Harbor安裝

安裝

安裝一些必要的系統工具：

sudo yum install -y yum-utils device-mapper-persistent-data lvm2
添加軟件源信息：

sudo yum-config-manager --add-repo http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
更新 yum 緩存：

sudo yum makecache fast
安裝 Docker-ce：（企業版  社區版）

sudo yum -y install docker-ce
啟動 Docker 后台服務

sudo systemctl start docker
測試運行 hello-world

docker run hello-world

 

docker-compose

a.下載二進制文件
# curl -L https://github.com/docker/compose/releases/download/1.16.1/docker-compose-`uname -s`-`uname -m` -o /usr/local/bin/docker-compose
如果需要安裝其他版本的話，請修改上面命令中的版本號。

b.賦予二進制文件可執行權限
# chmod +x /usr/local/bin/docker-compose
c.根據自己的情況決定是否安裝命令補全功能
# yum install bash-completion 
# curl -L https://raw.githubusercontent.com/docker/compose/1.16.1/contrib/completion/bash/docker-compose -o /etc/bash_completion.d/docker-compose
重新登陸后就生效了

# docker-compose 
build    config   down     exec     images   logs     port     pull     restart  run      start    top      up       
bundle   create   events   help     kill     pause    ps       push     rm       scale    stop     unpause  version  
d.測試是否安裝成功
# docker-compose --version
docker-compose version 1.16.1, build 6d1ac21

 

pip yum安裝

# yum install python-pip
# pip install  docker-compose
測試：

# docker-compose --version
卸載docker-compose
對應上面兩種安裝方法：
二進制：

# rm  /usr/local/bin/docker-compose
pip:

# pip uninstall  docker-compose

 

卸載

如果是二進制包方式安裝的，刪除二進制文件即可：
sudo rm /usr/local/bin/docker-compose
如果通過Python pip工具安裝的，則執行如下命令刪除：
sudo pip uninstall docker-compose

 

Harbor安裝

harbor軟件網址：https://github.com/vmware/harbor/releases

　　此頁面提供源碼安裝和二進制安裝下載地址，不建議方式

　　鏡像網址：http://harbor.orientsoft.cn/

　　此頁面只提供離線下載安裝包，建議此種方式。

#下載離線安裝軟件
wget http://harbor.orientsoft.cn/harbor-v1.3.0-rc4/harbor-offline-installer-v1.3.0-rc4.tgz
#解壓文件
tar -zxf harbor-offline-installer-v1.3.0-rc4.tgz
#解壓后的文件夾是harbor

解壓完成后：修改配置文件harbor.conf，如果是測試環境基本不用什么更改配置，主要就是hostname，和port

http:

   port:80

端口默認是80，可以改掉。

harbor_admin_password

管理員 admin 登錄密碼 默認是Harbor12345

 

[root@c7test_master harbor]# vim harbor.cfg 

## Configuration file of Harbor

#The IP address or hostname to access admin UI and registry service.
#DO NOT use localhost or 127.0.0.1, because Harbor needs to be accessed by external clients.
#主機地址，不可以設置為127或者localhost

hostname = 10.10.90.105

#The protocol for accessing the UI and token/notification service, by default it is http.
#It can be set to https if ssl is enabled on nginx.
ui_url_protocol = http

#The password for the root user of mysql db, change this before any production use.
#mysql密碼
db_password = root123

#Maximum number of job workers in job service  
max_job_workers = 3 

#Determine whether or not to generate certificate for the registry's token.
#If the value is on, the prepare script creates new root cert and private key 
#for generating token to access the registry. If the value is off the default key/cert will be used.
#This flag also controls the creation of the notary signer's cert.
customize_crt = on

#The path of cert and key files for nginx, they are applied only the protocol is set to https
ssl_cert = /data/cert/server.crt
ssl_cert_key = /data/cert/server.key

#The path of secretkey storage
secretkey_path = /data

#Admiral's url, comment this attribute, or set its value to NA when Harbor is standalone
admiral_url = NA

#The password of the Clair's postgres database, only effective when Harbor is deployed with Clair.
#Please update it before deployment, subsequent update will cause Clair's API server and Harbor unable to access Clair's database.
clair_db_password = password

#Log files are rotated log_rotate_count times before being removed. If count is 0, old versions are removed rather than rotated.
log_rotate_count = 50
#Log files are rotated only if they grow bigger than log_rotate_size bytes. If size is followed by k, the size is assumed to be in kilobytes. 
#If the M is used, the size is in megabytes, and if G is used, the size is in gigabytes. So size 100, size 100k, size 100M and size 100G 
#are all valid.
log_rotate_size = 200M

#NOTES: The properties between BEGIN INITIAL PROPERTIES and END INITIAL PROPERTIES
#only take effect in the first boot, the subsequent changes of these properties 
#should be performed on web ui

#************************BEGIN INITIAL PROPERTIES************************

#Email account settings for sending out password resetting emails.

