Docker私有仓库harbor搭建

官方网站

vmware官方开源服务：https://vmware.github.io/

harbor 官方github 地址：https://github.com/vmware/harbor

harbor 官方网址：https://goharbor.io/

harbor官方文档：https://goharbor.io/docs/

Harbor功能官方介绍

-基于角色的访问控制：用户与Docker镜像仓库通过“项目”进行组织管理，一个用户可以对多个镜像仓库在同一命名空间（project）里有不同的权限

-镜像复制：镜像可在多个Registry实例中复制（同步）。尤其适合于负载均衡，高可用，混合云和多云的场景

-图形化用户界面：用户可以通过浏览器来浏览，检索当前Docker镜像仓库，管理项目和命名空间

-AD/LDAP 支：Harbor可以集成企业内部已有的AD/LDAP，用于鉴权认证管理

-审计管理：所有针对镜像仓库的操作都可以被记录追溯，用于审计管理

-国际化：已拥有英文、中文、德文、日文和俄文的本地化版本。更多的语言将会添加进来

-RESTful API：提供给管理员对于Harbor更多的操控, 使得与其它管理软件集成变得更容易

-部署简单：提供在线和离线两种安装工具，也可以安装到vSphere平台(OVA方式)虚拟设备

Harbor 组成

docker-分布式镜像仓库Harbor插图

#harbor是由很多容器组成实现完整功能

[root@ubuntu1804 ~]#docker ps -a

CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES

4ec3c3885407 goharbor/nginx-photon:v1.7.6 "nginx -g 'daemon of…" About a minute ago Up About a minute (healthy) 0.0.0.0:80->80/tcp, 0.0.0.0:443->443/tcp, 0.0.0.0:4443->4443/tcp nginx

5707b4ac41d8 goharbor/harbor-portal:v1.7.6 "nginx -g 'daemon of…" About a minute ago Up About a minute (healthy) 80/tcp harbor-portal

0ed230b9b714 goharbor/harbor-jobservice:v1.7.6 "/harbor/start.sh" About a minute ago Up About a minute harbor-jobservice

fec659188349 goharbor/harbor-core:v1.7.6 "/harbor/start.sh" About a minute ago Up About a minute (healthy) harbor-core

910d14c1d7f7 goharbor/harbor-adminserver:v1.7.6 "/harbor/start.sh" 2 minutes ago Up About a minute (healthy) harbor-adminserver

4348f503aa0e goharbor/harbor-db:v1.7.6 "/entrypoint.sh post…" 2 minutes ago Up About a minute (healthy) 5432/tcp harbor-db

beff6886f0f1 goharbor/harbor-registryctl:v1.7.6 "/harbor/start.sh" 2 minutes ago Up About a minute (healthy) registryctl

428c99d274bf goharbor/registry-photon:v2.6.2-v1.7.6 "/entrypoint.sh /etc…" 2 minutes ago Up About a minute (healthy) 5000/tcp registry

775b4026fa4e goharbor/redis-photon:v1.7.6 "docker-entrypoint.s…" 2 minutes ago Up About a minute 6379/tcp redis

c6f44e2034c6 goharbor/harbor-log:v1.7.6 "/bin/sh -c /usr/loc…" 2 minutes ago Up 2 minutes (healthy)

Proxy：对应启动组件nginx。它是一个nginx反向代理，代理Notary client（镜像认证）、Docker client（镜像上传下载等）和浏览器的访问请求（Core Service）给后端的各服务
UI（Core Service）：对应启动组件harbor-ui。底层数据存储使用mysql数据库，主要提供了四个子功能：Registry：对应启动组件registry。负责存储镜像文件，和处理镜像的pull/push命令。Harbor对镜像进行强制的访问控制，Registry会将客户端的每个pull、push请求转发到token服务来获取有效的token
- UI：一个web管理页面ui
- API：Harbor暴露的API服务
- Auth：用户认证服务，decode后的token中的用户信息在这里进行认证；auth后端可以接db、ldap、uaa三种认证实现
- Token服务（上图中未体现）：负责根据用户在每个project中的role来为每一个docker push/pull命令issuing一个token，如果从docker client发送给registry的请求没有带token，registry会重定向请求到token服务创建token
Admin Service：对应启动组件harbor-adminserver。是系统的配置管理中心附带检查存储用量，ui和jobserver启动时候需要加载adminserver的配置
Job Sevice：对应启动组件harbor-jobservice。负责镜像复制工作的，他和registry通信，从一个registry pull镜像然后push到另一个registry，并记录job_log
Log Collector：对应启动组件harbor-log。日志汇总组件，通过docker的log-driver把日志汇总到一起
DB：对应启动组件harbor-db，负责存储project、 user、 role、replication、image_scan、access等的metadata数据

