{"id":1607,"date":"2020-06-10T16:03:21","date_gmt":"2020-06-10T08:03:21","guid":{"rendered":"http:\/\/39.97.231.10\/?p=1607"},"modified":"2020-06-10T16:03:21","modified_gmt":"2020-06-10T08:03:21","slug":"harbor-docker%e9%95%9c%e5%83%8f%e4%bb%93%e5%ba%93","status":"publish","type":"post","link":"http:\/\/www.weijing.co\/?p=1607","title":{"rendered":"harbor \u955c\u50cf\u4ed3\u5e93"},"content":{"rendered":"<h1>harbor \u955c\u50cf\u4ed3\u5e93<\/h1>\n<p>Habor\u662f\u7531VMWare\u4e2d\u56fd\u56e2\u961f\u5f00\u6e90\u7684\u5bb9\u5668\u955c\u50cf\u4ed3\u5e93\u3002\u4e8b\u5b9e\u4e0a\uff0cHabor\u662f\u5728Docker Registry\u4e0a\u8fdb\u884c\u4e86\u76f8\u5e94\u7684\u4f01\u4e1a\u7ea7\u6269\u5c55\uff0c\u4ece\u800c\u83b7\u5f97\u4e86\u66f4\u52a0\u5e7f\u6cdb\u7684\u5e94\u7528\uff0c\u8fd9\u4e9b\u65b0\u7684\u4f01\u4e1a\u7ea7\u7279\u6027\u5305\u62ec\uff1a\u7ba1\u7406\u7528\u6237\u754c\u9762\uff0c\u57fa\u4e8e\u89d2\u8272\u7684\u8bbf\u95ee\u63a7\u5236 \uff0c\u6c34\u5e73\u6269\u5c55\uff0c\u540c\u6b65\uff0cAD\/LDAP\u96c6\u6210\u4ee5\u53ca\u5ba1\u8ba1\u65e5\u5fd7\u7b49\u3002\u672c\u6587\u6863\u4ec5\u8bf4\u660e\u90e8\u7f72\u5355\u4e2a\u57fa\u7840harbor\u670d\u52a1\u7684\u6b65\u9aa4\u3002<\/p>\n<ul>\n<li>\u76ee\u5f55\n<ul>\n<li>\u5b89\u88c5\u6b65\u9aa4<\/li>\n<li>\u5b89\u88c5\u8bb2\u89e3<\/li>\n<li>\u914d\u7f6edocker\/containerd\u4fe1\u4efbharbor\u8bc1\u4e66<\/li>\n<li>\u5728k8s\u96c6\u7fa4\u4f7f\u7528harbor<\/li>\n<li>\u7ba1\u7406\u7ef4\u62a4<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h3><a id=\\\"user-content-\u5b89\u88c5\u6b65\u9aa4\\\" class=\\\"anchor\\\" href=\\\"https:\/\/github.com\/easzlab\/kubeasz\/blob\/master\/docs\/guide\/harbor.md#%E5%AE%89%E8%A3%85%E6%AD%A5%E9%AA%A4\\\" aria-hidden=\\\"true\\\"><\/a>\u5b89\u88c5\u6b65\u9aa4<\/h3>\n<ol>\n<li>\u5728ansible\u63a7\u5236\u7aef\u4e0b\u8f7d\u6700\u65b0\u7684\u00a0<a href=\\\"https:\/\/github.com\/docker\/compose\/releases\\\">docker-compose<\/a>\u00a0\u4e8c\u8fdb\u5236\u6587\u4ef6\uff0c\u6539\u540d\u540e\u628a\u5b83\u653e\u5230\u9879\u76ee\u00a0<code>\/etc\/ansible\/bin<\/code>\u76ee\u5f55\uff08\u5df2\u5305\u542b\uff09<\/li>\n<li>\u5728ansible\u63a7\u5236\u7aef\u4e0b\u8f7d\u6700\u65b0\u7684\u00a0<a