harborのインストールと簡単な使用

6573 ワード

dockerのプライベートウェアハウスをインストールし、vmwareが提供するharborツールを利用して、Dockerのプライベートウェアハウススキームの比較と構築を参照します.Harborインストール--エンタープライズレベルRegistryウェアハウス
2.2 harbor Project HarborはVMware社の中国チームが企業ユーザーのために設計したRegistry serverオープンソースプロジェクトで、権限管理(RBAC)、LDAP、監査、管理インタフェース、自己登録、HAなどの企業に必要な機能を含み、同時に中国ユーザーの特徴に対して、ミラーコピーと中国語サポートなどの機能を設計する
デフォルトのユーザーパスワードはadmin/Harbor 12345です.
メリットとデメリット:
1 imagesのプライベートストレージを実現
2ログ統計のサポート
3ロールベースのアクセス制御(Role Based Access Control)をサポート
4マルチプロジェクトの作成をサポート
5管理UIインタフェースを提供し、中国語をオリジナルでサポートします.
6 AD/LDAP統合をサポート
  • dockerとdocker-composeのダウンロードとインストール
  • docker-composeはharborを起動するツール
  • です.

    その後、ページをダウンロードして最新バージョンのコードをダウンロードし、ここでオンラインインストールを選択します.
    tar xvf harbor-online-installer-v1.8.0.tgz
    cd harbor
    ls
    harbor.yml  install.sh  LICENSE  prepare
    #     harbor.yml  
    # Configuration file of Harbor
    
    # The IP address or hostname to access admin UI and registry service.
    # DO NOT use localhost or 127.0.0.1, because Harbor needs to be accessed by external clients.
    hostname: 10.10.50.223 #               ,
    
    # http related config
    http:
      # port for http, default is 80. If https enabled, this port will redirect to https port
      port:        
    
    # https related config
    # https:
    #   # https port for harbor, default is 443
    #   port: 443
    #   # The path of cert and key files for nginx
    #   certificate: /your/certificate/path
    #   private_key: /your/private/key/path
    
    # Uncomment external_url if you want to enable external proxy
    # And when it enabled the hostname will no longer used
    # external_url: https://reg.mydomain.com:8433
    
    # The initial password of Harbor admin
    # It only works in first time to install harbor
    # Remember Change the admin password from UI after launching Harbor.
    harbor_admin_password: Harbor12345
    
    # Harbor DB configuration
    database:
      # The password for the root user of Harbor DB. Change this before any production use.
      password: root123
    
    # The default data volume
    data_volume: /data
    
    # Harbor Storage settings by default is using /data dir on local filesystem
    # Uncomment storage_service setting If you want to using external storage
    # storage_service:
    #   # ca_bundle is the path to the custom root ca certificate, which will be injected into the truststore
    #   # of registry's and chart repository's containers.  This is usually needed when the user hosts a internal storage with self signed certificate.
    #   ca_bundle:
    
    #   # storage backend, default is filesystem, options include filesystem, azure, gcs, s3, swift and oss
    #   # for more info about this configuration please refer https://docs.docker.com/registry/configuration/
    #   filesystem:
    #     maxthreads: 100
    #   # set disable to true when you want to disable registry redirect
    #   redirect:
    #     disabled: false
    
    # Clair configuration
    clair: 
      # The interval of clair updaters, the unit is hour, set to 0 to disable the updaters.
      updaters_interval: 12
    
      # Config http proxy for Clair, e.g. http://my.proxy.com:3128
      # Clair doesn't need to connect to harbor internal components via http proxy.
      http_proxy:
      https_proxy:
      no_proxy: 127.0.0.1,localhost,core,registry
    
    jobservice:
      # Maximum number of job workers in job service  
      max_job_workers: 10
    
    chart:
      # Change the value of absolute_url to enabled can enable absolute url in chart
      absolute_url: disabled
    
    # Log configurations
    log:
      # options are debug, info, warning, error, fatal
      level: info
      # Log files are rotated log_rotate_count times before being removed. If count is 0, old versions are removed rather than rotated.
      rotate_count: 50
      # Log files are rotated only if they grow bigger than log_rotate_size bytes. If size is followed by k, the size is assumed to be in kilobytes. 
      # If the M is used, the size is in megabytes, and if G is used, the size is in gigabytes. So size 100, size 100k, size 100M and size 100G 
      # are all valid.
      rotate_size: 200M
      # The directory on your host that store log
      location: /var/log/harbor
    
    #This attribute is for migrator to detect the version of the .cfg file, DO NOT MODIFY!
    _version: 1.8.0
    
    # Uncomment external_database if using external database.
    # external_database:
    #   harbor:
    #     host: harbor_db_host
    #     port: harbor_db_port
    #     db_name: harbor_db_name
    #     username: harbor_db_username
    #     password: harbor_db_password
    #     ssl_mode: disable
    #   clair:
    #     host: clair_db_host
    #     port: clair_db_port
    #     db_name: clair_db_name
    #     username: clair_db_username
    #     password: clair_db_password
    #     ssl_mode: disable
    #   notary_signer:
    #     host: notary_signer_db_host
    #     port: notary_signer_db_port
    #     db_name: notary_signer_db_name
    #     username: notary_signer_db_username
    #     password: notary_signer_db_password
    #     ssl_mode: disable
    #   notary_server:
    #     host: notary_server_db_host
    #     port: notary_server_db_port
    #     db_name: notary_server_db_name
    #     username: notary_server_db_username
    #     password: notary_server_db_password
    #     ssl_mode: disable
    
    # Uncomment external_redis if using external Redis server
    # external_redis:
    #   host: redis
    #   port: 6379
    #   password:
    #   # db_index 0 is for core, it's unchangeable
    #   registry_db_index: 1
    #   jobservice_db_index: 2
    #   chartmuseum_db_index: 3
    
    # Uncomment uaa for trusting the certificate of uaa instance that is hosted via self-signed cert.
    # uaa:
    #   ca_file: /path/to/ca

    その後、sh ./install.shを実行してインストールを完了します.
    harborにプロジェクトを新規作成します.次に、ミラーリングルールをローカルでパッケージ化します.
    docker tag SOURCE_IMAGE[:TAG] 10.10.50.223:8080/bison/IMAGE[:TAG]
    
    docker push 10.10.50.223:8080/bison/IMAGE[:TAG]

    ここで、10.10.50.223:8080は、上のharbor.ymlに配置されたアドレスである
    次に、ネイティブで実行します.
    #   docker
    sudo docker login http://10.10.50.223:8080
    #         
    #   
    sudo docker push 10.10.50.223:8080/bison/es:6.4.2

    ここではよく新聞を出します.
    [yuanyanan@Ttiku-010010200220 ~]$ sudo docker push 10.10.50.223:8080/bison-es/es-ik:6.4.2
    The push refers to a repository [10.10.50.223:8080/bison-es/es-ik]
    45190510fdd6: Preparing 
    75cb4181ad1e: Preparing 
    771ce2b150d1: Preparing 
    f9b080244fb4: Preparing 
    0af34ebb2c89: Preparing 
    c6b3c248c0ea: Waiting 
    232c7039f829: Waiting 
    09b60d1d72bf: Waiting 
    d1d12d748b81: Waiting 
    6683a9074c03: Waiting 
    29cc52c85180: Waiting 
    1d31b5806ba4: Waiting 
    unauthorized: authentication required

    この問題はログインに失敗しただけで、docker権限があるかどうか、アカウントのパスワードが間違っているかどうかを確認する必要があります.
    転載先:https://www.cnblogs.com/quehuitou/p/11282468.html