安装Harbor

下载地址：https://github.com/vmware/harbor/releases

安装文档：https://github.com/vmware/harbor/blob/master/docs/installation_guide.md

环境准备：共四台主机

两台主机当harbor，地址：10.0.0.101|102
另两台主机上传和下载镜像

安装docker

[root@ubuntu1804 ~]#cat install_docker_for_ubuntu1804.sh

COLOR="echo -e \\033[1;31m"

END="\033[m"

DOCKER_VERSION="5:19.03.5~3-0~ubuntu-bionic"

install_docker(){

apt update

apt -y install apt-transport-https ca-certificates curl software-properties-common

curl -fsSL https://mirrors.aliyun.com/docker-ce/linux/ubuntu/gpg | sudo apt-key add -

add-apt-repository "deb [arch=amd64] https://mirrors.aliyun.com/docker-ce/linux/ubuntu $(lsb_release -cs) stable"

apt update

${COLOR}"Docker有以下版本"${END}

apt-cache madison docker-ce

${COLOR}"5秒后即将安装: docker-"${DOCKER_VERSION}" 版本....."${END}

${COLOR}"如果想安装其它Docker版本，请按ctrl+c键退出，修改版本再执行"${END}

sleep 5

apt -y install docker-ce=${DOCKER_VERSION} docker-ce-cli=${DOCKER_VERSION}

mkdir -p /etc/docker

tee /etc/docker/daemon.json <<-'EOF'

{

"registry-mirrors": ["https://si7y70hh.mirror.aliyuncs.com"]

}

EOF

systemctl daemon-reload

systemctl restart docker

docker version && ${COLOR}"Docker 安装成功"${END} || ${COLOR}"Docker 安装失败"${END}

}

dpkg -s docker-ce &> /dev/null && ${COLOR}"Docker已安装"${END} || install_docker

[root@ubuntu1804 ~]#bash install_docker_for_ubuntu1804.sh

[root@ubuntu1804 ~]#docker version

Client: Docker Engine - Community

Version: 19.03.5

API version: 1.40

Go version: go1.12.12

Git commit: 633a0ea838

Built: Wed Nov 13 07:29:52 2019

OS/Arch: linux/amd64

Experimental: false

Server: Docker Engine - Community

Engine:

Version: 19.03.5

API version: 1.40 (minimum version 1.12)

Go version: go1.12.12

Git commit: 633a0ea838

Built: Wed Nov 13 07:28:22 2019

OS/Arch: linux/amd64

Experimental: false

containerd:

Version: 1.2.10

GitCommit: b34a5c8af56e510852c35414db4c1f4fa6172339

runc:

Version: 1.0.0-rc8+dev

GitCommit: 3e425f80a8c931f88e6d94a8c831b9d5aa481657

docker-init:

Version: 0.18.0

GitCommit: fec3683

下载Harbor安装包并解压缩

以下使用 harbor 稳定版本1.7.6安装包

方法1：下载离线完整安装包,推荐使用

[root@ubuntu1804 ~]#wget https://storage.googleapis.com/harbor-releases/release-1.7.0/harbor-offline-installer-v1.7.6.tgz

方法2：下载在线安装包 ,不是很推荐

[root@ubuntu1804 ~]#wget https://storage.googleapis.com/harbor-releases/release-1.7.0/harbor-online-installer-v1.7.6.tgz

[root@ubuntu1804 ~]#ls -lh harbor-o*

-rw-r--r-- 1 root root 568M Sep 18 13:24 harbor-offline-installer-v1.7.6.tgz

-rw-r--r-- 1 root root 275K Sep 18 13:37 harbor-online-installer-v1.7.6.tgz

解压缩

[root@ubuntu1804 ~]#mkdir /apps

[root@ubuntu1804 ~]#tar xvf harbor-offline-installer-v1.7.6.tgz -C /apps/

编辑配置文件 harbor.cfg

[root@ubuntu1804 ~]#vim /apps/harbor/harbor.cfg

#只需要修改下面两行

hostname = 10.0.0.101 #指向当前主机IP

harbor_admin_password = 123456 #指定harbor登录用户admin的密码

先安装docker compose

#docker compose 必须先于harbor安装，否则会报以下错误

[root@ubuntu1804 ~]#/apps/harbor/install.sh

[Step 0]: checking installation environment ...

