docker部署Harbor

随便投投

已于 2022-08-14 00:16:06 修改

阅读量805

点赞数

分类专栏： Docker 文章标签： docker linux 运维

于 2022-08-12 11:25:05 首次发布

本文链接：https://blog.csdn.net/ZJunWhite/article/details/126300696

版权

Docker 专栏收录该内容

6 篇文章 0 订阅

订阅专栏

docker部署Harbor

文章目录

Harbor简介

Harbor是一个用于存储和分发Docker镜像的企业级Registry服务器，可以用来构建企业内部的Docker镜像仓库。
它在Docker的开源项目 Distribution的基础上，添加了一些企业需要的功能特性，如镜像同步复制、漏洞扫描和权限管理等。

部署harbor

安装harhor compose

//将提前下载好的包拉进来
[root@localhost ~]# ls
anaconda-ks.cfg  docker-compose-linux-x86_64  httpd_html  runtime.gz

//修改名字并放在指定目录下
[root@localhost ~]# mv docker-compose-linux-x86_64 /usr/bin/docker-compose/

//添加执行权限
[root@localhost bin]# chmod +x docker-compose 
[root@localhost bin]# docker-compose -v
Docker Compose version v2.7.0

部署Harbor

//将提前下载好的压缩包拉进来
[root@localhost ~]# ls
anaconda-ks.cfg  harbor-offline-installer-v2.4.3.tgz  httpd_html  runtime.gz

//压缩到/usr/local目录下
[root@localhost ~]# tar xf harbor-offline-installer-v2.4.3.tgz -C /usr/local/
[root@localhost ~]# cd /usr/local/harbor/
[root@localhost harbor]# ls
LICENSE    harbor.v2.4.3.tar.gz  install.sh
common.sh  harbor.yml.tmpl       prepare

//修改配置文件
[root@localhost harbor]# vim harbor.yml.tmpl 
hostname: localhost  //修改成本主机名
# https related config  //全部注释没有https
#https:
  # https port for harbor, default is 443
#  port: 443
  # The path of cert and key files for nginx
#  certificate: /your/certificate/path
#  private_key: /your/private/key/path

[root@localhost harbor]# cp harbor.yml.tmpl harbor.yml
[root@localhost harbor]# ls
LICENSE    harbor.v2.4.3.tar.gz  harbor.yml.tmpl  prepare
common.sh  harbor.yml            install.sh

//安装
[root@localhost harbor]# ./install.sh 
[root@localhost harbor]# docker ps -a
CONTAINER ID   IMAGE                                COMMAND                  CREATED         STATUS                    PORTS                                   NAMES
07f3d9235e7f   goharbor/harbor-jobservice:v2.4.3    "/harbor/entrypoint.…"   3 minutes ago   Up 3 minutes (healthy)                                            harbor-jobservice
695eab7ea162   goharbor/nginx-photon:v2.4.3         "nginx -g 'daemon of…"   3 minutes ago   Up 3 minutes (healthy)    0.0.0.0:80->8080/tcp, :::80->8080/tcp   nginx
a379a8ccdea9   goharbor/harbor-core:v2.4.3          "/harbor/entrypoint.…"   3 minutes ago   Up 3 minutes (healthy)                                            harbor-core
2d55ff6bc175   goharbor/registry-photon:v2.4.3      "/home/harbor/entryp…"   3 minutes ago   Up 3 minutes (healthy)                                            registry
6a00f1bfc58c   goharbor/harbor-portal:v2.4.3        "nginx -g 'daemon of…"   3 minutes ago   Up 3 minutes (healthy)                                            harbor-portal
4f1f6c1c8d37   goharbor/redis-photon:v2.4.3         "redis-server /etc/r…"   3 minutes ago   Up 3 minutes (healthy)                                            redis
878ebdb9e103   goharbor/harbor-db:v2.4.3            "/docker-entrypoint.…"   3 minutes ago   Up 3 minutes (healthy)                                            harbor-db
e6357fdcb967   goharbor/harbor-registryctl:v2.4.3   "/home/harbor/start.…"   3 minutes ago   Up 3 minutes (healthy)                                            registryctl
63b3b96042dc   goharbor/harbor-log:v2.4.3           "/bin/sh -c /usr/loc…"   3 minutes ago   Up 3 minutes (healthy)    127.0.0.1:1514->10514/tcp               harbor-log
0764ac9c4e2b   zjunwhite/httpd:v0.1                 "/bin/bash"              22 hours ago    Created                                                           test2
d6e228d4ece3   zjunwhite/httpd:v0.1                 "/bin/bash"              2 days ago      Exited (0) 2 days ago                                             t1
60baa880cf17   5d0da3dc9764                         "/bin/bash"              2 days ago      Exited (0) 14 hours ago                                           httpd

//查看端口
[root@localhost harbor]# ss -antl
State      Recv-Q     Send-Q         Local Address:Port         Peer Address:Port     Process     
LISTEN     0          128                127.0.0.1:1514              0.0.0.0:*                    
LISTEN     0          128                  0.0.0.0:80                0.0.0.0:*                    
LISTEN     0          128                  0.0.0.0:22                0.0.0.0:*                    
LISTEN     0          128                     [::]:80                   [::]:*                    
LISTEN     0          128                     [::]:22                   [::]:*  

//设置容器开机自启
[root@localhost harbor]# vim /etc/rc.local 
#!/bin/bash  //添加下面两行
cd /usr/local/harbor 
docker-compose start

