Docker--企业级镜像仓库部署harbor

1.部署docker

1>下载docker

cd /etc/yum.repos.d/
wget https://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
vim docker-ce.repo   #编辑文件，只留下稳定版本的内容
yum install docker-ce -y    #安装软件，解决依赖性
yum install docker-ce container-selinux-2.77-1.el7.noarch.rpm 

2>加密，生成证书

mkdir /etc/docker/certs
openssl req -newkey rsa:4096 -nodes -sha256 -keyout certs/westos.org.key -x509 -days 365 -out certs/westos.org.crt

3>导入仓库的镜像

docker pull registry
docker images

4>生成用户的认证文件

mkdir /etc/docker/auth
docker run --rm --entrypoint htpasswd registry -Bbn meng westos > auth/htpasswd
docker run --rm --entrypoint htpasswd registry -Bbn wang westos >> auth/htpasswd   #追加
cat auth/htpasswd 

5>运行容器

docker run -d \
> --restart=always \
> --name registry \
> -v "$(pwd)"/certs:/certs \
> -e REGISTRY_HTTP_ADDR=0.0.0.0:443 \
> -e REGISTRY_HTTP_TLS_CERTIFICATE=/certs/westos.org.crt \
> -e REGISTRY_HTTP_TLS_KEY=/certs/westos.org.key \
> -p 443:443 \
> -v "$(pwd)"/auth:/auth \
> -v /opt/registry:/var/lib/registry \
> -e "REGISTRY_AUTH=htpasswd" \
> -e "REGISTRY_AUTH_HTPASSWD_REALM=Registry Realm" \
> -e REGISTRY_AUTH_HTPASSWD_PATH=/auth/htpasswd \
> registry
docker ps -a

6>主机做解析
vim /etc/hosts

7>拷贝证书到docker的配置目录下

mkdir -p certs.d/westos.org
cd certs.d/westos.org/
cp /etc/docker/certs/westos.org.crt ca.crt

8>登陆并上传镜像到仓库当中

docker login westos.org
docker tag rhel7:latest westos.org/rhel7:latest
docker push westos.org/rhel7

2.部署docker-compose

curl -L https://github.com/docker/compose/releases/download/1.23.2/docker-compose-`uname -s`-`uname -m` -o /usr/local/bin/docker-compose
chmod +x /usr/local/bin/docker-compose
docker-compose --version

3.Harbor的搭建

1>解压

tar zxf harbor-offline-installer-v1.10.1.tgz

2>修改配置文件并更新

cd harbor/
vim harbor.yml
./prepare

3>开始安装并启动

./install.sh
若在启动过程中出现端口被占用的情况
则需要先删除docker中的所有容器：docker $(rm docker ps -aq)
再停掉docker：systemctl stop docker
然后删除文件：rm -rf /var/lib/docker/network/files/local-kv.db
再次启动docker：systemctl start docker
最后执行./install.sh

4>在真实主机中做解析

vim /etc/hosts

5>在真实主机中访问https://westos.org
登陆之后可以查看仓库里面的镜像，可以上传和删除镜像，也可以创建用户