Harbor IDEA 快速指引

网上安装的教程比较多，理清思路之后，自己的安装过程总结一下，以备后续参考。

参考Harbor官网教程 （Centos 7.5）

1.安装前必备 ：On a Linux host: docker 17.06.0-ce+ and docker-compose 1.18.0+ . （自行安装好即可）

2. Harbor 下载的 harbor-offline-installer-v2.0.1.tgz 离线安装包，从 https://github.com/goharbor/harbor/releases 下载。

3. 解压开来，配置文件  harbor.yml.tmpl  复制为 harbor.yml  根据自己的需求修改即可（我只修改了主机名，证书，存放目录 ）。

# The IP address or hostname to access admin UI and registry service.
# DO NOT use localhost or 127.0.0.1, because Harbor needs to be accessed by external clients.
hostname: harbor.grape.com

# http related config
http:
  # port for http, default is 80. If https enabled, this port will redirect to https port
  port: 80

# https related config
https:
  # https port for harbor, default is 443
  port: 443
  # The path of cert and key files for nginx
  certificate: /opt/cert/harbor.grape.com.crt
  private_key: /opt/cert/harbor.grape.com.key

# The default data volume
data_volume: /home/harbor_data

证书的制作是参考的 https://www.cnblogs.com/sanduzxcvbnm/p/11956347.html 的脚本 ，/opt/cert 目录没有的话，需要先创建。

#!/bin/bash

# 配置harbor证书

cd /opt/cert

openssl genrsa -out ca.key 4096
openssl req -x509 -new -nodes -sha512 -days 3650 -subj "/C=CN/ST=Beijing/L=Beijing/O=example/OU=Personal/CN=harbor.grape.com" -key ca.key -out ca.crt
openssl genrsa -out harbor.grape.com.key 4096
openssl req -sha512 -new -subj "/C=CN/ST=Beijing/L=Beijing/O=example/OU=Personal/CN=harbor.grape.com" -key harbor.grape.com.key -out harbor.grape.com.csr

cat > v3.ext <<-EOF
authorityKeyIdentifier=keyid,issuer
basicConstraints=CA:FALSE
keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment
extendedKeyUsage = serverAuth
subjectAltName = @alt_names

[alt_names]
DNS.1=harbor.grape.com
IP.1 = 192.168.111.9
IP.2 = 10.0.0.40
EOF

openssl x509 -req -sha512 -days 3650 -extfile v3.ext -CA ca.crt -CAkey ca.key -CAcreateserial -in harbor.grape.com.csr -out harbor.grape.com.crt
    
openssl x509 -inform PEM -in harbor.grape.com.crt -out harbor.grape.com.cert

其中注意两点，dns 我配置两个地址（内网和外网地址）用于做NAT或者端口映射，记得看过有个帖子说没有找到解决办法（此处是我的解决办法，自签证书，dns以及多个IP）

4.证书放到指定的目录，以及docker compose 启动等等就不细说了。启动之后，其他机器 docker login 进行验证，一般来说，正常的是 x509: certificate signed by unknown authority 错误 ？？？

linux 需要增加自建的ca证书到docker的信任，创建 /etc/docker/certs.d/harbor.grape.com 文件夹，复制ca.crt 到此目录重启docker 服务；

window 10 相对简单一些，配置文件中增加 "insecure-registries": ["https://harbor.grape.com"] 即可

还有一点差点忘记了，所有访问 https://harbor.grape.com 需要增加到 hosts文件之中。

 

IDEA中的使用过程

其实使用插件即可， com.spotify 的 dockerfile-maven-plugin 参见 https://github.com/spotify/dockerfile-maven

随便建一个spring boot 测试程序，pom文件如下 ：

<?xml version="1.0" encoding="UTF-8"?>
<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
    <modelVersion>4.0.0</modelVersion>
    <groupId>com.example</groupId>
    <artifactId>demo</artifactId>
    <version>0.0.1-SNAPSHOT</version>
    <name>demo</name>
    <description>Demo project for Spring Boot</description>

    <properties>
        <java.version>1.8</java.version>
        <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
        <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
        <spring-boot.version>2.3.0.RELEASE</spring-boot.version>
        <!--docker私服地址-->
        <docker.repository>harbor.grape.com</docker.repository>
        <docker.image.prefix>blade</docker.image.prefix>
    </properties>

    <dependencies>
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-web</artifactId>
        </dependency>

        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-test</artifactId>
            <scope>test</scope>
            <exclusions>
                <exclusion>
                    <groupId>org.junit.vintage</groupId>
                    <artifactId>junit-vintage-engine</artifactId>
                </exclusion>
            </exclusions>
        </dependency>
    </dependencies>

    <dependencyManagement>
        <dependencies>
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-dependencies</artifactId>
                <version>${spring-boot.version}</version>
                <type>pom</type>
                <scope>import</scope>
            </dependency>
        </dependencies>
    </dependencyManagement>

    <build>
        <plugins>
            <plugin>
                <groupId>org.apache.maven.plugins</groupId>
                <artifactId>maven-compiler-plugin</artifactId>
                <configuration>
                    <source>1.8</source>
                    <target>1.8</target>
                    <encoding>UTF-8</encoding>
                </configuration>
            </plugin>
            <plugin>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-maven-plugin</artifactId>
                <!--需要注意，要么打包后在容器中启动不起来-->
                <executions>
                    <execution>
                        <goals>
                            <goal>repackage</goal>
                        </goals>
                    </execution>
                </executions>
                <configuration>
                    <includeSystemScope>true</includeSystemScope>
                </configuration>
            </plugin>
            <plugin>
                <groupId>org.apache.maven.plugins</groupId>
                <artifactId>maven-deploy-plugin</artifactId>
                <configuration>
                    <skip>true</skip>
                </configuration>
            </plugin>
            <plugin>
                <groupId>com.spotify</groupId>
                <artifactId>dockerfile-maven-plugin</artifactId>
                <version>1.4.13</version>
                <executions>
                    <execution>
                        <id>default</id>
                        <goals>
                            <goal>build</goal>
                            <goal>push</goal>
                        </goals>
                    </execution>
                </executions>
                <configuration>
                    <!--<username>***</username>
                    <password>*******</password>-->
                    <repository>${docker.repository}/${docker.image.prefix}/${project.artifactId}</repository>
                    <tag>latest</tag>
                    <buildArgs>
                        <JAR_FILE>target/${project.build.finalName}.jar</JAR_FILE>
                    </buildArgs>
                    <useMavenSettingsForAuth>true</useMavenSettingsForAuth>
                </configuration>
            </plugin>
        </plugins>
    </build>

</project>
            

值得注意的是 blade 是harbor先建立的项目，Dockerfile文件如下：

FROM java:8
ARG JAR_FILE
ADD ${JAR_FILE} app.jar
ENTRYPOINT ["java", "-jar", "/app.jar"]

 

 package -->  dockerfile:build (默认是连接到localhost:2375 ，也就是本地docker)，我的系统是 winserver 2019 ，win10 2004 开启wsl2 更酷。

 

 

 

 以上已经推动到本地的docker中了，然后执行 dockerfile:push ，推动到harbor私有仓库。

 

 基本上就可以完成，其中有许多细节和知识点需要自己补充。

k8s 中拉取镜像文件即可运行

 

 

计划将 idea -> gitlab  -> jenkins -> harbor -> k8s 串联起来。