一、harbor搭建
前提
docker已经安装完毕
1.查看安装版本
root@master:~# docker info
Containers: 36
Running: 19
Paused: 0
Stopped: 17
Images: 15
Server Version: 17.12.1-ce
Storage Driver: overlay2
Backing Filesystem: extfs
Supports d_type: true
Native Overlay Diff: true
Logging Driver: json-file
Cgroup Driver: cgroupfs
Plugins:
Volume: local
Network: bridge host macvlan null overlay
Log: awslogs fluentd gcplogs gelf journald json-file logentries splunk syslog
Swarm: inactive
Runtimes: runc
Default Runtime: runc
Init Binary: docker-init
containerd version: 9b55aab90508bd389d7654c4baf173a981477d55
runc version: 9f9c96235cc97674e935002fc3d78361b696a69e
init version: v0.13.0 (expected: 949e6facb77383876aeff8a6944dde66b3089574)
Security Options:
apparmor
seccomp
Profile: default
Kernel Version: 5.8.0-43-generic
Operating System: Ubuntu 20.04.2 LTS
OSType: linux
Architecture: x86_64
CPUs: 8
Total Memory: 7.774GiB
Name: master
ID: VM7X:I7P6:3E5G:WXHB:XR34:E53E:QHY5:ICU7:WMGB:FPJ4:JPEY:KHLH
Docker Root Dir: /var/lib/docker
Debug Mode (client): false
Debug Mode (server): false
Registry: https://index.docker.io/v1/
Labels:
Experimental: false
Insecure Registries:
master:5000
127.0.0.0/8
Registry Mirrors:
https://7hgbbnxx.mirror.aliyuncs.com/
Live Restore Enabled: false
2、查看加速仓库
root@master:~# cat /etc/docker/daemon.json { "registry-mirrors": ["https://7hgbbnxx.mirror.aliyuncs.com"], "insecure-registries":["master:5000"] } root@master:~#
1、安装docker-compose
1.1查看docker-compose版本
https://github.com/docker/compose/
1.2下载安装包
wget https://github.com/docker/compose/releases/download/1.29.2/docker-compose-$(uname -s)-$(uname -m)
1.3线下安装
mv docker-compose-Linux-x86_64 /usr/local/bin/docker-compose chmod +x /usr/local/bin/docker-compose ln -s /usr/local/bin/docker-compose /usr/bin/docker-compose
1.4查看安装版本
root@master:/usr/bin# docker-compose --version docker-compose version 1.29.2, build 5becea4c
2、下载harbor包
2.1查看harbor包
https://github.com/goharbor/harbor/releases
2.2下载harbor包
wget https://github.com/goharbor/harbor/releases/download/v2.1.3/harbor-offline-installer-v2.1.3.tgz
2.3解压安装包
tar -zxvf harbor-offline-installer-v2.1.3.tgz -C /usr/local/
2.4修改yml文件
hostname = 192.168.100.204 #修改harbor的启动ip，这里需要依据系统ip设置 port: 80 #harbor的端口,有两个端口,http协议(80)和https协议(443) harbor_admin_password = harbor12345 #修改harbor的admin用户的密码 data_volume: /harbor/data #修改harbor存储位置
2.5安装
root@master:/k8s/pod/image/harbor# ./prepare prepare base dir is set to /k8s/pod/image/harbor Unable to find image 'goharbor/prepare:v2.3.1' locally v2.3.1: Pulling from goharbor/prepare 2f0af7491ce3: Pull complete 7dd5e4229ec6: Pull complete cda5f8f8a1f8: Pull complete 3404538ae5c9: Pull complete 991d1829b2c3: Pull complete 73acb2531ec7: Pull complete 52707cc5b93e: Pull complete 3104331c643d: Pull complete Digest: sha256:ad8c463ad05e7c16c9ffd518704ce32e5361effa18c467317b87446aac0199f0 Status: Downloaded newer image for goharbor/prepare:v2.3.1 WARNING:root:WARNING: HTTP protocol is insecure. Harbor will deprecate http protocol in the future. Please make sure to upgrade to https Generated configuration file: /config/portal/nginx.conf Generated configuration file: /config/log/logrotate.conf Generated configuration file: /config/log/rsyslog_docker.conf Generated configuration file: /config/nginx/nginx.conf Generated configuration file: /config/core/env Generated configuration file: /config/core/app.conf Generated configuration file: /config/registry/config.yml Generated configuration file: /config/registryctl/env Generated configuration file: /config/registryctl/config.yml Generated configuration file: /config/db/env Generated configuration file: /config/jobservice/env Generated configuration file: /config/jobservice/config.yml Generated and saved secret to file: /data/secret/keys/secretkey Successfully called func: create_root_cert Generated configuration file: /compose_location/docker-compose.yml Clean up the input dir
./install.sh Creating network "harbor_harbor" with the default driver Creating harbor-log ... done Creating harbor-db ... done Creating harbor-portal ... done Creating registry ... done Creating redis ... done Creating registryctl ... done Creating harbor-core ... done Creating nginx ... done Creating harbor-jobservice ... done ✔ ----Harbor has been installed and started successfully.----
2.6登录
2.7 设置开机自启文件
[Unit] Description=Harbor After=docker.service systemd-networkd.service systemd-resolved.service Requires=docker.service Documentation=http://github.com/vmware/harbor [Service] Type=simple Restart=on-failure RestartSec=5 #需要注意harbor的安装位置 ExecStart=/usr/bin/docker-compose -f /k8s/harbor/harbor/docker-compose.yml up ExecStop=/usr/bin/docker-compose -f /k8s/harbor/harbor/docker-compose.yml down [Install] WantedBy=multi-user.target
2.8设置开机自启
systemctl enable harbor
错误解决方案
1、错误：ssl_cert not set
harbor.yml文件中关于https内容隐去
2、 harbor-db 启动时报initdb: directory "/var/lib/postgresql/data" exists but is not empty
找到docker-compose.yml
删除database下东西
再将容器删除docker-compose down ，docker-compose up -d ，将容器重启，发现harbor-db启动成功了
3、harbor-db启动报initdb: could not change permissions of directory "/var/lib/postgresql/data": Operation not permitted
法一：查看database权限，并修改
法二：修改yml文件挂载路径（harbor.yml）
2.9查看启动状况
[root@node harbor]# docker-compose ps Name Command State Ports ------------------------------------------------------------------------------------------------------ harbor-core /harbor/entrypoint.sh Up (health: starting) harbor-db /docker-entrypoint.sh 96 13 Up (health: starting) harbor-jobservice /harbor/entrypoint.sh Up (health: starting) harbor-log /bin/sh -c /usr/local/bin/ ... Up (healthy) 127.0.0.1:1514->10514/tcp harbor-portal nginx -g daemon off; Up (health: starting) nginx nginx -g daemon off; Up (health: starting) 0.0.0.0:8080->8080/tcp redis redis-server /etc/redis.conf Up (health: starting) registry /home/harbor/entrypoint.sh Up (health: starting) registryctl /home/harbor/start.sh Up (health: starting)
二、registry搭建
前提
docker 环境已经安装完成
1、下载registry镜像
docker pull registry
2、运行一个Registry镜像仓库的容器实例
docker run -d -v /registry:/var/lib/registry -p 5000:5000 --restart=always --name registry registry:latest
-d ：代表后台运行
-v：代表将本地目录与仓库目录关联
-p：代表映射的端口
--restart：代表一直启动
--name：代表仓库名字
最后一个代表仓库镜像
3、在客户端查看镜像仓库中的所有镜像
curl http://your-server-ip:5000/v2/_catalog
4、设置配置私有仓库的可信任
vim /etc/docker/daemon.json { "insecure-registries" : [ "your-server-ip:5000" ] }
5、启动docker服务
systemctl restart docker
6、为镜像打标签
docker tag your-image-name:tagname your-server-ip:5000/your-image-name:tagname
7、上传镜像
docker push your-registry-server-ip:5000/your-image-name:tagname
8、下载镜像
docker pull your-server-ip:5000/your-image-name:tagname