docker镜像仓库——harbor仓库部署

docker镜像仓库——harbor仓库部署

@(k8s)
参考地址

下载地址：https://github.com/goharbor/harbor/releases

下载后解压：

[root@k8s-harbor source]# wget https://storage.googleapis.com/harbor-releases/release-1.9.0/harbor-online-installer-v1.9.0.tgz
--2019-09-19 16:40:39--  https://storage.googleapis.com/harbor-releases/release-1.9.0/harbor-online-installer-v1.9.0.tgz
Resolving storage.googleapis.com (storage.googleapis.com)... 172.217.24.16, 2404:6800:4008:800::2010
Connecting to storage.googleapis.com (storage.googleapis.com)|172.217.24.16|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 8396 (8.2K) [application/x-tar]
Saving to: ‘harbor-online-installer-v1.9.0.tgz’

100%[============================================================================================================================================================================================>] 8,396       --.-K/s   in 0.003s  

2019-09-19 16:40:39 (2.61 MB/s) - ‘harbor-online-installer-v1.9.0.tgz’ saved [8396/8396]

[root@k8s-harbor source]# tar -xvf harbor-online-installer-v1.9.0.tgz 
harbor/prepare
harbor/LICENSE
harbor/install.sh
harbor/harbor.yml
[root@k8s-harbor source]# cd harbor

1. 修改harbor.cfg

vim /home/admin/harbor-install/source/harbor/harbor.cfg

2. 编辑或修改/etc/sysconfig/docker文件

[root@k8s-harbor harbor]# cat /etc/sysconfig/docker 
OPTIONS='--selinux-enabled=false --log-driver=journald --signature-verification=false --insecure-registry=192.168.0.116:10500'
if [ -z "${DOCKER_CERT_PATH}" ]; then
    DOCKER_CERT_PATH=/etc/docker
fi

[root@k8s-harbor harbor]# 

3. 修改后重启docker

systemctl daemon-reload
systemctl restart docker

4. 安装docker-compose

下载地址： https://github.com/docker/compose/releases/

curl -L https://github.com/docker/compose/releases/download/1.24.1/docker-compose-`uname -s`-`uname -m` > /usr/local/bin/docker-compose
 chmod +x /usr/local/bin/docker-compose

5. 先执行prepare，再执行install.sh脚本，安装harbor仓库

cd /home/admin/harbor-install/source/harbor
./prepare

[root@k8s-harbor harbor]# ./install.sh 

[Step 0]: checking installation environment ...

Note: docker version: 18.06.3

Note: docker-compose version: 1.24.1


[Step 1]: preparing environment ...
prepare base dir is set to /home/admin/harbor-install/source/harbor
Clearing the configuration file: /config/nginx/nginx.conf
Clearing the configuration file: /config/core/env
Clearing the configuration file: /config/core/app.conf
Clearing the configuration file: /config/jobservice/env
Clearing the configuration file: /config/jobservice/config.yml
Clearing the configuration file: /config/registryctl/env
Clearing the configuration file: /config/registryctl/config.yml
Clearing the configuration file: /config/log/logrotate.conf
Clearing the configuration file: /config/log/rsyslog_docker.conf
Clearing the configuration file: /config/db/env
Clearing the configuration file: /config/registry/config.yml
Generated configuration file: /config/log/logrotate.conf
Generated configuration file: /config/log/rsyslog_docker.conf
Generated configuration file: /config/nginx/nginx.conf
Generated configuration file: /config/core/env
Generated configuration file: /config/core/app.conf
Generated configuration file: /config/registry/config.yml
Generated configuration file: /config/registryctl/env
Generated configuration file: /config/db/env
Generated configuration file: /config/jobservice/env
Generated configuration file: /config/jobservice/config.yml
loaded secret from file: /secret/keys/secretkey
Generated configuration file: /compose_location/docker-compose.yml
Clean up the input dir