href=\\\"https:\/\/github.com\/vmware\/harbor\/releases\\\">harbor<\/a>\u00a0\u79bb\u7ebf\u5b89\u88c5\u5305\uff0c\u628a\u5b83\u653e\u5230\u9879\u76ee\u00a0<code>\/etc\/ansible\/down<\/code>\u00a0\u76ee\u5f55<\/li>\n<li>\u5728ansible\u63a7\u5236\u7aef\u7f16\u8f91\/etc\/ansible\/hosts\u6587\u4ef6\uff0c\u53ef\u4ee5\u53c2\u8003\u00a0<code>example<\/code>\u76ee\u5f55\u4e0b\u7684\u6a21\u677f\uff0c\u4fee\u6539\u90e8\u5206\u4e3e\u4f8b\u5982\u4e0b<\/li>\n<\/ol>\n<div class=\\\"highlight highlight-source-shell\\\">\n<pre><span class=\\\"pl-c\\\"># \u53c2\u6570 NEW_INSTALL=(yes\/no)\uff1ayes\u8868\u793a\u65b0\u5efa harbor\uff0c\u5e76\u914d\u7f6ek8s\u8282\u70b9\u7684docker\u53ef\u4ee5\u4f7f\u7528harbor\u4ed3\u5e93<\/span>\n<span class=\\\"pl-c\\\"># no \u8868\u793a\u4ec5\u914d\u7f6ek8s\u8282\u70b9\u7684docker\u4f7f\u7528\u5df2\u6709\u7684harbor\u4ed3\u5e93<\/span>\n<span class=\\\"pl-c\\\"># \u53c2\u6570 SELF_SIGNED_CERT=(yes\/no): yes\u8868\u793a\u4f7f\u7528\u81ea\u7b7e\u540d\u8bc1\u4e66\uff0c\u5373\u5b89\u88c5\u7a0b\u5e8f\u5e2e\u4f60\u505a\u4e00\u4e2a\u81ea\u5df1\u7b7e\u540d\u7684\u8bc1\u4e66\uff08\u5f53\u7136\u8fd9\u6837\u7684\u8bc1\u4e66\u662f\u5f97\u4e0d\u5230\u6d4f\u89c8\u5668\u76f4\u63a5\u8ba4\u53ef\u7684\uff09<\/span>\n<span class=\\\"pl-c\\\"># no \u8868\u793a\u4f7f\u7528\u5df2\u6709\u7684\u8bc1\u4e66\uff0c\u5982 letsencrypt \u6216\u8005\u5176\u4ed6\u8bc1\u4e66\u9881\u53d1\u673a\u6784\uff0c\u5982\u4f7f\u7528\u6b64\u53c2\u6570\uff0c\u9700\u628a\u8bc1\u4e66\u63d0\u524d\u653e\u5728 down \u76ee\u5f55\u4e0b\uff0c\u6587\u4ef6\u540d\u79f0\u5206\u522b\u4e3a\uff1aharbor.pem \u548c harbor-key.pem<\/span>\n<span class=\\\"pl-c\\\"># \u5982\u679c\u4e0d\u9700\u8981\u8bbe\u7f6e\u57df\u540d\u8bbf\u95ee harbor\uff0c\u53ef\u4ee5\u914d\u7f6e\u53c2\u6570 HARBOR_DOMAIN=\\\"\\\"<\/span>\n[harbor]\n192.168.1.8 HARBOR_DOMAIN=<span class=\\\"pl-s\\\"><span class=\\\"pl-pds\\\">\\\"<\/span>harbor.yourdomain.com<span class=\\\"pl-pds\\\">\\\"<\/span><\/span> NEW_INSTALL=yes SELF_SIGNED_CERT=yes<\/pre>\n<\/div>\n<ol start=\\\"4\\\">\n<li>\u5728ansible\u63a7\u5236\u7aef\u6267\u884c\u00a0<code>ansible-playbook \/etc\/ansible\/11.harbor.yml<\/code>\uff0c\u5b8c\u6210harbor\u5b89\u88c5\u548cdocker \u5ba2\u6237\u7aef\u914d\u7f6e<\/li>\n<\/ol>\n<ul>\n<li>\u5b89\u88c5\u9a8c\u8bc1<\/li>\n<\/ul>\n<ol>\n<li>\u5728harbor\u8282\u70b9\u4f7f\u7528<code>docker ps -a<\/code>\u00a0\u67e5\u770bharbor\u5bb9\u5668\u7ec4\u4ef6\u8fd0\u884c\u60c5\u51b5<\/li>\n<li>\u6d4f\u89c8\u5668\u8bbf\u95eeharbor\u8282\u70b9\u7684IP\u5730\u5740\u00a0<code>https:\/\/$NodeIP<\/code>\uff0c\u7ba1\u7406\u5458\u8d26\u53f7\u662f