docker搭建harbor镜像仓库

环境需求：docker、docker-compose

# 新建目录
mkdir /home/harbor
cd /home/harbor
# 下载harbor版本安装包
wget https://storage.googleapis.com/harbor-releases/release-1.5.0/harbor-offline-installer-v1.5.1.tgz
# 解压
tar xvf harbor-offline-installer-v1.5.1.tgz

编辑配置文件

vim /home/harbor/harbor/harbor.cfg

# Configuration file of Harbor
hostname = 192.168.1.11
ui_url_protocol = http
db_password = root
max_job_workers = 50 
customize_crt = on
ssl_cert = /data/cert/server.crt
ssl_cert_key = /data/cert/server.key
secretkey_path = /data
admiral_url = NA
log_rotate_count = 50
log_rotate_size = 200M
harbor_admin_password = devops
auth_mode = db_auth
email_identity = 
email_server = smtp.mydomain.com
email_server_port = 25
email_username = sample_admin@mydomain.com
email_password = abc
email_from = admin <sample_admin@mydomain.com>
email_ssl = false
email_insecure = false
auth_mode = db_auth
ldap_url = ldaps://ldap.mydomain.com
ldap_basedn = ou=people,dc=mydomain,dc=com
ldap_uid = uid 
ldap_scope = 2 
ldap_timeout = 5
ldap_verify_cert = true
ldap_group_basedn = ou=group,dc=mydomain,dc=com
ldap_group_filter = objectclass=group
ldap_group_gid = cn
ldap_group_scope = 2
self_registration = on
token_expiration = 30
project_creation_restriction = everyone
db_host = mysql
db_port = 3306
db_user = root
redis_url = redis:6379
clair_db_host = postgres
clair_db_password = password
clair_db_port = 5432
clair_db_username = postgres
clair_db = postgres
uaa_endpoint = uaa.mydomain.org
uaa_clientid = id
uaa_clientsecret = secret
uaa_verify_cert = true
uaa_ca_cert = /path/to/ca.pem
registry_storage_provider_name = filesystem
registry_storage_provider_config =

注：可能会出现自定义的harbor_admin_password不生效。

## 启动
./install.sh

这里出现/usr/bin/python目录找不到的问题，直接重新安装python解决掉。

访问hostname，即192.168.1.20，直接进入页面，使用admin，Harbor12345登录。

解决login失败问题

#在daemon.json中添加以下参数
vim /etc/docker/daemon.json 

{
  "registry-mirrors": ["http://hub-mirror.c.163.com"],
  "insecure-registries": ["192.168.1.11"]
}

注：这里多个键值，中间需要加英文逗号。

重启

systemctl restart docker
cd /home/harbor/harbor
/.install.sh

上传镜像步骤

# 给需要上传的镜像打上tag
docker tag image_name 192.168.1.11/library/image_name
docker push 192.168.1.11/library/image_name

注：harbor初始项目目录为/library，上传的目录harbor上必须要有。

镜像tag分为4部分，hostname/harbor的项目目录/镜像名：版本号

版本号不加默认为latest