Harbor 镜像仓库最详细搭建

た入场券 2022-10-01 13:44 209阅读 0赞

Harbor 架构：

![Harbor 镜像仓库最详细搭建][Harbor]

如上所示，Harbor包含6个组件：

Proxy(代理服务器): Harbor组件，例如register，UI和令牌服务都在代理服务后端，代理将来自客户端和浏览器的流量返回给后端各个服务。

Core services(核心服务)：Harbor核心功能，主要提供以下服务：  
UI(图形用户界面)：帮助用户管理register上的image。Webhook是在注册表中配置的一种机制，以便注册表中的图像状态更改可以填充到Harbour的Webhook端点。Harbor使用webhook来更新日志，启动复制以及其他一些功能。令牌服务：负责根据用户的项目角色为每个Docker推送/拉取命令发布令牌。如果从Docker客户端发送的请求中没有令牌，注册中心会将请求重定向到令牌服务。数据库：数据库存储项目，用户，角色，复制策略和图像的元数据。

Job services(Job服务):用于Images复制，可以将本地images同步到其他Harbor实例。

Log collector(日志采集器)：负责在一个地方收集其他模块的日志。

*  # 环境搭建部署： #

--------------------

**\#\# 基础环境安装：**

wget -O /etc/yum.repos.d/epel.repo [http://mirrors.aliyun.com/repo/epel-7.repo][http_mirrors.aliyun.com_repo_epel-7.repo]  
wget -O /etc/yum.repos.d/CentOS-Base.repo [http://mirrors.aliyun.com/repo/Centos-7.repo][http_mirrors.aliyun.com_repo_Centos-7.repo]  
yum remove -y docker docker-common docker-selinux docker-engine  
yum install -y yum-utils device-mapper-persistent-data lvm2  
yum-config-manager --add-repo [https://download.docker.com/linux/centos/docker-ce.repo][https_download.docker.com_linux_centos_docker-ce.repo]  
yum-config-manager --enable docker-ce-edge  
yum-config-manager --enable docker-ce-test  
yum list docker-ce --showduplicates | sort -r |grep stable

--------------------

**Docker 安装：**

yum install -y docker-ce-18.06.2.ce

![Harbor 镜像仓库最详细搭建][Harbor 1]

**配置阿里云加速**

![Harbor 镜像仓库最详细搭建][Harbor 2]

**安装 1.24.0 版本**  
curl -L [https://github.com/docker/compose/releases/download/1.24.0/docker-compose-\`uname][https_github.com_docker_compose_releases_download_1.24.0_docker-compose-_uname] \-s`-`uname -m\` -o /usr/local/bin/docker-compose

chmod +x /usr/local/bin/docker-compose

![Harbor 镜像仓库最详细搭建][Harbor 3]

**Harbor 离线安装 1.5.0 【[http://harbor.orientsoft.cn/][http_harbor.orientsoft.cn]】**  
**\# 安装包已下载到本地，直接上传安装即可**  
**由于域名为内网域名，配置harbor 服务器的hosts**

![Harbor 镜像仓库最详细搭建][Harbor 4]

**解压离线安装harbor && 配置harbor启动文件 && sh install.sh 【安装】  
tar -zxvf harbor-offline-installer-v1.5.0.tgz -C /usr/local/  
cd /usr/local/harbor && vim harbor.cfg**  
![Harbor 镜像仓库最详细搭建][Harbor 5]  
![Harbor 镜像仓库最详细搭建][Harbor 6]

**sh install.sh 【安装】**  
![Harbor 镜像仓库最详细搭建][Harbor 7]

**访问Harbor仓库**  
![Harbor 镜像仓库最详细搭建][Harbor 8]

配置镜像：  
1）下载一个centos 镜像  
2）tag并上传仓库  
3）验证  
![Harbor 镜像仓库最详细搭建][Harbor 9]  
![Harbor 镜像仓库最详细搭建][Harbor 10]

**将centos renew一个新的镜像：  
docker tag centos hason.docker.com/tools/centos7.6**

Docker push harbor仓库问题：  
![Harbor 镜像仓库最详细搭建][Harbor 11]