//添加执行权限
[root@localhost harbor]# ll /etc/rc.d/rc.local 
-rw-r--r--. 1 root root 516 Aug 12 11:02 /etc/rc.d/rc.local
[root@localhost harbor]# chmod +x /etc/rc.d/rc.local

浏览器访问：用户名与密码可在harbor.yml配置文件中找到，修改密码的话也在这里面改

重启查看开机自启是否生效

[root@localhost ~]# docker ps
CONTAINER ID   IMAGE                                COMMAND                  CREATED          STATUS                    PORTS                                   NAMES
07f3d9235e7f   goharbor/harbor-jobservice:v2.4.3    "/harbor/entrypoint.…"   19 minutes ago   Up 38 seconds (healthy)                                           harbor-jobservice
695eab7ea162   goharbor/nginx-photon:v2.4.3         "nginx -g 'daemon of…"   19 minutes ago   Up 38 seconds (healthy)   0.0.0.0:80->8080/tcp, :::80->8080/tcp   nginx
a379a8ccdea9   goharbor/harbor-core:v2.4.3          "/harbor/entrypoint.…"   19 minutes ago   Up 38 seconds (healthy)                                           harbor-core
2d55ff6bc175   goharbor/registry-photon:v2.4.3      "/home/harbor/entryp…"   19 minutes ago   Up 38 seconds (healthy)                                           registry
6a00f1bfc58c   goharbor/harbor-portal:v2.4.3        "nginx -g 'daemon of…"   19 minutes ago   Up 38 seconds (healthy)                                           harbor-portal
4f1f6c1c8d37   goharbor/redis-photon:v2.4.3         "redis-server /etc/r…"   19 minutes ago   Up 37 seconds (healthy)                                           redis
878ebdb9e103   goharbor/harbor-db:v2.4.3            "/docker-entrypoint.…"   19 minutes ago   Up 38 seconds (healthy)                                           harbor-db
e6357fdcb967   goharbor/harbor-registryctl:v2.4.3   "/home/harbor/start.…"   19 minutes ago   Up 38 seconds (healthy)                                           registryctl
63b3b96042dc   goharbor/harbor-log:v2.4.3           "/bin/sh -c /usr/loc…"   19 minutes ago   Up 38 seconds (healthy)   127.0.0.1:1514->10514/tcp               harbor-log

docker compose编排容器

//停止harbor中的几台容器，模拟容器故障
[root@localhost harbor]# docker stop 07f3d9235e7f
07f3d9235e7f
[root@localhost harbor]# docker stop 695eab7ea162
695eab7ea162

浏览器中已经不能访问了

//使用docker-compose restar命令编排重启harbor
[root@localhost harbor]# docker-compose restart
[+] Running 9/9
 ⠿ Container harbor-log         Started                                                     10.5s
 ⠿ Container registryctl        Started                                                     10.9s
 ⠿ Container redis              Started                                                      1.2s
 ⠿ Container registry           Started                                                      1.2s
 ⠿ Container harbor-portal      Started                                                      1.2s
 ⠿ Container harbor-db          Started                                                     10.9s
 ⠿ Container harbor-core        Started                                                      0.4s
 ⠿ Container harbor-jobservice  Started                                                      0.5s
 ⠿ Container nginx              Started                                                      0.7s

再去浏览器访问又可以访问了

Harbor应用

部署客户端访问harbor

//将harbor服务端的主机域名映射
[root@localhost ~]# cd /usr/local/harbor/
[root@localhost harbor]# vim /etc/hosts
192.168.192.129 localhost.localdomain

//测试能否ping通
[root@localhost harbor]# ping localhost.localdomain 
PING localhost.localdomain(localhost (::1)) 56 data bytes
64 bytes from localhost (::1): icmp_seq=1 ttl=64 time=0.017 ms
64 bytes from localhost (::1): icmp_seq=2 ttl=64 time=0.025 ms
^C
--- localhost.localdomain ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1042ms
rtt min/avg/max/mdev = 0.017/0.021/0.025/0.004 ms

//使用insecure-registries参数添加http支持
[root@localhost harbor]# vim /etc/docker/daemon.json
{
                  "registry-mirrors": ["https://gxroeyl8.mirror.aliyuncs.com"],
                  "insecure-registries": ["192.168.192.129"]
}                 

//重启docker
[root@localhost harbor]# systemctl daemon-reload
[root@localhost harbor]# systemctl restart docker.service

//登录harbor
[root@localhost harbor]# docker login 192.168.192.129
Username: admin
Password: 
WARNING! Your password will be stored unencrypted in /root/.docker/config.json.
Configure a credential helper to remove this warning. See
https://docs.docker.com/engine/reference/commandline/login/#credentials-store

Login Succeeded

//修改镜像名标签，上传镜像
[root@localhost harbor]# docker images
REPOSITORY                      TAG       IMAGE ID       CREATED         SIZE
zjunwhite/httpd                 v0.1      e11bc12ce351   4 days ago      671MB
[root@localhost harbor]# docker tag zjunwhite/httpd:v0.1 192.168.192.129/library/httpd:v0.1
[root@localhost harbor]# docker images
REPOSITORY                      TAG       IMAGE ID       CREATED         SIZE
192.168.192.129/library/httpd   v0.1      e11bc12ce351   4 days ago      671MB
[root@localhost harbor]# docker push 192.168.192.129/library/httpd:v0.1 
The push refers to repository [192.168.192.129/library/httpd]
c46c49bd686d: Pushed 
74ddd0ec08fa: Pushed 
v0.1: digest: sha256:44951d9ac847799cafe2a549bb038c1c94190d28fd397e7a42aee412e41de28c size: 742