admin \uff0c\u5bc6\u7801\u89c1 harbor.cfg(v1.5-v1.7) \u6216 harbor.yml(v1.8+) \u6587\u4ef6 harbor_admin_password \u5bf9\u5e94\u503c\uff08\u9ed8\u8ba4\u5bc6\u7801 Harbor12345 \u5df2\u88ab\u968f\u673a\u751f\u6210\u768416\u4f4d\u968f\u673a\u5bc6\u7801\u66ff\u6362\uff0c\u4e0d\u7136\u5b58\u5728\u5b89\u5168\u9690\u60a3)<\/li>\n<\/ol>\n<h3><a id=\\\"user-content-\u5b89\u88c5\u8bb2\u89e3\\\" class=\\\"anchor\\\" href=\\\"https:\/\/github.com\/easzlab\/kubeasz\/blob\/master\/docs\/guide\/harbor.md#%E5%AE%89%E8%A3%85%E8%AE%B2%E8%A7%A3\\\" aria-hidden=\\\"true\\\"><\/a>\u5b89\u88c5\u8bb2\u89e3<\/h3>\n<p>\u6839\u636e<code>11.harbor.yml<\/code>\u6587\u4ef6\uff0charbor\u8282\u70b9\u9700\u8981\u4ee5\u4e0b\u6b65\u9aa4\uff1a<\/p>\n<ul>\n<li>role\u00a0<code>prepare<\/code>\u00a0\u57fa\u7840\u7cfb\u7edf\u73af\u5883\u51c6\u5907<\/li>\n<li>role\u00a0<code>docker<\/code>\u00a0\u5b89\u88c5docker<\/li>\n<li>role\u00a0<code>harbor<\/code>\u00a0\u5b89\u88c5harbor<\/li>\n<li>\u6ce8\u610f\uff1a<code>kube-node<\/code>\u8282\u70b9\u5728harbor\u90e8\u7f72\u5b8c\u4e4b\u540e\uff0c\u9700\u8981\u914d\u7f6eharbor\u7684\u8bc1\u4e66\uff08\u8be6\u89c1\u4e0b\u8282\u914d\u7f6edocker\/containerd\u4fe1\u4efbharbor\u8bc1\u4e66\uff09\uff0c\u5e76\u53ef\u4ee5\u5728hosts\u91cc\u9762\u6dfb\u52a0harbor\u7684\u57df\u540d\u89e3\u6790\uff0c\u5982\u679c\u4f60\u7684\u73af\u5883\u4e2d\u6709dns\u670d\u52a1\u5668\uff0c\u53ef\u4ee5\u8df3\u8fc7hosts\u6587\u4ef6\u8bbe\u7f6e<\/li>\n<\/ul>\n<p>\u8bf7\u5728\u53e6\u5916\u7a97\u53e3\u6253\u5f00\u00a0<a href=\\\"https:\/\/github.com\/easzlab\/kubeasz\/blob\/master\/roles\/harbor\/tasks\/main.yml\\\">roles\/harbor\/tasks\/main.yml<\/a>\uff0c\u5bf9\u7167\u4ee5\u4e0b\u8bb2\u89e3<\/p>\n<pre>- name: \u751f\u6210 harbor \u968f\u673a\u5bc6\u7801\n  shell: &lt; \/dev\/urandom tr -dc 0-9A-Za-z-_ | head -c 16\n  register: harbor_password_gen\n- name: \u751f\u6210 DB \u968f\u673a\u5bc6\u7801\n  shell: &lt; \/dev\/urandom tr -dc 0-9A-Za-z-_ | head -c 16\n  register: db_password_gen\n- name: \u521b\u5efa data \u76ee\u5f55\n  file:\n    path: \/data\n    state: directory\n    mode: 0755\n# \u6ce8\u518c\u53d8\u91cf result\uff0c\u5982\u679c \/data \u76ee\u5f55\u4e0b\u5b58\u5728 registry \u76ee\u5f55\u8bf4\u660e\u5df2\u7ecf\u5b89\u88c5\u8fc7 