Docker Registry (1)

2021-09-25 更新：2021-09-25

基于 harbor-offline-installer-v2.3.2.tgz 搭建私有镜像仓库。

前置条件

1. 安装docker
2. 安装docker-compose
curl -L "https://github.com/docker/compose/releases/download/1.29.2/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose

chmod +x /usr/local/bin/docker-compose

生成证书

1
2
3

mkdir -p /data/cert && chmod -R 777 /data/cert && cd /data/cert
openssl req -x509 -sha256 -nodes -days 3650 -newkey rsa:2048 -keyout harbor.key -out harbor.crt -subj "/CN=hub.me.io"

部署安装

tar -zxvf harbor-offline-installer-v2.3.2.tgz
harbor/harbor.v2.3.2.tar.gz
harbor/prepare
harbor/LICENSE
harbor/install.sh
harbor/common.sh
harbor/harbor.yml.tmpl

编辑harbor.yml，修改hostname、https证书路径、admin密码

hostname: hub.me.io

# http related config
http:
  # port for http, default is 80. If https enabled, this port will redirect to https port
  port: 80

# https related config
https:
  # https port for harbor, default is 443
  port: 443
  # The path of cert and key files for nginx
  certificate: /data/cert/harbor.crt
  private_key: /data/cert/harbor.key

# # Uncomment following will enable tls communication between all harbor components
# internal_tls:
#   # set enabled to true means internal tls is enabled
#   enabled: true
#   # put your cert and key files on dir
#   dir: /etc/harbor/tls/internal

# Uncomment external_url if you want to enable external proxy
# And when it enabled the hostname will no longer used
# external_url: https://reg.mydomain.com:8433

# The initial password of Harbor admin
# It only works in first time to install harbor
# Remember Change the admin password from UI after launching Harbor.
harbor_admin_password: admin

运行install.sh即可（可带参数–with-notary启用镜像签名，–with-clair启用漏洞扫描）

**流程：**检查环境 -> 导入镜像 -> 准备环境 -> 准备配置（含移除旧版本）-> 开始启动

[root@docker-registry harbor] ./install.sh --with-notary --with-clair
✖ Clair is deprecated please remove it from installation arguments !!!
[root@docker-registry harbor]# 

[root@docker-registry harbor]# ./install.sh

[Step 0]: checking if docker is installed ...

Note: docker version: 20.10.8

[Step 1]: checking docker-compose is installed ...

Note: docker-compose version: 1.29.2

[Step 2]: loading Harbor images ...

访问80端口即可

开机启动

vim /usr/lib/systemd/system/harbor.service

[Unit]
Description=Harbor
After=docker.service systemd-networkd.service systemd-resolved.service
Requires=docker.service
Documentation=http://github.com/vmware/harbor
[Service]
Type=simple
Restart=on-failure
RestartSec=5
ExecStart=/usr/local/bin/docker-compose -f /root/harbor/docker-compose.yml up
ExecStop=/usr/local/bin/docker-compose -f /root/harbor/docker-compose.yml down
[Install]
WantedBy=multi-user.target

1	systemctl enable harbor.service

数据挂载到 /data 目录下面

配置镜像加速地址

cat > /etc/docker/daemon.json <<EOF
{
  "registry-mirrors": ["https://jc3y13r3.mirror.aliyuncs.com"]
}
EOF
systemctl daemon-reload && systemctl restart docker

其它机器如何使用私服

修改配置 ,新增下面的配置

vim /etc/docker/daemon.json

1	"insecure-registries": ["192.168.18.120"]

完整配置

{
  "exec-opts": [
    "native.cgroupdriver=systemd"
  ],
  "log-driver": "json-file",
  "insecure-registries": ["192.168.18.120"],
  "log-opts": {
    "max-size": "100m"
  }
}

重启docker
1
systemctl restart docker

验证是否成功 docker info

1
2
3

 Insecure Registries:
192.168.18.120
127.0.0.0/8

|阅读量()