automatically by netbase upgrade)
::1 ip6-localhost ip6-loopback
fe00::0 ip6-localnet
ff00::0 ip6-mcastprefix
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
ff02::3 ip6-allhosts
192.168.2.41 hub.wanfei.com
idea push成功
-
Dockerfile文件
-
build.sh腳本文件
3.3 cent7 docker push鏡像到harbor
配置Docker加速及私有倉庫的http協(xié)議支持
vim /etc/docker/daemon.json
#添加
{
"registry-mirrors": ["https://x83mabsk.mirror.aliyuncs.com"], #這個是加速地址
"insecure-registries": ["http://hub.wanfei.com"] #這里是私有倉庫地址
}
#重啟docker
[root@master01 ~]# systemctl daemon-reload
[root@master01 ~]# systemctl restart docker
#登錄私有倉庫harbor成功
[root@master01 ~]# docker login hub.wanfei.com
Username: admin
Password:
Login Succeeded
下載鏡像并將鏡像push到harbor
cent7
/etc/hosts里面添加192.168.2.41 hub.wanfei.com
#下載鏡像
[root@master01 ~]# docker pull oracle/openjdk:8
[root@master01 ~]# docker tag oracle/openjdk:8 hub.wanfei.com/springcloud/openjdk:8
[root@master01 ~]# docker push hub.wanfei.com/springcloud/openjdk:8
The push refers to repository [hub.wanfei.com/springcloud/openjdk]
ef2a536cc232: Pushed
72c79bf3dbce: Pushed
8: digest: sha256:8e28e0ba6b10187a1b4f07cf09cf536c15f22c94920c0facf7ff7f17fac460a5 size: 741
4. 推送成功