harbor\uff0c\u5219\u4e0d\u8fdb\u884c\u5b89\u88c5\n- name: \u6ce8\u518c\u53d8\u91cf result\n  command: ls \/data\n  register: result\n- block:\n  - name: \u4e0b\u53d1 docker compose \u4e8c\u8fdb\u5236\u6587\u4ef6\n    copy: src={{ base_dir }}\/bin\/docker-compose dest={{ bin_dir }}\/docker-compose mode=0755\n  - name: \u4e0b\u53d1 harbor \u79bb\u7ebf\u5b89\u88c5\u5305\n    copy:\n      src: \\\"{{ base_dir }}\/down\/harbor-offline-installer-{{ HARBOR_VER }}.tgz\\\"\n      dest: \\\"\/data\/harbor-offline-installer-{{ HARBOR_VER }}.tgz\\\"\n  - name: \u89e3\u538b harbor \u79bb\u7ebf\u5b89\u88c5\u5305\n    shell: \\\"cd \/data &amp;&amp; tar zxf harbor-offline-installer-{{ HARBOR_VER }}.tgz\\\"\n  - name: \u5bfc\u5165 harbor \u6240\u9700 docker images\n    shell: \\\"{{ bin_dir }}\/docker load -i \/data\/harbor\/harbor.{{ HARBOR_VER }}.tar.gz\\\"\n  - block:\n    - name: \u751f\u6210\u81ea\u7b7e\u540d\u8bc1\u4e66\u76f8\u5173\n      copy: src={{ base_dir }}\/.cluster\/ssl\/{{ item }} dest={{ ca_dir }}\/{{ item }}\n      with_items:\n      - ca.pem\n      - ca-key.pem\n      - ca-config.json\n    - name: \u521b\u5efa harbor \u8bc1\u4e66\u8bf7\u6c42\n      template: src=harbor-csr.json.j2 dest={{ ca_dir }}\/harbor-csr.json\n    - name: \u521b\u5efa harbor \u8bc1\u4e66\u548c\u79c1\u94a5\n      shell: \\\"cd {{ ca_dir }} &amp;&amp; {{ bin_dir }}\/cfssl gencert \\\\\n            -ca={{ ca_dir }}\/ca.pem \\\\\n            -ca-key={{ ca_dir }}\/ca-key.pem \\\\\n            -config={{ ca_dir }}\/ca-config.json \\\\\n            -profile=kubernetes harbor-csr.json | {{ bin_dir }}\/cfssljson -bare harbor\\\"\n    when: SELF_SIGNED_CERT == \\'yes\\'\n  - name: \u590d\u5236 down \u76ee\u5f55\u4e0b harbor \u8bc1\u4e66\n    copy: src={{ base_dir }}\/down\/{{ item }} dest={{ ca_dir }}\/{{ item }}\n    with_items:\n    - harbor.pem\n    - harbor-key.pem\n    when: SELF_SIGNED_CERT == \\'no\\'\n  - name: \u914d\u7f6e harbor.cfg \u6587\u4ef6\n    template: src=harbor-{{ HARBOR_VER_MAIN }}.cfg.j2 dest=\/data\/harbor\/harbor.cfg\n    when: HARBOR_VER_MAIN in [\\\"v1.5\\\", \\\"v1.6\\\", \\\"v1.7\\\"]\n  - name: \u914d\u7f6e harbor.yml \u6587\u4ef6\n    template: src=harbor-{{ HARBOR_VER_MAIN }}.yml.j2 dest=\/data\/harbor\/harbor.yml\n    when: HARBOR_VER_MAIN in [\\\"v1.8\\\", \\\"v1.9\\\", \\\"v1.10\\\"]\n  - name: \u5b89\u88c5 harbor --with-clair\n    shell: \\\"cd \/data\/harbor &amp;&amp; \\\\\n    export PATH={{ bin_dir }}:$PATH &amp;&amp; \\\\\n      .