詳解基于Harbor搭建Docker私有鏡像倉(cāng)庫(kù)

yum update               //系統(tǒng)版本更新
vim /etc/yum.repos.d/docker.repo    //添加以下內(nèi)容

[dockerrepo]
name=Docker Repository
baseurl=https://yum.dockerproject.org/repo/main/centos/7/
enabled=1
gpgcheck=1
gpgkey=https://yum.dockerproject.org/gpg
//下面安裝 Docker 引擎
yum install docker-engine -y
//安裝docker引擎，此步也可作為更新docker版本的操作：先#systemctl stop docker 停止docker服務(wù)，再#yum install docker-engine 更新docker版本
systemctl enable docker.service
systemctl start  docker       //啟動(dòng)docker守護(hù)進(jìn)程
docker info              //查看docker運(yùn)行情況
docker -v              //查看版本信息

chmod +x /usr/local/bin/docker-compose

docker-compose --version

docker-compose version 1.17.1, build 6d101fb

wget --no-check-certificate https://pypi.python.org/packages/source/s/setuptools/setuptools-1.4.2.tar.gz
tar -vxf setuptools-1.4.2.tar.gz
cd setuptools-1.4.2
python2.7 setup.py install    //因?yàn)榉?wù)器自帶 Python 2.7
easy_install-2.7 pip

pip install docker-compose
docker-compose --version  //測(cè)試安裝是否成功

wget https://github.com/vmware/harbor/releases/download/v1.1.2/harbor-offline-installer-v1.1.2.tgz
#離線(xiàn)安裝包,也是龜速，把這個(gè)下載鏈接用迅雷下載，速度卻賊快，嘿嘿，然后再傳到服務(wù)器上去，整個(gè)過(guò)程快很多！
tar -zxvf harbor-offline-installer-v1.1.2.tgz

## Configuration file of Harbor
# hostname設(shè)置訪(fǎng)問(wèn)地址，可以使用ip、域名，不可以設(shè)置為127.0.0.1或localhost
hostname = 115.159.227.249  #這里我先配置我的服務(wù)器IP地址
# 訪(fǎng)問(wèn)協(xié)議，默認(rèn)是http，也可以設(shè)置https，如果設(shè)置https，則nginx ssl需要設(shè)置on
ui_url_protocol = http
# mysql數(shù)據(jù)庫(kù)root用戶(hù)默認(rèn)密碼root123，實(shí)際使用時(shí)修改下
db_password = root123
#Maximum number of job workers in job service
max_job_workers = 3
#Determine whether or not to generate certificate for the registry's token.
#If the value is on, the prepare script creates new root cert and private key
#for generating token to access the registry. If the value is off the default key/cert will be used.
#This flag also controls the creation of the notary signer's cert.
customize_crt = on
#The path of cert and key files for nginx, they are applied only the protocol is set to https
ssl_cert = /data/cert/server.crt
ssl_cert_key = /data/cert/server.key
#The path of secretkey storage
secretkey_path = /data
#Admiral's url, comment this attribute, or set its value to NA when Harbor is standalone
admiral_url = NA
#NOTES: The properties between BEGIN INITIAL PROPERTIES and END INITIAL PROPERTIES
#only take effect in the first boot, the subsequent changes of these properties
#should be performed on web ui
#************************BEGIN INITIAL PROPERTIES************************
#Email account settings for sending out password resetting emails.
#Email server uses the given username and password to authenticate on TLS connections to host and act as identity.
#Identity left blank to act as username.
email_identity =
email_server = smtp.mydomain.com
email_server_port = 25
email_username = sample_admin@mydomain.com
email_password = abc
email_from = admin <sample_admin@mydomain.com>
email_ssl = false
##The initial password of Harbor admin, only works for the first time when Harbor starts.
#It has no effect after the first launch of Harbor.
# 啟動(dòng)Harbor后，管理員UI登錄的密碼，默認(rèn)是Harbor12345
harbor_admin_password = Harbor12345
# 認(rèn)證方式，這里支持多種認(rèn)證方式，如LADP、本次存儲(chǔ)、數(shù)據(jù)庫(kù)認(rèn)證。默認(rèn)是db_auth，mysql數(shù)據(jù)庫(kù)認(rèn)證
auth_mode = db_auth
#The url for an ldap endpoint.
ldap_url = ldaps://ldap.mydomain.com
#A user's DN who has the permission to search the LDAP/AD server.
#If your LDAP/AD server does not support anonymous search, you should configure this DN and ldap_search_pwd.
#ldap_searchdn = uid=searchuser,ou=people,dc=mydomain,dc=com
#the password of the ldap_searchdn
#ldap_search_pwd = password
#The base DN from which to look up a user in LDAP/AD
ldap_basedn = ou=people,dc=mydomain,dc=com
#Search filter for LDAP/AD, make sure the syntax of the filter is correct.
#ldap_filter = (objectClass=person)
# The attribute used in a search to match a user, it could be uid, cn, email, sAMAccountName or other attributes de
pending on your LDAP/AD ldap_uid = uid
#the scope to search for users, 1-LDAP_SCOPE_BASE, 2-LDAP_SCOPE_ONELEVEL, 3-LDAP_SCOPE_SUBTREE
ldap_scope = 3
#Timeout (in seconds) when connecting to an LDAP Server. The default value (and most reasonable) is 5 seconds.
ldap_timeout = 5
# 是否開(kāi)啟自注冊(cè)
self_registration = on
# Token有效時(shí)間，默認(rèn)30分鐘
token_expiration = 30
# 用戶(hù)創(chuàng)建項(xiàng)目權(quán)限控制，默認(rèn)是everyone（所有人），也可以設(shè)置為adminonly（只能管理員）
project_creation_restriction = everyone
#Determine whether the job service should verify the ssl cert when it connects to a remote registry.
#Set this flag to off when the remote registry uses a self-signed or untrusted certificate.
verify_remote_cert = on
#************************END INITIAL PROPERTIES************************

vim /usr/lib/systemd/system/docker.service
#里面的這行修改為：（其實(shí)就是添加 --insecure-registry 115.159.227.249 ）
ExecStart=/usr/bin/dockerd --insecure-registry 115.159.227.249

systemctl daemon-reload && systemctl enable docker && systemctl start docker

service docker start

admin登錄
$ docker login 115.159.227.249
Username: admin
Password:
Login Succeeded

docker tag ubuntu:15.10 115.159.227.249/library/ubuntu:15.10    //給我的鏡像打個(gè) tag

docker push 115.159.227.249/library/ubuntu

The push refers to a repository [115.159.227.249/library/ubuntu]
98d59071f692: Pushed
af288f00b8a7: Pushed
4b955941a4d0: Pushed
f121afdbbd5d: Pushed
15.10: digest: sha256:ec89c4a90f45f5e103860191890f48d8379e0504a2881ff706aef0768dc0321b size: 1150