Docker--Harbor私有倉庫
Docker--Harbor私有倉庫
Harbor很重要 阿里雲的鏡像倉庫必須掌握
#一.//查看Docker-Compose版本判斷安裝是不是成功
chmod +x docker-compose
cp docker-compose /usr/local/bin/
docker-compose -v
"因爲Harbor鏡像倉庫的鏡像管理要用到compose因此compose是預安裝環境"
#二.//部署Harbor服務
1.下載Harbor安裝程序
tar zxvf harbor-offline-installer-v1.2.2.tgz -C /usr/local
2. 配置Harbor參數文件並啓動
vim /usr/local/harbor/harbor.cfg
//5 hostname = 192.168.100.200
sh install.sh
頁面登錄 192.168.100.200
本地服務登錄docker login -u admin -p Harbor12345 http://127.0.0.1
3.本地上傳鏡像
[root@docker01 harbor]# docker tag nginx:latest 127.0.0.1/accp/nginx:v1
[root@docker01 harbor]# docker push 127.0.0.1/accp/nginx
//頁面查看 192.168.100.200 可以查看到鏡像
4.遠程客戶端登錄,嘗試上傳鏡像
[root@localhost ~]# docker login -u admin -p Harbor12345 http://192.168.100.200
WARNING! Using --password via the CLI is insecure. Use --password-stdin.
Error response from daemon: Get https://192.168.100.200/v2/: dial tcp 192.168.100.200:443: connect: connection refused
會報443錯誤,這是由於harbor是基於http 80而不是httpds
解決方法:
[root@localhost ~]# vim /usr/lib/systemd/system/docker.service
ExecStart=/usr/bin/dockerd -H fd:// --insecure-registry 192.168.100.200 --containerd=/run/containerd/containerd.sock
[root@localhost ~]# systemctl daemon-reload "從新加載系統程序"
[root@localhost ~]# systemctl restart docker.service "重啓服務"
[root@localhost ~]# docker login -u admin -p Harbor12345 http://192.168.100.200
WARNING! Using --password via the CLI is insecure. Use --password-stdin.
WARNING! Your password will be stored unencrypted in /root/.docker/config.json.
Configure a credential helper to remove this warning. See
https://docs.docker.com/engine/reference/commandline/login/#credentials-store
Login Succeeded
[root@localhost ~]# docker pull centos:7
[root@localhost ~]# docker tag centos:7 192.168.100.200/accp/centos7:v1
[root@localhost ~]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
192.168.100.200/accp/centos7 v1 7e6257c9f8d8 6 weeks ago 203MB
centos 7 7e6257c9f8d8 6 weeks ago 203MB
[root@localhost ~]# docker push 192.168.100.200/accp/centos7
5.服務端拉取鏡像
[root@docker01 ~]# docker pull 192.168.100.200/accp/centos7:v1
Error response from daemon: Get https://192.168.100.200/v2/: dial tcp 192.168.100.200:443: connect: connection refused
[root@docker01 ~]# docker pull 127.0.0.1/accp/centos7:v1
//會在harbor頁面顯示下載次數1次
6.建立用戶管理項目
"用戶管理,新建成員zhangsan"
[root@localhost ~]# docker logout http://192.168.100.200
[root@localhost ~]# docker login -u zhangsan -p Harbor12345 http://192.168.100.200
"客戶端測試登錄"
7.報錯總結
//報錯:
docker-compose up -d
Creating network "harbor_harbor" with the default driver
ERROR:Failed to Setup IP tables: Unable to enable SKIP DNAT rule: (iptables failed:jptables
--wait-t nat-I DOCKER -i br-25094fc09b3c -j RETURN:jptables: No chain/target/match by that
name.
(exit status 1))
//解決:關閉防火牆後,docker須要重啓
systemctl restart docker
docker-compose up -daemon
8.Harbor 容器的關閉與啓動
docker-compose up -d "全部容器啓動"
docker-compose down -v "全部Harbor容器中止,但保留數據鏡像"
[root@docker01 ~]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
127.0.0.1/accp/nginx v1 7e4d58f0e5f3 13 days ago 133MB
nginx latest 7e4d58f0e5f3 13 days ago 133MB
127.0.0.1/accp/centos7 v1 7e6257c9f8d8 6 weeks ago 203MB
vmware/harbor-log v1.2.2 36ef78ae27df 2 years ago 200MB
vmware/harbor-jobservice v1.2.2 e2af366cba44 2 years ago 164MB
vmware/harbor-ui v1.2.2 39efb472c253 2 years ago 178MB
vmware/harbor-adminserver v1.2.2 c75963ec543f 2 years ago 142MB
vmware/harbor-db v1.2.2 ee7b9fa37c5d 2 years ago 329MB
vmware/nginx-photon 1.11.13 6cc5c831fc7f 2 years ago 144MB
vmware/registry 2.6.2-photon 5d9100e4350e 3 years ago 173MB
vmware/postgresql 9.6.4-photon c562762cbd12 3 years ago 225MB
vmware/clair v2.0.1-photon f04966b4af6c 3 years ago 297MB
vmware/harbor-notary-db mariadb-10.1.10 64ed814665c6 3 years ago 324MB
vmware/notary-photon signer-0.5.0 b1eda7d10640 3 years ago 156MB
vmware/notary-photon server-0.5.0 6e2646682e3c 3 years ago 157MB
photon 1.0 e6e4e4a2ba1b 4 years ago 128MB