\/install.sh  --with-clair\\\"\n  when: \\'\\\"registry\\\" not in result.stdout\\'<\/pre>\n<ol>\n<li>\u4e0b\u8f7ddocker-compose\u53ef\u6267\u884c\u6587\u4ef6\u5230$PATH\u76ee\u5f55<\/li>\n<li>\u81ea\u6ce8\u518c\u53d8\u91cfresult\u5224\u65ad\u662f\u5426\u5df2\u7ecf\u5b89\u88c5harbor\uff0c\u907f\u514d\u91cd\u590d\u5b89\u88c5\u95ee\u9898<\/li>\n<li>\u89e3\u538bharbor\u79bb\u7ebf\u5b89\u88c5\u5305\u5230\u6307\u5b9a\u76ee\u5f55<\/li>\n<li>\u5bfc\u5165harbor\u6240\u9700 docker images<\/li>\n<li>\u521b\u5efaharbor\u8bc1\u4e66\u548c\u79c1\u94a5(\u590d\u7528\u96c6\u7fa4\u7684CA\u8bc1\u4e66)<\/li>\n<li>\u4fee\u6539harbor.cfg\u914d\u7f6e\u6587\u4ef6<\/li>\n<li>\u542f\u52a8harbor\u5b89\u88c5\u811a\u672c<\/li>\n<\/ol>\n<h3><a id=\\\"user-content-\u914d\u7f6edockercontainerd\u4fe1\u4efbharbor\u8bc1\u4e66\\\" class=\\\"anchor\\\" href=\\\"https:\/\/github.com\/easzlab\/kubeasz\/blob\/master\/docs\/guide\/harbor.md#%E9%85%8D%E7%BD%AEdockercontainerd%E4%BF%A1%E4%BB%BBharbor%E8%AF%81%E4%B9%A6\\\" aria-hidden=\\\"true\\\"><\/a>\u914d\u7f6edocker\/containerd\u4fe1\u4efbharbor\u8bc1\u4e66<\/h3>\n<p>\u56e0\u4e3a\u6211\u4eec\u521b\u5efa\u7684harbor\u4ed3\u5e93\u4f7f\u7528\u4e86\u81ea\u7b7e\u8bc1\u4e66\uff0c\u6240\u4ee5\u5f53docker\/containerd\u5ba2\u6237\u7aef\u62c9\u53d6\u81ea\u5efaharbor\u4ed3\u5e93\u955c\u50cf\u524d\u5fc5\u987b\u914d\u7f6e\u4fe1\u4efbharbor\u8bc1\u4e66\uff0c\u5426\u5219\u51fa\u73b0\u5982\u4e0b\u9519\u8bef\uff1a<\/p>\n<pre><code># docker\n$ docker pull harbor.test.lo\/pub\/hello:v0.1.4\nError response from daemon: Get https:\/\/harbor.test.lo\/v1\/_ping: x509: certificate signed by unknown authority\n# containerd\n$ crictl pull harbor.test.lo\/pub\/hello:v0.1.4\nFATA[0000] pulling image failed: rpc error: code = Unknown desc = failed to resolve image \\\"harbor.test.lo\/pub\/hello:v0.1.4\\\": no available registry endpoint: failed to do request: Head https:\/\/harbor.test.lo\/v2\/pub\/hello\/manifests\/v0.1.4: x509: certificate signed by unknown authority\n<\/code><\/pre>\n<p>\u9879\u76ee\u811a\u672c<code>11.harbor.yml<\/code>\u4e2d\u5df2\u7ecf\u81ea\u52a8\u4e3ak8s\u96c6\u7fa4\u7684\u6bcf\u4e2anode\u8282\u70b9\u914d\u7f6e docker\/containerd \u4fe1\u4efb\u81ea\u5efa harbor \u8bc1\u4e66\uff1b\u5982\u679c\u4f60\u65e0\u6cd5\u8fd0\u884c\u6b64\u811a\u672c\uff0c\u53ef\u4ee5\u53c2\u8003\u4e0b\u8ff0\u624b\u5de5\u914d\u7f6e\uff08\u4f7f\u7528\u53d7\u4fe1\u4efb\u7684\u6b63\u5f0f\u8bc1\u4e66 SELF_SIGNED_CERT=no \u53ef\u5ffd\u7565\uff09<\/p>\n<h4><a id=\\\"user-content-docker\u914d\u7f6e\u4fe1\u4efbharbor\u8bc1\u4e66\\\" class=\\\"anchor\\\" href=\\\"https:\/\/github.com\/easzlab\/kubeasz\/blob\/master\/docs\/guide\/harbor.md#docker%E9%85%8D%E7%BD%AE%E4%BF%A1%E4%BB%BBharbor%E8%AF%81%E4%B9%A6\\\" aria-hidden=\\\"true\\\"><\/a>docker\u914d\u7f6e\u4fe1\u4efbharbor\u8bc1\u4e66<\/h4>\n<p>\u5728\u96c6\u7fa4\u6bcf\u4e2a node \u8282\u70b9\u8fdb\u884c\u5982\u4e0b\u914d\u7f6e<\/p>\n<ul>\n<li>\u521b\u5efa\u76ee\u5f55 \/etc\/docker\/certs.d\/harbor.test.lo\/ (harbor.test.lo\u4e3a\u4f60\u7684harbor\u57df\u540d)<\/li>\n<li>\u590d\u5236 harbor \u5b89\u88c5\u65f6\u7684 CA \u8bc1\u4e66\u5230\u4e0a\u8ff0\u76ee\u5f55\uff0c\u5e76\u6539\u540d ca.crt \u5373\u53ef<\/li>\n<\/ul>\n<h4><a id=\\\"user-content-containerd\u914d\u7f6e\u4fe1\u4efbharbor\u8bc1\u4e66\\\" class=\\\"anchor\\\" href=\\\"https:\/\/github.com\/easzlab\/kubeasz\/blob\/master\/docs\/guide\/harbor.md#containerd%E9%85%8D%E7%BD%AE%E4%BF%A1%E4%BB%BBharbor%E8%AF%81%E4%B9%A6\\\" aria-hidden=\\\"true\\\"><\/a>containerd\u914d\u7f6e\u4fe1\u4efbharbor\u8bc1\u4e66<\/h4>\n<p>\u5728\u96c6\u7fa4\u6bcf\u4e2a node \u8282\u70b9\u8fdb\u884c\u5982\u4e0b\u914d\u7f6e\uff08\u5047\u8bbeca.pem\u4e3a\u81ea\u5efaharbor\u7684CA\u8bc1\u4e66\uff09<\/p>\n<ul>\n<li>ubuntu 1604:\n<ul>\n<li>cp ca.pem \/usr\/share\/ca-certificates\/harbor-ca.crt<\/li>\n<li>echo harbor-ca.crt &gt;&gt; \/etc\/ca-certificates.conf<\/li>\n<li>update-ca-certificates<\/li>\n<\/ul>\n<\/li>\n<li>CentOS 7:\n<ul>\n<li>cp ca.pem \/etc\/pki\/ca-trust\/source\/anchors\/harbor-ca.crt<\/li>\n<li>update-ca-trust<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p>\u4e0a\u8ff0\u914d\u7f6e\u5b8c\u6210\u540e\uff0c\u91cd\u542f containerd \u5373\u53ef\u00a0<code>systemctl restart containerd<\/code><\/p>\n<h3><a