harbor部署

2017-03-02

harbor 部署环境

部署服务器： harbor --> 10.10.21.231
Docker版本：1.10+
Docker Compose： 1.6.0+
Python：2.7+
Harbor: 0.4.5
系统： Centos7.2
harbor github链接： https://github.com/vmware/harbor

环境配置

1. python环境安装： python2.7在Centos7.2默认已装好

2. Docker： yum install docker -y

3. Docker Compose：
安装帮助链接 https://docs.docker.com/compose/install/#/where-to-go-next
$ curl -L "https://github.com/docker/compose/releases/download/1.8.1/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose
$ chmod +x /usr/local/bin/docker-compose
$ docker-compose --version
docker-compose version: 1.8.1

开始安装

1. 下载harbor
git clone https://github.com/vmware/harbor

2. 配置harbor
PS: harbor是使用Docker Compose管理容器，并且启用https访问

$ mkdir /root/cert/
把证书 crt和key文件放到/root/cert/目录下


$ cd /usr/local/harbor-0.4.5/make
$ cat harbor.cfg
hostname = harbord.test.cn
ui_url_protocol = https
email_server = smtp.test.cn
email_server_port = 25
email_username = sample_admin@test.cn
email_password = abc
email_from = admin <sample_admin@test.cn>
email_ssl = false
harbor_admin_password = password
auth_mode = db_auth
ldap_url = ldaps://ldap.mydomain.com
ldap_basedn = ou=people,dc=mydomain,dc=com
ldap_uid = uid
ldap_scope = 3
db_password = password
self_registration = off
use_compressed_js = on
max_job_workers = 3
token_expiration = 30
verify_remote_cert = on
customize_crt = on
crt_country = CN
crt_state = State
crt_location = CN
crt_organization = test
crt_organizationalunit = test
crt_commonname = test.cn
crt_email = test@test.com
ssl_cert = /root/cert/harbord.test.cn.crt
ssl_cert_key = /root/cert/harbord.test.cn.key

上述配置详细参考下面两个链接
https://github.com/vmware/harbor/blob/0.4.5/docs/installation_guide.md
https://github.com/vmware/harbor/blob/master/docs/installation_guide.md

3. 配置nginx
配置参考链接： https://github.com/vmware/harbor/blob/master/docs/configure_https.md


4. harbor配置文件生成和安装
$ cd /usr/local/harbor-0.4.5/make
$ ./prepare
generated and saved secret key
Clearing the configuration file: ./common/config/nginx/nginx.conf
Clearing the configuration file: ./common/config/nginx/cert/harbord.test.cn.crt
Clearing the configuration file: ./common/config/nginx/cert/harbord.test.cn.key
Generated configuration file: ./common/config/nginx/nginx.conf
Generated configuration file: ./common/config/ui/env
Generated configuration file: ./common/config/ui/app.conf
Generated configuration file: ./common/config/registry/config.yml
Generated configuration file: ./common/config/db/env
Generated configuration file: ./common/config/jobservice/env
Clearing the configuration file: ./common/config/ui/private_key.pem
Clearing the configuration file: ./common/config/registry/root.crt
Generated configuration file: ./common/config/ui/private_key.pem
Generated configuration file: ./common/config/registry/root.crt
The configuration files are ready, please use docker-compose to start the service.

$ cd /usr/local/harbor-0.4.5/make/dev
If Harbor is already running, stop and remove the existing instance. Your image data remain in the file system
$ docker-compose down  
$ docker-compose up --build -d  (这部安装需要很长时间，因为docker-compose在下载镜像和创建容器)

把证书导入Ubuntu系统中

参考链接： http://kb.kerio.com/product/kerio-connect/server-configuration/ssl-certificates/adding-trusted-root-certificates-to-the-server-1605.html

PS： 这里的harbord.test.cn.crt文件是harbord.test.cn.crt.pem的证书内容

Add
1. Copy your CA to dir /usr/local/share/ca-certificates/
2. Use command:
   cat harbord.test.cn.pem > harbord.test.cn.crt
3. Update the CA store:
   sudo update-ca-certificates

Remove
1.Remove your CA.
2.Update the CA store:
  sudo update-ca-certificates --fresh

harbor测试

1 2	$ docker login reg.yourdomain.com $ docker push reg.yourdomain.com/myproject/myrepo

harbor管理

$ cd /usr/local/harbor-0.4.5/make/dev

建立和启动
$ sudo docker-compose up -d

停止
$ sudo docker-compose stop

停止后重启
$ sudo docker-compose start

删除容器，同时保持文件系统上的图象数据和容器的数据库文件：
$ sudo docker-compose rm
Going to remove harbor_proxy_1, harbor_ui_1, harbor_registry_1, harbor_mysql_1, harbor_log_1, harbor_jobservice_1
Are you sure? [yN] y
Removing harbor_proxy_1 ... done
Removing harbor_ui_1 ... done
Removing harbor_registry_1 ... done
Removing harbor_mysql_1 ... done
Removing harbor_log_1 ... done
Removing harbor_jobservice_1 ... done

删除容器的数据库和图像数据（一个干净的重新安装）：
$ rm -r /data/database
$ rm -r /data/registry