【harbor】Docker部署Harbor，搭建docker私有镜像仓库

986945193@qq.com (David) — Sun, 28 Aug 2022 11:11:11 +0800

首先下载harbor的离线安装包

wget https://github.com/goharbor/harbor/releases/download/v1.10.13/harbor-offline-installer-v1.10.13.tgz

解压出来，然后修改`harbor.yml`，这里演示一个修改过的，去掉了`https`

# Configuration file of Harbor

# The IP address or hostname to access admin UI and registry service.
# DO NOT use localhost or 127.0.0.1, because Harbor needs to be accessed by external clients.
hostname: 192.168.1.106

# http related config
http:
 # port for http, default is 80. If https enabled, this port will redirect to https port
 port: 680
harbor_admin_password: Davidzheng12345

# Harbor DB configuration
database:
 # The password for the root user of Harbor DB. Change this before any production use.
 password: root123
 # The maximum number of connections in the idle connection pool. If it <=0, no idle connections are retained.
 max_idle_conns: 50
 # The maximum number of open connections to the database. If it <= 0, then there is no limit on the number of open connections.
 # Note: the default number of connections is 100 for postgres.
 max_open_conns: 100

# The default data volume
data_volume: /home/david-workspace/docker/docker-harbor/harbor/data

# Harbor Storage settings by default is using /data dir on local filesystem
# Uncomment storage_service setting If you want to using external storage
# storage_service:
# # ca_bundle is the path to the custom root ca certificate, which will be injected into the truststore
# # of registry's and chart repository's containers. This is usually needed when the user hosts a internal storage with self signed certificate.
# ca_bundle:

# # storage backend, default is filesystem, options include filesystem, azure, gcs, s3, swift and oss
# # for more info about this configuration please refer https://docs.docker.com/registry/configuration/
# filesystem:
# maxthreads: 100
# # set disable to true when you want to disable registry redirect
# redirect:
# disabled: false

# Clair configuration
clair:
 # The interval of clair updaters, the unit is hour, set to 0 to disable the updaters.
 updaters_interval: 12

jobservice:
 # Maximum number of job workers in job service
 max_job_workers: 10

notification:
 # Maximum retry count for webhook job
 webhook_job_max_retry: 10

chart:
 # Change the value of absolute_url to enabled can enable absolute url in chart
 absolute_url: disabled

# Log configurations
log:
 # options are debug, info, warning, error, fatal
 level: info
 # configs for logs in local storage
 local:
 # Log files are rotated log_rotate_count times before being removed. If count is 0, old versions are removed rather than rotated.
 rotate_count: 50
 # Log files are rotated only if they grow bigger than log_rotate_size bytes. If size is followed by k, the size is assumed to be in kilobytes.
 # If the M is used, the size is in megabytes, and if G is used, the size is in gigabytes. So size 100, size 100k, size 100M and size 100G
 # are all valid.
 rotate_size: 200M
 # The directory on your host that store log
 location: /home/david-workspace/docker/docker-harbor/harbor/var/log/harbor

 # Uncomment following lines to enable external syslog endpoint.
 # external_endpoint:
 # # protocol used to transmit log to external endpoint, options is tcp or udp
 # protocol: tcp
 # # The host of external endpoint
 # host: localhost
 # # Port of external endpoint
 # port: 5140

#This attribute is for migrator to detect the version of the .cfg file, DO NOT MODIFY!
_version: 1.10.0

# Uncomment external_database if using external database.
# external_database:
# harbor:
# host: harbor_db_host
# port: harbor_db_port
# db_name: harbor_db_name
# username: harbor_db_username
# password: harbor_db_password
# ssl_mode: disable
# max_idle_conns: 2
# max_open_conns: 0
# clair:
# host: clair_db_host
# port: clair_db_port
# db_name: clair_db_name
# username: clair_db_username
# password: clair_db_password
# ssl_mode: disable
# notary_signer:
# host: notary_signer_db_host
# port: notary_signer_db_port
# db_name: notary_signer_db_name
# username: notary_signer_db_username
# password: notary_signer_db_password
# ssl_mode: disable
# notary_server:
# host: notary_server_db_host
# port: notary_server_db_port
# db_name: notary_server_db_name
# username: notary_server_db_username
# password: notary_server_db_password
# ssl_mode: disable

# Uncomment external_redis if using external Redis server
# external_redis:
# host: redis
# port: 6379
# password:
# # db_index 0 is for core, it's unchangeable
# registry_db_index: 1
# jobservice_db_index: 2
# chartmuseum_db_index: 3
# clair_db_index: 4

# Uncomment uaa for trusting the certificate of uaa instance that is hosted via self-signed cert.
# uaa:
# ca_file: /path/to/ca

# Global proxy
# Config http proxy for components, e.g. http://my.proxy.com:3128
# Components doesn't need to connect to each others via http proxy.
# Remove component from `components` array if want disable proxy
# for it. If you want use proxy for replication, MUST enable proxy
# for core and jobservice, and set `http_proxy` and `https_proxy`.
# Add domain to the `no_proxy` field, when you want disable proxy
# for some special registry.
proxy:
 http_proxy:
 https_proxy:
 # no_proxy endpoints will appended to 127.0.0.1,localhost,.local,.internal,log,db,redis,nginx,core,portal,postgresql,jobservice,registry,registryctl,clair,chartmuseum,notary-server
 no_proxy:
 components:
 - core
 - jobservice
 - clair

接着执行里面的脚本文件即可。

./install.sh

接着可以看到，里面解压了需要的镜像包，并启动成功

[Step 5]: starting Harbor ...
Creating network "harbor_harbor" with the default driver
Creating harbor-log ... done
Creating redis ... done
Creating registry ... done
Creating registryctl ... done
Creating harbor-db ... done
Creating harbor-portal ... done
Creating harbor-core ... done
Creating nginx ... done
Creating harbor-jobservice ... done
✔ ----Harbor has been installed and started successfully.----

最后使用浏览器，输入对应的ip和端口，并输入用户名和密码，即可访问使用。

ip:port: 192.168.1.106:680
username:admin
password:Davidzheng12345

参考地址：

https://github.com/goharbor/harbor

【harbor】往harbor上推送镜像时，增加登录权限

986945193@qq.com (David) — Sun, 28 Aug 2022 11:11:11 +0800

如果未登录会报不允许推送的异常：

denied: requested access to the resource is denied

我们需要在对应的客户机上添加登陆的权限

docker login -u admin -p Harbor12345 http://20.0.0.100:8080

这里输入对应的用户名和密码，以及ip和端口号。

参考地址：

https://github.com/goharbor/harbor

Harbor on 计算机知识分享网

【harbor】Docker部署Harbor，搭建docker私有镜像仓库

首先下载harbor的离线安装包

解压出来，然后修改harbor.yml，这里演示一个修改过的，去掉了https

接着执行里面的脚本文件即可。

接着可以看到，里面解压了需要的镜像包，并启动成功

最后使用浏览器，输入对应的ip和端口，并输入用户名和密码， 即可访问使用。

参考地址：

【harbor】往harbor上推送镜像时，增加登录权限

如果未登录会报不允许推送的异常：

我们需要在对应的客户机上添加登陆的权限

参考地址：

解压出来，然后修改`harbor.yml`，这里演示一个修改过的，去掉了`https`

最后使用浏览器，输入对应的ip和端口，并输入用户名和密码，即可访问使用。