harbor 离线同步

场景
客户环境为离线环境，只能把公司私服的镜像下载后，然后通过客户端中转传到客户的私服上

客户端在客户内网中，然后拨号到公司的内网

#!/bin/bash
# harbor的url
URL="https://10.27.6.59:31009/"

# 源harbor的ip加端口
SIP="10.27.6.59:31009"
# 目标harbor的ip加端口
TIP="172.16.104.111:443"
# 调用脚本时输入的源project名称
SPROJECT="20220722"
TPROJECT="library"


# 源harbor登陆用户名/密码
SUSER="beijing"
SPASS="XXXXXXXX"

# 目标harbor登陆用户名/密码
TUSER="admin"
TPASS="XXXXXXXX"

#添加服务器地址
cat /etc/docker/daemon.json | grep ${SIP}
if [ $? -eq 1 ];then
eval sed -i  's#]#,\"${SIP}\"]#g' /etc/docker/daemon.json
fi


cat /etc/docker/daemon.json | grep ${TIP}
if [ $? -eq 1 ];then
eval sed -i  's#]#,\"${TIP}\"]#g' /etc/docker/daemon.json
fi

systemctl restat docker

# 登录源harbor
docker login -u $SUSER -p $SPASS $SIP

# 登录目标harbor
docker login -u $TUSER -p $TPASS $TIP


# 提前设置的变量，无需修改
SAVE=""
DATE=$(date "+%Y%m%d")

#获取每个服务镜像的仓库地址，注意这里的page_size尽量选择你镜像的数量，因为主要是卡一整页内所有镜像名称
REPOS=$( curl -u ${SUSER}:${SPASS} -k --cert /etc/docker/certs.d/ca.crt -X GET -H "accept: application/json" "${URL}/api/v2.0/projects/${SPROJECT}/repositories?page_size=50" |python -m json.tool| grep \"name\" | awk -F '"' '{print $4}' | awk -F '/' '{print $2}')
echo ${REPOS} 

# 循环遍历所有image的所有tag
for rp in ${REPOS}
do
  #获取每个镜像的所有tag，同样注意修改page_size
  TAGS=$( curl  -u ${SUSER}:${SPASS}  -k --cert /etc/docker/certs.d/ca.crt -X GET -H "accept: application/json" "${URL}/api/v2.0/projects/${SPROJECT}/repositories/${rp}/artifacts?with_tag=true&with_label=false&with_scan_overview=false&with_signature=false&with_immutable_status=false&page_size=50" |python -m json.tool| grep \"name\" | awk -F '"' '{print $4}' )
    for t in ${TAGS}
    do
        SIMAGE=${SIP}"/"${SPROJECT}"/"${rp}:${t}
        TIMAGE=${TIP}"/"${TPROJECT}"/"${rp}:${t}
        docker pull ${SIMAGE}
        docker tag  ${SIMAGE} ${TIMAGE}
#	    docker rmi  ${SIMAGE}
	    docker push ${TIMAGE}
        echo "${SIMAGE}"
        SAVE="${SAVE} ${SIMAGE}"
    done
    echo "===================="
done
echo ${SAVE}
#保存，导出
#mkdir -p ./export
#docker save ${SAVE} > ./export/${SPROJECT}"_"${DATE}.tar