Note: docker version: 19.03.5

✖ Need to install docker-compose(1.7.1+) by yourself first and run this script again

安装docker compose

#方法1：通过pip安装，版本较新docker_compose-1.25.3，推荐使用

[root@ubuntu1804 ~]#apt -y install python-pip

[root@ubuntu1804 ~]#pip install docker-compose

[root@ubuntu1804 ~]#docker-compose --version

docker-compose version 1.25.3, build unknown

#方法2：直接从github下载安装对应版本

#参看说明：https://github.com/docker/compose/releases

curl -L https://github.com/docker/compose/releases/download/1.25.3/docker-compose-<code>uname -s</code>-<code>uname -m</code> -o /usr/local/bin/docker-compose

chmod +x /usr/local/bin/docker-compose

#方法3：直接安装，版本较旧docker-compose-1.17.1-2，不推荐使用

[root@ubuntu1804 ~]#apt -y install docker-compose

[root@ubuntu1804 ~]#docker-compose --version

docker-compose version 1.17.1, build unknown

运行安装脚本安装harbor

#再次安装docker harbor

[root@ubuntu1804 ~]#/apps/harbor/install.sh

[Step 0]: checking installation environment ...

Note: docker version: 19.03.5

Note: docker-compose version: 1.25.3

[Step 1]: loading Harbor images ...

......

[Step 4]: starting Harbor ...

Creating network "harbor_harbor" with the default driver

Creating harbor-log ... done

Creating registryctl ... done

Creating harbor-db ... done

Creating redis ... done

Creating registry ... done

Creating harbor-adminserver ... done

Creating harbor-core ... done

Creating harbor-jobservice ... done

Creating harbor-portal ... done

Creating nginx ... done

✔ ----Harbor has been installed and started successfully.----

Now you should be able to visit the admin portal at http://10.0.0.101.

For more details, please visit https://github.com/goharbor/harbor .

#安装harbor后会自动开启很多相关容器

[root@ubuntu1804 ~]#docker ps

CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES

1b47a3eeedd2 goharbor/nginx-photon:v1.7.6 "nginx -g 'daemon of…" 14 minutes ago Up 14 minutes (healthy) 0.0.0.0:80->80/tcp, 0.0.0.0:443->443/tcp, 0.0.0.0:4443->4443/tcp nginx

5f3a0a0db734 goharbor/harbor-portal:v1.7.6 "nginx -g 'daemon of…" 14 minutes ago Up 14 minutes (healthy) 80/tcp harbor-portal

8e4265efe8ee goharbor/harbor-jobservice:v1.7.6 "/harbor/start.sh" 14 minutes ago Up 14 minutes harbor-jobservice

d1a048525d79 goharbor/harbor-core:v1.7.6 "/harbor/start.sh" 14 minutes ago Up 14 minutes (healthy) harbor-core

4a989eb92af1 goharbor/harbor-adminserver:v1.7.6 "/harbor/start.sh" 14 minutes ago Up 14 minutes (healthy) harbor-adminserver

c875d3959c56 goharbor/registry-photon:v2.6.2-v1.7.6 "/entrypoint.sh /etc…" 14 minutes ago Up 14 minutes (healthy) 5000/tcp registry

2a963125a0e6 goharbor/redis-photon:v1.7.6 "docker-entrypoint.s…" 14 minutes ago Up 14 minutes 6379/tcp redis

a0751df44d68 goharbor/harbor-registryctl:v1.7.6 "/harbor/start.sh" 14 minutes ago Up 14 minutes (healthy) registryctl

b0ef6ed0d46b goharbor/harbor-db:v1.7.6 "/entrypoint.sh post…" 14 minutes ago Up 14 minutes (healthy) 5432/tcp harbor-db

8e667c6ccbc1 goharbor/harbor-log:v1.7.6 "/bin/sh -c /usr/loc…" 14 minutes ago Up 14 minutes (healthy) 127.0.0.1:1514->10514/tcp harbor-log

登录harbor主机网站

用浏览器访问：http://10.0.0.101/

用户名：admin

密码：即前面harbor.cfg中指定的密码

posted @ 2020-08-17 16:51 练习生天泽阅读(657) 评论(0) 编辑收藏举报

会员力量，点亮园子希望

刷新页面返回顶部

练习生天泽