#Email server uses the given username and password to authenticate on TLS connections to host and act as identity.
#Identity left blank to act as username.
email_identity = 

email_server = smtp.mydomain.com
email_server_port = 25
email_username = [e-mail]
email_password = abc
email_from = admin <[e-mail]>
email_ssl = false
email_insecure = false

##The initial password of Harbor admin, only works for the first time when Harbor starts. 
#It has no effect after the first launch of Harbor.
#Change the admin password from UI after launching Harbor.
#這里是web登錄頁面的密碼，可以更改
harbor_admin_password = Harbor12345

##By default the auth mode is db_auth, i.e. the credentials are stored in a local database.
#Set it to ldap_auth if you want to verify a user's credentials against an LDAP server.
auth_mode = db_auth

#The url for an ldap endpoint.
ldap_url = ldaps://ldap.mydomain.com

#A user's DN who has the permission to search the LDAP/AD server. 
#If your LDAP/AD server does not support anonymous search, you should configure this DN and ldap_search_pwd.
#ldap_searchdn = uid=searchuser,ou=people,dc=mydomain,dc=com

#the password of the ldap_searchdn
#ldap_search_pwd = password

#The base DN from which to look up a user in LDAP/AD
ldap_basedn = ou=people,dc=mydomain,dc=com

#Search filter for LDAP/AD, make sure the syntax of the filter is correct.
#ldap_filter = (objectClass=person)

# The attribute used in a search to match a user, it could be uid, cn, email, sAMAccountName or other attributes depending on your LDAP/AD  
ldap_uid = uid 

#the scope to search for users, 1-LDAP_SCOPE_BASE, 2-LDAP_SCOPE_ONELEVEL, 3-LDAP_SCOPE_SUBTREE
ldap_scope = 3 

#Timeout (in seconds)  when connecting to an LDAP Server. The default value (and most reasonable) is 5 seconds.
ldap_timeout = 5

#Turn on or off the self-registration feature
self_registration = on

#The expiration time (in minute) of token created by token service, default is 30 minutes
token_expiration = 30

#The flag to control what users have permission to create projects
#The default value "everyone" allows everyone to creates a project. 
#Set to "adminonly" so that only admin user can create project.
project_creation_restriction = everyone

#The follow configurations are for Harbor HA mode only

#the address of the mysql database.
db_host = mysql

#The port of mysql database host
db_port = 3306

#The user name of mysql database
db_user = root
#************************END INITIAL PROPERTIES************************
#The following attributes only need to be set when auth mode is uaa_auth
uaa_endpoint = uaa.mydomain.org
uaa_clientid= id
uaa_clientsecret= secret
uaa_ca_root= /path/to/uaa_ca.pem
#############

 

     ## Configuration file of Harbor
    
    # hostname設置訪問地址，可以使用ip、域名，不可以設置為127.0.0.1或localhost
    hostname = 10.0.86.193
    
    # 訪問協議，默認是http，也可以設置https，如果設置https，則nginx ssl需要設置on
    ui_url_protocol = http
    
    # mysql數據庫root用戶默認密碼root123，實際使用時修改下
    db_password = root123
    
    max_job_workers = 3 
    customize_crt = on
    ssl_cert = /data/cert/server.crt
    ssl_cert_key = /data/cert/server.key
    secretkey_path = /data
    admiral_url = NA
    
    # 郵件設置，發送重置密碼郵件時使用
    email_identity = 
    email_server = smtp.mydomain.com
    email_server_port = 25
    email_username = [e-mail]
    email_password = abc
    email_from = admin <[e-mail]>
    email_ssl = false
    
    # 啟動Harbor后，管理員UI登錄的密碼，默認是Harbor12345
    harbor_admin_password = Harbor12345
    
    # 認證方式，這里支持多種認證方式，如LADP、本次存儲、數據庫認證。默認是db_auth，mysql數據庫認證
    auth_mode = db_auth
    
    # LDAP認證時配置項
    #ldap_url = ldaps://ldap.mydomain.com
    #ldap_searchdn = uid=searchuser,ou=people,dc=mydomain,dc=com
    #ldap_search_pwd = password
    #ldap_basedn = ou=people,dc=mydomain,dc=com
    #ldap_filter = (objectClass=person)
    #ldap_uid = uid 
    #ldap_scope = 3 
    #ldap_timeout = 5
    
    # 是否開啟自注冊
    self_registration = on
    
    # Token有效時間，默認30分鍾
    token_expiration = 30
    
    # 用戶創建項目權限控制，默認是everyone（所有人），也可以設置為adminonly（只能管理員）
    project_creation_restriction = everyone
    
    verify_remote_cert = on

 

啟動harbor，修改完配置文件就可以執行該目錄下的install.sh文件即可，程序會自動啟動相關鏡像，因為harbor是用你鏡像進行安裝的。

[root@c7test_master harbor]# ./install.sh 

 

 https://www.cnblogs.com/netsa/p/8124708.html