docker安装harbor镜像仓库

• 配置SSL
  • 生成ca&server证书
    生成SSL认证证书
  • mkdir -p /etc/docker/certs.d/harbor.${domain}
  • cp /home/certs/ca.crt /etc/docker/certs.d/harbor.${domain}

# 访问harbor的docker配置
    /etc/docker/certs.d/
        └── harbor.${domain}:port
           └── ca.crt     <-- Certificate authority that signed the registry certificate

export domain=do.io

• 下载

cd ${data}
wget https://github.com/goharbor/harbor/releases/download/v2.0.0/harbor-offline-installer-v2.0.0.tgz

• 解压

tar xvf harbor-offline-installer-v2.0.0.tgz
cd harbor
docker load -i ./harbor.v2.0.0.tar.gz

• 配置
  • config.yml

    cp harbor.yml.tmpl harbor.yml
    # hostname        
    sed -i "s#hostname:.*#hostname: harbor.${domain}#" harbor.yml
    # SSL验证
    sed -i "s#certificate:.*#certificate: /home/certs/${domain}.cert#"  harbor.yml
    sed -i "s#private_key:.*#private_key: /home/certs/${domain}.key#"  harbor.yml
    # 数据目录
    sed -i "s#data_volume.*#data_volume: ${data}/hbdata#"  harbor.yml
    

• 安装

  ./prepare
  

• 配置

  sed -i "s#: nginx#: nginx_harbor#" docker-compose.yml
  sed -i "s#\"proxy\"#\"nginx\"#" docker-compose.yml
  # 修改端口映射
  sed -i "s#80:8080#8080:8080#g" docker-compose.yml
  

• 运行

  docker-compose up -d
  

• 测试

  docker login -u admin -p Harbor12345 harbor.${domain}
  

• 管理
  • 登录 admin Harbor12345
• 日志

tail /var/log/harbor/xxx.log