[Step 2]: starting Harbor ...
Creating network "harbor_harbor" with the default driver
Pulling log (goharbor/harbor-log:v1.9.0)...
v1.9.0: Pulling from goharbor/harbor-log
a1fd40743af1: Already exists
aea179b49535: Pull complete
9081bb9ac872: Pull complete
3f5eda6fc7ba: Pull complete
1cf969523264: Pull complete
ccb3cdd1d532: Pull complete
830676e1a685: Pull complete
0e9c3a513ce4: Pull complete
Digest: sha256:3d9a62cf87355291547b2df831cd5f46053b9335c39d1a4fd7aff22a509d341e
Status: Downloaded newer image for goharbor/harbor-log:v1.9.0
Pulling registry (goharbor/registry-photon:v2.7.1-patch-2819-v1.9.0)...
v2.7.1-patch-2819-v1.9.0: Pulling from goharbor/registry-photon
a1fd40743af1: Already exists
4b454a6c544e: Pull complete
5c08428b0a71: Pull complete
e5617c286490: Pull complete
40689e65638f: Pull complete
e7ef0710c1dd: Pull complete
Digest: sha256:b151a16890ee2b194ec5b38fd50030cc264d9806ce4d8d93b9d2aba2f5c41a48
Status: Downloaded newer image for goharbor/registry-photon:v2.7.1-patch-2819-v1.9.0
Pulling registryctl (goharbor/harbor-registryctl:v1.9.0)...
v1.9.0: Pulling from goharbor/harbor-registryctl
a1fd40743af1: Already exists
eadafbbc0c91: Pull complete
867cca04ec2d: Pull complete
6de5017173bc: Pull complete
d21f4df3ef7c: Pull complete
5b6c5aa9f8eb: Pull complete
716fa5b4d6fd: Pull complete
Digest: sha256:4ebeed5e398d8bba727f81f287b2253cd5167b17793d7baa6df45067075e1bba
Status: Downloaded newer image for goharbor/harbor-registryctl:v1.9.0
Pulling postgresql (goharbor/harbor-db:v1.9.0)...
v1.9.0: Pulling from goharbor/harbor-db
a1fd40743af1: Already exists
91fca1938059: Pull complete
07c84ba687df: Pull complete
def1496d457d: Pull complete
3bd0a0f73699: Pull complete
b1ffef9b8549: Pull complete
23e61afb4b12: Pull complete
1b1df62745be: Pull complete
7ddf7678db69: Pull complete
Digest: sha256:f27cbb5aef6c12dd329dc2aa6fed8a4dbbfba4fac7e729d3a5584094cdaeca10
Status: Downloaded newer image for goharbor/harbor-db:v1.9.0
Pulling portal (goharbor/harbor-portal:v1.9.0)...
v1.9.0: Pulling from goharbor/harbor-portal
a1fd40743af1: Already exists
117276b1e487: Pull complete
e9eb95891e00: Pull complete
3d5be3181154: Pull complete
24a5cae1ec28: Pull complete
10e6953c5a5b: Pull complete
fc2e7fe96214: Pull complete
Digest: sha256:4da2a9f9ef09e45fa0a27d673ac5d92ebc0a56e992bf9d69825b18b545da7305
Status: Downloaded newer image for goharbor/harbor-portal:v1.9.0
Pulling redis (goharbor/redis-photon:v1.9.0)...
v1.9.0: Pulling from goharbor/redis-photon
a1fd40743af1: Already exists
1752a158322c: Pull complete
16d4cc2ca0d5: Pull complete
f4b0246b9cb8: Pull complete
996e7e3ebaf5: Pull complete
Digest: sha256:b706cc43b8489775fc33c734528722b7f9bbd902e4c5ca73232a3faf2cf27cfd
Status: Downloaded newer image for goharbor/redis-photon:v1.9.0
Pulling core (goharbor/harbor-core:v1.9.0)...
v1.9.0: Pulling from goharbor/harbor-core
a1fd40743af1: Already exists
b4da616eb0f0: Pull complete
b92d87d60aa8: Pull complete
06d98e921b4f: Pull complete
ab57a19168da: Pull complete
9113abfeab16: Pull complete
Digest: sha256:c921601629c2841621092885dd644b7977262399793a305e92f8af0d255dff55
Status: Downloaded newer image for goharbor/harbor-core:v1.9.0
Pulling jobservice (goharbor/harbor-jobservice:v1.9.0)...
v1.9.0: Pulling from goharbor/harbor-jobservice
a1fd40743af1: Already exists
1c22797c72cc: Pull complete
88f57de35b34: Pull complete
Digest: sha256:d0bdda32771de6446831705613abefa0803a79d9e7156ba42d5dd8a0cc045a98
Status: Downloaded newer image for goharbor/harbor-jobservice:v1.9.0
Pulling proxy (goharbor/nginx-photon:v1.9.0)...
v1.9.0: Pulling from goharbor/nginx-photon
a1fd40743af1: Already exists
a16e88e2365b: Pull complete
Digest: sha256:968130655bbfef99f0bf9e20b9c0ce31766f5c4c3f726f2455b286be78a04ad4
Status: Downloaded newer image for goharbor/nginx-photon:v1.9.0
Creating harbor-log ... done
Creating redis         ... done
Creating harbor-db     ... done
Creating registryctl   ... done
Creating harbor-portal ... done
Creating registry      ... done
Creating harbor-core   ... done
Creating nginx             ... done
Creating harbor-jobservice ... done

✔ ----Harbor has been installed and started successfully.----

Now you should be able to visit the admin portal at http://192.168.0.116. 
For more details, please visit https://github.com/goharbor/harbor .

成功

访问页面：http://192.168.0.116:10500

输入账号密码：

admin
xxxxx2019

创建一个测试项目：

#####换另一台服务器拉取一个nginx公共镜像并推送到harbor仓库：
1、 设置

root@baknginx1:[/root]$cat /etc/sysconfig/docker |grep -v ^# | grep -v ^$
OPTIONS='--selinux-enabled --log-driver=journald --signature-verification=false --registry-mirror=https://fzhifedh.mirror.aliyuncs.com --insecure-registry=192.168.0.116:10500'
if [ -z "${DOCKER_CERT_PATH}" ]; then
    DOCKER_CERT_PATH=/etc/docker
fi
root@baknginx1:[/root]$

root@baknginx1:[/root]$cat /etc/docker/daemon.json 
{}

2、 拉一个公共的nginx镜像

docker pull nginx

3、 先给镜像打标签

docker tag docker.io/nginx 192.168.0.116:10500/wxd-test/t-nginx:v1

4、 推送到本地仓库

docker push docker.io/nginx 192.168.0.116:10500/wxd-test/t-nginx:v1

在页面查看

#### 安装中遇到的问题
执行./prepare时，报data_volume值必须用绝对路径，不能使用相对路径（之前写的./data）

docker-compose 版本过低，版本要求不低于1.18.0

docker push 的时候，报unauthorized: authentication required，需要本地docker先登录到远程harbor仓库