docker安装部署harbor

harbor安装部署

前置条件：需要安装好docker、docker-compose

下载

由于harbor有两个版本，分别是offline（离线）和online（在线），但由于网络原因，建议离线安装，下载地址：https://github.com/goharbor/harbor/releases

tar xf harbor-offline-installer-v2.0.0.tgz
cd harbor

安装配置

1. 解压之后harbor文件夹中没有harbor.yml、docker-compose.yml文件的，需要我们自己构建

   harbor.yml: [harbor.yml](New Folder\harbor.yml)

   # Configuration file of Harbor
   
   # The IP address or hostname to access admin UI and registry service.
   # DO NOT use localhost or 127.0.0.1, because Harbor needs to be accessed by external clients.
   #hostname: reg.mydomain.com
   hostname: test.com
   
   # http related config
   http:
     # port for http, default is 80. If https enabled, this port will redirect to https port
     port: 80
   
   # https related config
   https:
     # https port for harbor, default is 443
     port: 443
     # The path of cert and key files for nginx
     #certificate: /your/certificate/path
     certificate: /home/harbor/cert/test.com.crt
     #private_key: /your/private/key/path
     private_key: /home/harbor/cert/test.com.key
   
   # # Uncomment following will enable tls communication between all harbor components
   # internal_tls:
   #   # set enabled to true means internal tls is enabled
   #   enabled: true
   #   # put your cert and key files on dir
   #   dir: /etc/harbor/tls/internal
   
   # Uncomment external_url if you want to enable external proxy
   # And when it enabled the hostname will no longer used
   # external_url: https://reg.mydomain.com:8433
   
   # The initial password of Harbor admin
   # It only works in first time to install harbor
   # Remember Change the admin password from UI after launching Harbor.
   #harbor_admin_password: Harbor12345
   harbor_admin_password: harbor123
   
   # Harbor DB configuration
   database:
     # The password for the root user of Harbor DB. Change this before any production use.
     #password: root123
     password: wamuCkl;68iopijY
     # The maximum number of connections in the idle connection pool. If it <=0, no idle connections are retained.
     max_idle_conns: 50
     # The maximum number of open connections to the database. If it <= 0, then there is no limit on the number of open connections.
     # Note: the default number of connections is 100 for postgres.
     max_open_conns: 100
   
   # The default data volume
   #data_volume: /data
   data_volume: /home/harbor/data/
   
   # Harbor Storage settings by default is using /data dir on local filesystem
   # Uncomment storage_service setting If you want to using external storage
   # storage_service:
   #   # ca_bundle is the path to the custom root ca certificate, which will be injected into the truststore
   #   # of registry's and chart repository's containers.  This is usually needed when the user hosts a internal storage with self signed certificate.
   #   ca_bundle:
   
   #   # storage backend, default is filesystem, options include filesystem, azure, gcs, s3, swift and oss
   #   # for more info about this configuration please refer https://docs.docker.com/registry/configuration/
   #   filesystem:
   #     maxthreads: 100
   #   # set disable to true when you want to disable registry redirect
   #   redirect:
   #     disabled: false
   
   # Clair configuration
   clair:
     # The interval of clair updaters, the unit is hour, set to 0 to disable the updaters.
     updaters_interval: 12
   
   # Trivy configuration
   trivy:
     # ignoreUnfixed The flag to display only fixed vulnerabilities
     ignore_unfixed: false
     # skipUpdate The flag to enable or disable Trivy DB downloads from GitHub
     #
     # You might want to enable this flag in test or CI/CD environments to avoid GitHub rate limiting issues.
     # If the flag is enabled you have to manually download the `trivy.db` file and mount it in the