Harbor 安装

0. 安装 docker
1. 下载离线版本安装包
2. 修改 harbor.yml 配置文件
3. 执行 `./install.sh`安装

修改配置

# 配置内网或外网IP，不能使用本地地址
hostname: 192.168.31.242
http:
  port: 80
# 配置SSL域名
https:
  port: 443
  certificate: /home/cert/server.crt
  private_key: /home/cert/server.key

本来不想配置SSL，但是 docker login 的时候始终无法成功。。。

配置SSL

mkdir -p /home/cert && cd /home/cert
openssl genrsa -out ca.key 2048
openssl req -x509 -new -nodes -key ca.key -days 10000 -out ca.crt -subj "/CN=Harbor-ca"
openssl req -newkey rsa:4096 -nodes -sha256 -keyout server.key -out server.csr
# 前面配置的IP 
echo subjectAltName = IP:192.168.31.242 > extfile.cnf
openssl x509 -req -in server.csr -CA ca.crt -CAkey ca.key -CAcreateserial -days 365 -extfile extfile.cnf -out server.crt
cp server.crt /data/cert
cp server.key /data/cert
openssl x509 -inform PEM -in docker.crt -out docker.cert
mkdir -p /etc/docker/certs.d/localharbor/
cp server.crt /etc/docker/certs.d/localharbor/
cp docker.cert /etc/docker/certs.d/localharbor/
cp server.key /etc/docker/certs.d/localharbor/
systemctl restart docker
ll /usr/local/share/ca-certificates
cp server.crt /usr/local/share/ca-certificates/server.crt
update-ca-certificates

• 参考文献
• https://blog.csdn.net/networken/article/details/107502461#t1
• https://www.cnblogs.com/Rcsec/p/8479728.html

打包镜像

touch Dockerfile
# dockerfile 随便写，如 from nginx
docker build -t 192.168.31.242/test/busybox .
docker push 192.168.31.242/test/busybox
docker pull 192.168.31.242/test/busybox@sha256:23ae7424a102cdedeb8f5ecb774a4634719b3a18c2a2285e0bc48d76c5adf241