Harbor单机安装

官方文档：

https://goharbor.io/docs/2.0.0/install-config/installation-prereqs/

1. 下载Harbor, 并解压缩

https://github.com/goharbor/harbor/releases/download/v1.10.4/harbor-offline-installer-v1.10.4.tgz

2. ssl配置

这一步尽量作，因为我之前不配置ssl发现无法启动harbor，根据官方文档配置即可。整体的步骤为生成ca根证书及key--生成server key及csr文件--生成server证书---配置harbor证书

1） 生成ca key文件

openssl genrsa -out ca.key 4096

2)   生成ca 签名证书

openssl req -x509 -new -nodes -sha512 -days 3650 \
 -subj "/C=CN/ST=Beijing/L=Beijing/O=example/OU=Personal/CN=192.168.1.11" \
 -key ca.key \
 -out ca.crt

3）  生成server key

openssl genrsa -out 192.168.1.11.key 4096

4)    生成csr文件

openssl req -sha512 -new \
    -subj "/C=CN/ST=Beijing/L=Beijing/O=example/OU=Personal/CN=192.168.1.11" \
    -key yourdomain.com.key \
    -out yourdomain.com.csr

5） 生成v3 extention file

cat > v3.ext <<-EOF
authorityKeyIdentifier=keyid,issuer
basicConstraints=CA:FALSE
keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment
extendedKeyUsage = serverAuth
subjectAltName = @alt_names

[alt_names]
DNS.1=yourdomain.com
DNS.2=yourdomain
DNS.3=192.168.1.11
EOF

6)   生成server证书

openssl x509 -req -sha512 -days 3650 \
    -extfile v3.ext \
    -CA ca.crt -CAkey ca.key -CAcreateserial \
    -in 192.168.1.11.csr \
    -out 192.168.1.11.crt

检查证书文件：

[root@haproxy02 cert]# ls
192.168.1.11.crt  192.168.1.11.csr  192.168.1.11.key  ca.crt  ca.key  ca.srl  v3.ext

3.  修改harbor.yml文件

修改2个内容：hostname以及https的证书和key

hostname: 192.168.1.11

# http related config
http:
  # port for http, default is 80. If https enabled, this port will redirect to https port
  port: 80

# https related config
https:
  # https port for harbor, default is 443
  port: 443
  # The path of cert and key files for nginx
  certificate: /root/cert/192.168.1.11.crt
  private_key: /root/cert/192.168.1.11.key

4.  执行prepare

[root@haproxy02 harbor]# ./prepare
prepare base dir is set to /root/harbor
Generated configuration file: /config/log/logrotate.conf
Generated configuration file: /config/log/rsyslog_docker.conf
Generated configuration file: /config/nginx/nginx.conf
Generated configuration file: /config/core/env
Generated configuration file: /config/core/app.conf
Generated configuration file: /config/registry/config.yml
Generated configuration file: /config/registryctl/env
Generated configuration file: /config/db/env
Generated configuration file: /config/jobservice/env
Generated configuration file: /config/jobservice/config.yml
loaded secret from file: /secret/keys/secretkey
Generated configuration file: /compose_location/docker-compose.yml
Clean up the input dir

5.  执行install

[root@haproxy02 harbor]# ./install.sh 

[Step 0]: checking if docker is installed ...

Note: docker version: 19.03.12

[Step 1]: checking docker-compose is installed ...

Note: docker-compose version: 1.26.2

[Step 2]: loading Harbor images ...
Loaded image: goharbor/chartmuseum-photon:v1.10.4
Loaded image: goharbor/harbor-core:v1.10.4
Loaded image: goharbor/harbor-db:v1.10.4
Loaded image: goharbor/harbor-registryctl:v1.10.4
Loaded image: goharbor/notary-server-photon:v1.10.4
Loaded image: goharbor/harbor-migrator:v1.10.4
Loaded image: goharbor/harbor-portal:v1.10.4
Loaded image: goharbor/harbor-jobservice:v1.10.4
Loaded image: goharbor/redis-photon:v1.10.4
Loaded image: goharbor/prepare:v1.10.4
Loaded image: goharbor/harbor-log:v1.10.4
Loaded image: goharbor/clair-photon:v1.10.4
Loaded image: goharbor/clair-adapter-photon:v1.10.4
Loaded image: goharbor/nginx-photon:v1.10.4
Loaded image: goharbor/registry-photon:v1.10.4
Loaded image: goharbor/notary-signer-photon:v1.10.4


[Step 3]: preparing environment ...