**解决过程：  
/usr/local/harbor && docker-compose down**  
添加docker push镜像仓库地址：  
![Harbor 镜像仓库最详细搭建][Harbor 12]

**生成https证书  
mkdir -p /data/cert/  
openssl genrsa -out /data/cert/server.key 2048  
openssl req -x509 -new -nodes -key /data/cert/server.key -subj "/CN=hason.docker.com" -days 50000 -out /data/cert/server.c**rt\*

![Harbor 镜像仓库最详细搭建][Harbor 13]  
![Harbor 镜像仓库最详细搭建][Harbor 14]

mkdir -p /etc/docker/certs.d/hason.docker.com  
cp /data/cert/server.crt /etc/docker/certs.d/hason.docker.com/  
systemctl restart docker  
/usr/local/harbor && docker-compose up -d  
docker login hason.docker.com 【使用harbor用户+密码登录仓库】

![Harbor 镜像仓库最详细搭建][Harbor 15]

登录harbor Web 验证：  
![Harbor 镜像仓库最详细搭建][Harbor 16]

转载于:https://blog.51cto.com/hason/2397415

[Harbor]: https://s1.51cto.com/images/blog/201905/20/c3f50c1a01b36c36ea05eb8c3d7cc40b.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[http_mirrors.aliyun.com_repo_epel-7.repo]: http://mirrors.aliyun.com/repo/epel-7.repo
[http_mirrors.aliyun.com_repo_Centos-7.repo]: http://mirrors.aliyun.com/repo/Centos-7.repo
[https_download.docker.com_linux_centos_docker-ce.repo]: https://download.docker.com/linux/centos/docker-ce.repo
[Harbor 1]: https://s1.51cto.com/images/blog/201905/20/356b594324ff40c0f0641d9a92d10e16.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[Harbor 2]: https://s1.51cto.com/images/blog/201905/20/189b895fba56b97f384f421a54cda28d.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[https_github.com_docker_compose_releases_download_1.24.0_docker-compose-_uname]: https://github.com/docker/compose/releases/download/1.24.0/docker-compose-%60uname
[Harbor 3]: https://s1.51cto.com/images/blog/201905/20/29e9b1d73f1635081d191c19ea65cba7.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[http_harbor.orientsoft.cn]: http://harbor.orientsoft.cn/
[Harbor 4]: https://s1.51cto.com/images/blog/201905/20/5c09a9162eafb82c50641774c3666442.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[Harbor 5]: https://s1.51cto.com/images/blog/201905/20/20778fc3129f6e25d4713dbde4bbe8de.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[Harbor 6]: https://s1.51cto.com/images/blog/201905/20/dbc94de4a58c5a79c06c418fa1794d80.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[Harbor 7]: https://s1.51cto.com/images/blog/201905/20/99dd77b51c0901587de18650b84ff1b3.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[Harbor 8]: https://s1.51cto.com/images/blog/201905/20/20a91016e2592bd2fd53a1dac22b3e6d.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[Harbor 9]: https://s1.51cto.com/images/blog/201905/20/1591118f3e58cee14394160300a6c9a2.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[Harbor 10]: https://s1.51cto.com/images/blog/201905/20/541f93cfa5155274346ed93ece23b847.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[Harbor 11]: https://s1.51cto.com/images/blog/201905/20/3421a98932082855c2043c4760b1bdec.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[Harbor 12]: https://s1.51cto.com/images/blog/201905/20/c2f4f4935f9b025c6cc1cd907f6ccf14.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[Harbor 13]: https://s1.51cto.com/images/blog/201905/20/486da24d7afdfbb96e0eb6d660538a45.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[Harbor 14]: https://s1.51cto.com/images/blog/201905/20/f992edab622f9f734d078d46f0de8f92.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[Harbor 15]: https://s1.51cto.com/images/blog/201905/20/0182473a571b6f11cf4cf03718c8fd92.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[Harbor 16]: https://s1.51cto.com/images/blog/201905/20/6383dcbf1fd28c1d0473c4d6d2d22841.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=