【私有镜像仓库(Harbor)】【安装配置】
Harbor的所有服务组件都是在Docker中部署的,所以官方安装使用Docker-compose快速部署,所以需要首先安装Docker、Docker-compose。由于Harbor是基于Docker Registry V2版本,所以就要求Docker版本不小于1.10.0,Docker-compose版本不小于1.6.0。
(1): 下载并解压 harbor-online-installer-v1.2.2.tgz
(2): 配置 harbor.cfg
# hostname设置访问地址,可以使用ip、域名 # 邮件设置,发送重置密码邮件时使用 email_identity =
email_server = smtp.mxhichina.com
email_server_port = 465
email_username = connor@xxxx.com
email_password = *******
email_from = Harbor email_ssl = true
# 认证方式,这里支持多种认证方式,如LADP、本次存储、数据库认证。默认是db_auth,mysql数据库认证 auth_mode = ldap_auth
# LDAP认证时配置项
ldap_url = ldap://127.0.0.1:389
ldap_searchdn = cn=Manager,dc=xxxx,dc=com
ldap_search_pwd = ********
ldap_basedn = dc=xxxx,dc=com
ldap_uid = uid
ldap_scope = 3 ldap_timeout = 5
|
(3) 安装启动harbor:
sudo ./install.sh
(4) 配置nginx (host: monitor, monitor2 file:/opt/nginx/conf/vhosts/harbor.conf)
server {
listen 80;
server_name registry.intra.xxxx.com; error_log /data/logs/nginx/error-nile.log;
client_max_body_size 0; # disable any limits to avoid HTTP 413 for large image uploads
location ^~ /proxy/ {
internal; #指定规则为internal规则,防止外部请求命中此规则
rewrite '^/proxy/(http?)/([^/]+)/(\d+)/(.*)' /$4 break;
proxy_pass $1://$2:$3;
}
location / {
proxy_pass http://devops-k8s-2-c.hb2;#harbor所在机器 }
}
|
重新加载nginx 配置: nginx -s reload
注:(1): 数据默认持久化在 /data 目录(secretkey_path配置),日志目录在/var/log/harbor
(2): harbor通过docker-compose 的启动命令参考: https://github.com/vmware/harbor/blob/master/docs/installation_guide.md#managing-harbors-lifecycle