[Step 4]: preparing harbor configs ...
prepare base dir is set to /root/harbor
Clearing the configuration file: /config/log/logrotate.conf
Clearing the configuration file: /config/log/rsyslog_docker.conf
Clearing the configuration file: /config/nginx/nginx.conf
Clearing the configuration file: /config/core/env
Clearing the configuration file: /config/core/app.conf
Clearing the configuration file: /config/registry/config.yml
Clearing the configuration file: /config/registryctl/env
Clearing the configuration file: /config/registryctl/config.yml
Clearing the configuration file: /config/db/env
Clearing the configuration file: /config/jobservice/env
Clearing the configuration file: /config/jobservice/config.yml
Generated configuration file: /config/log/logrotate.conf
Generated configuration file: /config/log/rsyslog_docker.conf
Generated configuration file: /config/nginx/nginx.conf
Generated configuration file: /config/core/env
Generated configuration file: /config/core/app.conf
Generated configuration file: /config/registry/config.yml
Generated configuration file: /config/registryctl/env
Generated configuration file: /config/db/env
Generated configuration file: /config/jobservice/env
Generated configuration file: /config/jobservice/config.yml
loaded secret from file: /secret/keys/secretkey
Generated configuration file: /compose_location/docker-compose.yml
Clean up the input dir



[Step 5]: starting Harbor ...
Creating network "harbor_harbor" with the default driver
Creating harbor-log ... done
Creating registry      ... done
Creating redis         ... done
Creating harbor-db     ... done
Creating registryctl   ... done
Creating harbor-portal ... done
Creating harbor-core   ... done
Creating harbor-jobservice ... done
Creating nginx             ... done
✔ ----Harbor has been installed and started successfully.----

6.   检查docker-compose

[root@haproxy02 harbor]# docker-compose  ps
      Name                     Command                  State                          Ports                   
---------------------------------------------------------------------------------------------------------------
harbor-core         /harbor/harbor_core              Up (healthy)                                              
harbor-db           /docker-entrypoint.sh            Up (healthy)   5432/tcp                                   
harbor-jobservice   /harbor/harbor_jobservice  ...   Up (healthy)                                              
harbor-log          /bin/sh -c /usr/local/bin/ ...   Up (healthy)   127.0.0.1:1514->10514/tcp                  
harbor-portal       nginx -g daemon off;             Up (healthy)   8080/tcp                                   
nginx               nginx -g daemon off;             Up (healthy)   0.0.0.0:80->8080/tcp, 0.0.0.0:443->8443/tcp
redis               redis-server /etc/redis.conf     Up (healthy)   6379/tcp                                   
registry            /home/harbor/entrypoint.sh       Up (healthy)   5000/tcp                                   
registryctl         /home/harbor/start.sh            Up (healthy)                                              
[root@haproxy02 harbor]# 

7. 通过IP或者域名登入harbor

默认用户和密码：admin/Harbor12345

 

8. 测试docker pull/push

docker默认用户名保存在~/.docker/config.json

{
        "auths": {
                "192.168.1.11": {
                        "auth": "YWRtaW46TG9uZywxMjM="
                },
                "demo.goharbor.io": {
                        "auth": "amlhbG9uZy53YW5nOkxvbmcsMTIz"
                }
        },
        "HttpHeaders": {
                "User-Agent": "Docker-Client/19.03.12 (linux)"
        }
}

默认镜像存储目录为 /data/registry

默认数据是pg,目录为/data/database