k8s_Centos7部署harbor本地镜像仓库

安装1.7.6以上版本
#下载 harbor-offline-installer-v1.8.3.tgz

[root@k8s1 ~]# mkdir /opt/src
[root@k8s1 ~]# cd /opt/src/
[root@k8s1 src]# ls
harbor-offline-installer-v1.8.3.tgz

把软件包做版本标识，做一个软链接，便于以后升级

[root@k8s1 src]# cd …
[root@k8s1 opt]# mv harbor/ harbor-v1.8.3
[root@k8s1 opt]# ln -s /opt/harbor-v1.8.3/ /opt/harbor
[root@k8s1 opt]# ll
总用量 0
drwx–x--x 4 root root 28 12月 10 14:30 containerd
lrwxrwxrwx 1 root root 19 12月 10 15:00 harbor -> /opt/harbor-v1.8.3/
drwxr-xr-x 2 root root 100 12月 10 14:58 harbor-v1.8.3
drwxr-xr-x 2 root root 49 12月 10 14:56 src

编辑harbor文件
[root@k8s1 opt]# cd harbor
[root@k8s1 harbor]# vi harbor.yml
5 hostname: harbor.od.com
10 port: 180
27 harbor_admin_password: Harbor12345
40 data_volume: /data/harbor
87 location: /data/harbor/logs # 更改日志存储路径

[root@k8s1 harbor]# mkdir -p /data/harbor/logs

单机编排工具
[root@k8s1 harbor]# yum install -y docker-compose
[root@k8s1 harbor]# rpm -qa docker-compose
docker-compose-1.18.0-4.el7.noarch
安装
[root@k8s1 harbor]# ./install.sh

[root@k8s1 harbor]# docker-compose ps

每次重启docker需要执行
[root@k8s1 harbor]# docker-compose up -d

安装nginx做反向代理
[root@k8s1 harbor]# yum install -y nginx

[root@k8s1 harbor]# vi /etc/nginx/conf.d/harbor.od.com.conf
server {
listen 80;
server_name harbor.od.com;

client_max_body_size 1000m;

location / {
    proxy_pass http://127.0.0.1:180;
}

}

检测配置文件
[root@hdss7-11 harbor]# nginx -t
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful

[root@hdss7-11 harbor]# systemctl start nginx
[root@hdss7-11 harbor]# systemctl enable nginx

dns服务器
[root@hdss7-11 named]# vi /var/named/od.com.zone
$ORIGIN od.com.
$TTL 600 ; 10 minutes
@ IN SOA dns.od.com. dnsadmin.od.com. (
2019120902 ; serial # 往后滚动一个记录编号02，每次更改配置，必须滚动一个序号
10800 ; refresh (3 hours)
900 ; retry (15 minutes)
604800 ; expire (1 week)
86400 ; minimum (1 day)
)
NS dns.od.com.
$TTL 60 ; 1 minute
dns A 192.168.153.11
harbor A 192.168.153.200

[root@hdss7-11 named]# systemctl restart named

验证
[root@hdss7-11 named]# dig -t A harbor.od.com +short

http://harbor.od.com/
新建一个public项目，公开

[root@k8s1 harbor]# docker pull nginx:1.7.9

[root@k8s1 harbor]# docker tag nginx:1.7.9 harbor.od.com/public/nginx:v1.7.9

[root@k8s1 harbor]# docker login harbor.od.com

[root@k8s1 harbor]# docker push harbor.od.com/public/nginx:v1.7.9

docker login HTTPs协议报错
增加vi /usr/lib/systemd/system/docker.service
ExecStart=/usr/bin/dockerd -H fd:// --containerd=/run/containerd/containerd.sock
在这行后面回车增加
–insecure-registry=harbor.od.com

如果不启用NGINX 需要修改
vi /etc/docker/daemon.json
中
“insecure-registries”: [“registry.access.redhat.com”,“quay.io”,“harbor.od.com:180”,“127.0.0.1”],
添加harbor的访问端口