构建docker企业私有仓库及Harbor实战

环境：
一台正常的docker服务器

一、pull仓库软件 - registry

[root@localhost ~]# docker pull docker.io/registry
Using default tag: latest
Trying to pull repository docker.io/library/registry ... 
latest: Pulling from docker.io/library/registry
cbdbe7a5bc2a: Pull complete 
47112e65547d: Pull complete 
46bcb632e506: Pull complete 
c1cc712bcecd: Pull complete 
3db6272dcbfa: Pull complete 
Digest: sha256:8be26f81ffea54106bae012c6f349df70f4d5e7e2ec01b143c46e2c03b9e551d
Status: Downloaded newer image for docker.io/registry:latest

[root@localhost ~]# docker images|grep registry
docker.io/registry   latest              2d4f4b5309b1        7 weeks ago         26.2 MB

二、新建仓库目录

[root@localhost ~]# mkdir -p /data/registry

三、启动仓库

[root@localhost ~]# docker run -itd --privileged -p 5000:5000 -v /data/registry:/var/lib/registry --restart=always --name=registry_5000port  docker.io/registry
ab497e98b8a09a5984e444e82046391ee70b343f2e1eaf2b2f42ffcac8310e0c

测试器测试结果

四、客户端配置仓库

vim /etc/sysconfig/docker
–insecure-registry 192.168.1.12:5000

[root@localhost ~]# vim /etc/sysconfig/docker
# /etc/sysconfig/docker

# Modify these options if you want to change the way the docker daemon runs
OPTIONS='--selinux-enabled --log-driver=journald --signature-verification=false --insecure-registry 192.168.1.12:5000'
if [ -z "${DOCKER_CERT_PATH}" ]; then
    DOCKER_CERT_PATH=/etc/docker
fi
#

五、客户端上传、下载镜像

上传一个centos8镜像至仓库

1、伪装 - 改tag信息

[root@localhost ~]# docker images|grep centos6
centos6_ssh          latest              efd998bd6817        6 years ago         297 MB

[root@localhost ~]# docker tag efd998bd6817 192.168.1.12:5000/centos6_ssh
[root@localhost ~]# docker images|grep centos6                           
192.168.1.12:5000/centos6_ssh   latest              efd998bd6817        6 years ago         297 MB
centos6_ssh                     latest              efd998bd6817        6 years ago         297 MB

2、上传 - push

[root@localhost ~]# docker push 192.168.1.12:5000/centos6_ssh
The push refers to a repository [192.168.1.12:5000/centos6_ssh]
5f70bf18a086: Pushed 
5dde9e7abaae: Pushed 
0d2c9d3bef41: Pushed 
26231980c1a5: Pushed 
7ec2a9eb1017: Pushed 
29e0db08def6: Pushed 
9225ac3d0295: Pushed 
0f26de94dce0: Pushed 
821f107b9dc4: Pushed 
latest: digest: sha256:18d681aed592b9061e6358645e1c4d0f46a4b80a63f1628f63bdf7aa6b42f3e2 size: 3019

3、在服务器端查看上传结果

[root@localhost ~]# ls /data/registry/docker/registry/v2/repositories/
centos6_ssh
[root@localhost ~]# curl -XGET http://192.168.1.12:5000/v2/_catalog
{"repositories":["centos6_ssh"]}
[root@localhost ~]# 
[root@localhost ~]# curl -XGET http://192.168.1.12:5000/v2/centos6_ssh/tags/list
{"name":"centos6_ssh","tags":["latest"]}

4、下载 pull

[root@localhost ~]# docker pull 192.168.1.12:5000/centos6_ssh:latest
Trying to pull repository 192.168.1.12:5000/centos6_ssh ... 
latest: Pulling from 192.168.1.12:5000/centos6_ssh
4f4fb700ef54: Pull complete 
22aa74e407fb: Pull complete 
af486a0a979b: Pull complete 
71899e3e76d0: Pull complete 
d9a0675e81d8: Pull complete 
f3e489d2c920: Pull complete 
ccc4b0ee49d1: Pull complete 
2eea875c5ec9: Pull complete 
ff27d4260cec: Pull complete 
Digest: sha256:18d681aed592b9061e6358645e1c4d0f46a4b80a63f1628f63bdf7aa6b42f3e2
Status: Downloaded newer image for 192.168.1.12:5000/centos6_ssh:latest

