Harbor镜像仓库搭建

1、安装底层需求

• ​ Python应该是2.7或更高版本
• ​ Docker引擎应为1.10或更高版本
• ​ DockerCompose需要为1.6.0或更高版本

2、Harbor安装

Harbor 官方地址：

​ https://github.com/vmware/harbor/releases

配置harbor.yml

$ tar -zxvf harbor-online-installer-v2.5.2.tgz  #采用在线安装
$ cd harbor && vim harbor.yml
...
hostname: harbor.registry.com  #目标的主机名或者完全限定域名
http:                          #默认http协议，如果https能用，可自动跳转https
  port: 80                     #对外访问端口

#https: #https需要证书可先注释
# port: 443 
# certificate: /your/certificate/path #证书存放路径
# private_key: /your/private/key/path #私钥存放路径
...
harbor_admin_password: Harbor12345  #登录harbor默认密码
database:
  password: root123  #数据库默认连接密码
....
data_volume: /data   #设置Harbor的数据存放目录
...
log:                 #设置日志相关信息
  level: info        #设置日志级别
  local:
    rotate_count: 50   #日志保留个数
    rotate_size: 200M  #每个日志大小
    location: /var/log/harbor  #日志存放路径
    
$  ./install.sh
[Step 4]: starting Harbor ...
.....
 ----Harbor has been installed and started successfully.----  #表示搭建成功

使用命令行登陆Harbor，并上传镜像和下载镜像

由于docker拉取镜像默认是https协议，我们需要在/etc/docker/daemon.json中配置insecure-registries.
{
    "insecure-registries": ["harbor.registry.com"] }

$ cat /etc/hosts
127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
170.18.9.141 harbor.registry.com

$ systemctl restart docker

$ docker login harbor.registry.com   #登录仓库,认证信息保留在/家目录下/.docker/config.json文件中
Username: admin
Password: 
WARNING! Your password will be stored unencrypted in /root/.docker/config.json.
Configure a credential helper to remove this warning. See
https://docs.docker.com/engine/reference/commandline/login/#credentials-store

Login Succeeded
#给镜像打上符合仓库的标签镜像
$ docker tag nginx:latest harbor.registry.com/library/nginx:v1 
#推送镜像
$ docker push harbor.registry.com/library/nginx:v1
The push refers to repository [harbor.registry.com/library/nginx]
e7344f8a29a3: Pushed 
44193d3f4ea2: Pushed 
41451f050aa8: Pushed 
b2f82de68e0d: Pushed 
d5b40e80384b: Pushed 
08249ce7456a: Pushed 
v1: digest: sha256:3536d368b898eef291fb1f6d184a95f8bc1a6f863c48457395aab859fda354d1 size: 1570

配置Harbor的HTTPS访问

参考栈内文章自制https证书，生成证书后，放入harbor.yml配置文件的中certificate，private_key参数对应的路径下即可。