Docker安装Harbor私有镜像仓库

1.安装docker环境#

1. 安装／升级Docker客户端

   仅适用于公网环境

   1
   curl -fsSL https://get.docker.com | bash -s docker --mirror Aliyun

2. 配置镜像加速器

   去阿里云控制台-容器镜像服务-镜像加速器-找到你的加速地址

   1
   sudo mkdir -p /etc/docker
   2
   sudo tee /etc/docker/daemon.json <<-'EOF'
   3
   {
   4
     "registry-mirrors": ["https://xxxx.mirror.aliyuncs.com"]
   5
   }
   6
   EOF
   7
   sudo systemctl daemon-reload
   8
   sudo systemctl restart docker

2.申请(免费)证书#

自己申请

证书pem转crt

1
openssl x509 -in xxx.pem -out xxx.crt

3.域名解析#

自己申请域名 自己解析

4.安装Docker-compose#

1. 去github下载最新安装文件

2. 移动并授权

   1
   cp docker-compose-linux-x86_64 /usr/local/bin/
   2
   cd /usr/local/bin
   3
   mv docker-compose-linux-x86_64 docker-compose
   4
   chmod +x docker-compose
   5
   docker-compose --version

5.安装Harbor#

1. 下载并上传证书到服务器

2. 下载在线安装包并解压

   1
   yum install -y wget
   2
   wget https://github.com/goharbor/harbor/releases/download/v2.4.1/harbor-online-installer-v2.4.1.tgz
   3
   tar -xvf harbor-online-installer-v2.4.1.tgz

3. 配置Harbor

   cd 到解压后的文件夹

   • 复制一份配置文件

     1
     cp harbor.yml.tmpl harbor.yml

   • 编辑配置文件

     1
     vim harbor.yml

     1
     # Configuration file of Harbor
     2
     
     3
     # The IP address or hostname to access admin UI and registry service.
     4
     # DO NOT use localhost or 127.0.0.1, because Harbor needs to be accessed by external clients.
     5
     hostname: 你的harbor域名
     6
     
     7
     # http related config
     8
     http:
     9
       # port for http, default is 80. If https enabled, this port will redirect to https port
     10
       port: 80
     11
     
     12
     # https related config
     13
     https:
     14
       # https port for harbor, default is 443
     15
       port: 443
     16
       # The path of cert and key files for nginx
     17
       certificate: pem或crt文件的路径
     18
       private_key: key文件的路径
     19
     
     20
     # # Uncomment following will enable tls communication between all harbor components
     21
     # internal_tls:
     22
     #   # set enabled to true means internal tls is enabled
     23
     #   enabled: true
     24
     #   # put your cert and key files on dir
     25
     #   dir: /etc/harbor/tls/internal
     26
     
     27
     # Uncomment external_url if you want to enable external proxy
     28
     # And when it enabled the hostname will no longer used
     29
     # external_url: https://reg.mydomain.com:8433
     30
     
     31
     # The initial password of Harbor admin
     32
     # It only works in first time to install harbor
     33
     # Remember Change the admin password from UI after launching Harbor.
     34
     harbor_admin_password: Harbor12345
     35
     
     36
     # Harbor DB configuration
     37
     database:
     38
       # The password for the root user of Harbor DB. Change this before any production use.
     39
       password: 最好改一下
     40
       # The maximum number of connections in the idle connection pool. If it <=0, no idle connections are retained.
     41
       max_idle_conns: 100
     42
       # The maximum number of open connections to the database. If it <= 0, then there is no limit on the number of open connections.
     43
       # Note: the default number of connections is 1024 for postgres of harbor.
     44
       max_open_conns: 900

     展开收起

   • 启动

     1
     ./install.sh

   安装完成后访问https://你的域名

   默认账号密码/Harbor12345