[root@localhost ~]# docker images|grep centos6
192.168.1.12:5000/centos6_ssh   latest              efd998bd6817        6 years ago         297 MB

六：Harbor

Harbor是一个用于存储和分发Docker镜像的企业级Registry服务器，通过添加一些企业必需的功能特性，例如安全、标识和管理等，扩展了开源Docker Distribution
Harbor仓库部署两种方式，一种是off-line ，一种是on-line，即离线和在线安装，此处选择离线安装：

1、安装

安装环境

[root@localhost ~]# yum install epel-release -y
[root@localhost ~]# yum install python-pip -y
[root@localhost ~]# pip install --upgrade pip
Collecting pip
  Downloading https://files.pythonhosted.org/packages/5a/4a/39400ff9b36e719bdf8f31c99fe1fa7842a42fa77432e584f707a5080063/pip-20.2.2-py2.py3-none-any.whl (1.5MB)
    100% |████████████████████████████████| 1.5MB 330kB/s 
Installing collected packages: pip
  Found existing installation: pip 8.1.2
    Uninstalling pip-8.1.2:
      Successfully uninstalled pip-8.1.2
Successfully installed pip-20.2.2
[root@localhost ~]# pip install docker-compose
......
Successfully installed attrs-19.3.0 backports.shutil-get-terminal-size-1.0.0 bcrypt-3.1.7 cached-property-1.5.1 certifi-2020.6.20 cffi-1.14.1 chardet-3.0.4 configparser-4.0.2 contextlib2-0.6.0.post1 cryptography-3.0 distro-1.5.0 docker-4.3.0 docker-compose-1.26.2 dockerpty-0.4.1 docopt-0.6.2 enum34-1.1.10 functools32-3.2.3.post2 idna-2.10 importlib-metadata-1.7.0 jsonschema-3.2.0 paramiko-2.7.1 pathlib2-2.3.5 pycparser-2.20 pynacl-1.4.0 pyrsistent-0.16.0 python-dotenv-0.14.0 requests-2.24.0 scandir-1.10.0 subprocess32-3.5.4 texttable-1.6.2 typing-3.7.4.3 urllib3-1.25.10 websocket-client-0.57.0 zipp-1.2.0

下载Habor并且解压

[root@localhost ~]# wget -c https://storage.googleapis.com/harbor-releases/release-1.7.0/harbor-offline-installer-v1.7.0.tgz
[root@localhost ~]# tar -zxvf harbor-offline-installer-v1.7.0.tgz 
[root@localhost ~]# cd harbor

vim harbor.cfg

[root@localhost harbor]# vim harbor.cfg 
  4 _version = 1.7.0
  5 #The IP address or hostname to access admin UI and registry service.
  6 #DO NOT use localhost or 127.0.0.1, because Harbor needs to be accessed by external clients.
  7 #DO NOT comment out this line, modify the value of "hostname" directly, or the installation will fail.
  8 hostname = 192.168.1.112
  9 
 10 #The protocol for accessing the UI and token/notification service, by default it is http.
 11 #It can be set to https if ssl is enabled on nginx.
 12 ui_url_protocol = http
 13 
 14 #Maximum number of job workers in job service  
 15 max_job_workers = 10 

安装

[root@localhost harbor]# ./install.sh 

[Step 0]: checking installation environment ...

Note: docker version: 1.13.1
......
Creating nginx              ... done

✔ ----Harbor has been installed and started successfully.----

浏览器登录

http://192.168.1.112 用户名：admin 密码：Harbor12345，也可以在habor.cnf自己设置密码

创建用户

添加仓库 添加镜像完毕

--------------------end