创建基于harbor的docker仓库

1.升级系统并重启

yum update -y && reboot

# 安装docker最新版

yum install -y yum-utils

yum-config-manager --add-repo https://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo

yum install -y docker-ce

网络环境的配置(docker,yum和/etc/profile)

/etc/yum.conf

proxy=http://10.11.0.148:808

/etc/profile

export ftp_proxy=http://10.11.0.148:808

export socks_proxy="socks://10.11.0.148:808/"

export http_proxy=http://10.11.0.148:808

export https_proxy=https://10.11.0.148:808

# 添加docker下载软件的代理

mkdir /etc/systemd/system/docker.service.d

vim /etc/systemd/system/docker.service.d/http-proxy.conf

[Service]

Environment="HTTP_PROXY=http://10.11.0.148:808"

# 设置统一时间

timedatectl set-ntp no

timedatectl set-time '2020-08-05 11:58:08'

# docker基础配置

mkdir /data/docker

10.11.0.208

 [root@server03 ~]# cat /etc/docker/daemon.json

{

  "graph": "/data/docker",

  "storage-driver": "overlay2",

  "insecure-registries": ["registry.access.redhat.com","quay.io","harbor.chinasoft.com"],

  "registry-mirrors": ["https://q2gr04ke.mirror.aliyuncs.com"],

  "bip": "172.7.208.1/24",

  "exec-opts": ["native.cgroupdriver=systemd"],

  "live-restore": true

}

10.11.0.209

[root@server04 ~]# cat /etc/docker/daemon.json

{

  "graph": "/data/docker",

  "storage-driver": "overlay2",

  "insecure-registries": ["registry.access.redhat.com","quay.io","harbor.chinasoft.com"],

  "registry-mirrors": ["https://q2gr04ke.mirror.aliyuncs.com"],

  "bip": "172.7.209.1/24",

  "exec-opts": ["native.cgroupdriver=systemd"],

  "live-restore": true

}

10.11.0.210

[root@server05 ~]# cat /etc/docker/daemon.json

{

  "graph": "/data/docker",

  "storage-driver": "overlay2",

  "insecure-registries": ["registry.access.redhat.com","quay.io","harbor.chinasoft.com"],

  "registry-mirrors": ["https://q2gr04ke.mirror.aliyuncs.com"],

  "bip": "172.7.210.1/24",

  "exec-opts": ["native.cgroupdriver=systemd"],

  "live-restore": true

}

镜像存储的地方也可以这么配置

# more /etc/docker/daemon.json
{
  "data-root": "/data/docker",
  "log-driver": "json-file",
  "log-opts": {"max-size": "100m", "max-file": "3"}
}

私有镜像仓库部署

tar xf harbor-offline-installer-v1.8.3.tgz -C /usr/local/

cd /usr/local/

mv harbor harbor-v1.8.3

# 生成软连接，方便升级

ln -s harbor-v1.8.3 harbor

配置

安装依赖

# yum install docker-compose -y

修改配置

# vim /usr/local/harbor/harbor.yml

hostname: harbor.chinasoft.com

http:

  port: 180

harbor_admin_password: harbor123456

database:

  password: root123

data_volume: /data/harbor

log:

  location: /data/harbor/log

_version: 1.8.0

执行安装

# ./install.sh

安装nginx作为harbor的前端反向代理

# yum install -y nginx

[root@server05 ~]# cat /etc/nginx/conf.d/harbor.chinasoft.com.conf

server {

                listen 80;

                server_name harbor.chinasoft.com;

                client_max_body_size 1000m;

                location / {

                                proxy_pass http://127.0.0.1:180;

                }

}

# 启动nginx

[root@server05 ~]# systemctl start nginx

[root@server05 ~]# systemctl enable nginx

# 添加内部dns解析server01:10.11.0.206

注意修改serial

[root@server01 ~]# vim /var/named/chinasoft.com.zone

登录admin/harbor123456

# 下载nginx镜像，并且打上标签，推送到我们的私有仓库中

[root@server05 ~]# docker pull nginx

[root@server05 ~]# docker tag 4bb46517cac3 harbor.chinasoft.com/public/nginx:v1.7.9

[root@server05 ~]# docker login harbor.chinasoft.com

Username: admin

Password:

WARNING! Your password will be stored unencrypted in /root/.docker/config.json.

Configure a credential helper to remove this warning. See

https://docs.docker.com/engine/reference/commandline/login/#credentials-store

Login Succeeded

[root@server05 ~]# docker push harbor.chinasoft.com/public/nginx:v1.7.9