id=\\\"user-content-\u5728k8s\u96c6\u7fa4\u4f7f\u7528harbor\\\" class=\\\"anchor\\\" href=\\\"https:\/\/github.com\/easzlab\/kubeasz\/blob\/master\/docs\/guide\/harbor.md#%E5%9C%A8k8s%E9%9B%86%E7%BE%A4%E4%BD%BF%E7%94%A8harbor\\\" aria-hidden=\\\"true\\\"><\/a>\u5728k8s\u96c6\u7fa4\u4f7f\u7528harbor<\/h3>\n<p>admin\u7528\u6237web\u767b\u5f55\u540e\u53ef\u4ee5\u65b9\u4fbf\u7684\u521b\u5efa\u9879\u76ee\uff0c\u5e76\u6307\u5b9a\u9879\u76ee\u5c5e\u6027(\u516c\u5f00\u6216\u8005\u79c1\u6709)\uff1b\u7136\u540e\u521b\u5efa\u7528\u6237\uff0c\u5e76\u5728\u9879\u76ee<code>\u6210\u5458<\/code>\u9009\u9879\u4e2d\u9009\u62e9\u7528\u6237\u548c\u6743\u9650\uff1b<\/p>\n<h4><a id=\\\"user-content-\u955c\u50cf\u4e0a\u4f20\\\" class=\\\"anchor\\\" href=\\\"https:\/\/github.com\/easzlab\/kubeasz\/blob\/master\/docs\/guide\/harbor.md#%E9%95%9C%E5%83%8F%E4%B8%8A%E4%BC%A0\\\" aria-hidden=\\\"true\\\"><\/a>\u955c\u50cf\u4e0a\u4f20<\/h4>\n<p>\u5728node\u4e0a\u4f7f\u7528harbor\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u9996\u5148\u9700\u8981\u5728\u6307\u5b9a\u76ee\u5f55\u914d\u7f6eharbor\u7684CA\u8bc1\u4e66\uff0c\u8be6\u89c1\u00a0<code>11.harbor.yml<\/code>\u6587\u4ef6\u3002<br \/>\n\u4f7f\u7528docker\u5ba2\u6237\u7aef\u767b\u5f55<code>harbor.test.com<\/code>\uff0c\u7136\u540e\u628a\u955c\u50cftag\u6210\u00a0<code>harbor.test.com\/$\u9879\u76ee\u540d\/$\u955c\u50cf\u540d:$TAG<\/code>\u00a0\u4e4b\u540e\uff0c\u5373\u53ef\u4f7f\u7528docker push \u4e0a\u4f20<\/p>\n<div class=\\\"highlight highlight-source-shell\\\">\n<pre>docker login harbor.test.com\nUsername:\nPassword:\nLogin Succeeded\ndocker tag busybox:latest harbor.test.com\/library\/busybox:latest\ndocker push harbor.test.com\/library\/busybox:latest\nThe push refers to a repository [harbor.test.com\/library\/busybox]\n0271b8eebde3: Pushed\nlatest: digest: sha256:91ef6c1c52b166be02645b8efee30d1ee65362024f7da41c404681561734c465 size: 527<\/pre>\n<\/div>\n<h4><a id=\\\"user-content-k8s\u4e2d\u4f7f\u7528harbor\\\" class=\\\"anchor\\\" href=\\\"https:\/\/github.com\/easzlab\/kubeasz\/blob\/master\/docs\/guide\/harbor.md#k8s%E4%B8%AD%E4%BD%BF%E7%94%A8harbor\\\" aria-hidden=\\\"true\\\"><\/a>k8s\u4e2d\u4f7f\u7528harbor<\/h4>\n<ol>\n<li>\u5982\u679c\u955c\u50cf\u4fdd\u5b58\u5728harbor\u4e2d\u7684\u516c\u5f00\u9879\u76ee\u4e2d\uff0c\u90a3\u4e48\u53ea\u9700\u8981\u5728yaml\u6587\u4ef6\u4e2d\u7b80\u5355\u6307\u5b9aharbor\u79c1\u6709\u955c\u50cf\u5373\u53ef\uff0c\u4f8b\u5982<\/li>\n<\/ol>\n<div class=\\\"highlight highlight-source-shell\\\">\n<pre>apiVersion: v1\nkind: Pod\nmetadata:\n  name: test-busybox\nspec:\n  containers:\n  - name: test-busybox\n    image: harbor.test.com\/xxx\/busybox:latest\n    imagePullPolicy: Always<\/pre>\n<\/div>\n<ol start=\\\"2\\\">\n<li>\u5982\u679c\u955c\u50cf\u4fdd\u5b58\u5728harbor\u4e2d\u7684\u79c1\u6709\u9879\u76ee\u4e2d\uff0c\u90a3\u4e48yaml\u6587\u4ef6\u4e2d\u4f7f\u7528\u8be5\u79c1\u6709\u9879\u76ee\u7684\u955c\u50cf\u9700\u8981\u6307\u5b9a<code>imagePullSecrets<\/code>\uff0c\u4f8b\u5982<\/li>\n<\/ol>\n<div class=\\\"highlight highlight-source-shell\\\">\n<pre>apiVersion: v1\nkind: Pod\nmetadata:\n  name: test-busybox\nspec:\n  containers:\n  - name: test-busybox\n    image: harbor.test.com\/xxx\/busybox:latest\n    imagePullPolicy: Always\n  imagePullSecrets:\n  - name: harborkey1<\/pre>\n<\/div>\n<p>\u5176\u4e2d\u00a0<code>harborKey1<\/code>\u53ef\u4ee5\u7528\u4ee5\u4e0b\u4e24\u79cd\u65b9\u5f0f\u751f\u6210\uff1a<\/p>\n<ul>\n<li>1.\u4f7f\u7528\u00a0<code>kubectl create secret docker-registry harborkey1 --docker-server=harbor.test.com --docker-username=admin --docker-password=Harbor12345 --docker-email=team@test.com<\/code><\/li>\n<li>2.\u4f7f\u7528yaml\u914d\u7f6e\u6587\u4ef6\u751f\u6210<\/li>\n<\/ul>\n<div class=\\\"highlight highlight-source-shell\\\">\n<pre>\/\/harborkey1.yaml\napiVersion: v1\nkind: Secret\nmetadata:\n  name: harborkey1\n  namespace: default\ndata:\n    .dockerconfigjson: {base64 -w 0 <span class=\\\"pl-k\\\">~<\/span>\/.docker\/config.json}\ntype: kubernetes.io\/dockerconfigjson<\/pre>\n<\/div>\n<p>\u524d\u9762docker login\u4f1a\u5728~\/.docker\u4e0b\u9762\u521b\u5efa\u4e00\u4e2aconfig.json\u6587\u4ef6\u4fdd\u5b58\u9274\u6743\u4e32\uff0c\u8fd9\u91ccsecret yaml\u7684.dockerconfigjson\u540e\u9762\u7684\u6570\u636e\u5c31\u662f\u90a3\u4e2ajson\u6587\u4ef6\u7684base64\u7f16\u7801\u8f93\u51fa\uff08-w 0\u8ba9base64\u8f93\u51fa\u5728\u5355\u884c\u4e0a\uff0c\u907f\u514d\u6298\u884c\uff09<\/p>\n<h3><a id=\\\"user-content-\u7ba1\u7406\u7ef4\u62a4\\\" class=\\\"anchor\\\" href=\\\"https:\/\/github.com\/easzlab\/kubeasz\/blob\/master\/docs\/guide\/harbor.md#%E7%AE%A1%E7%90%86%E7%BB%B4%E6%8A%A4\\\" aria-hidden=\\\"true\\\"><\/a>\u7ba1\u7406\u7ef4\u62a4<\/h3>\n<ul>\n<li>\u65e5\u5fd7\u76ee\u5f55\u00a0<code>\/var\/log\/harbor<\/code><\/li>\n<li>\u6570\u636e\u76ee\u5f55\u00a0<code>\/data<\/code>\u00a0\uff0c\u5176\u4e2d\u6700\u4e3b\u8981\u662f\u00a0<code>\/data\/database<\/code>\u00a0\u548c\u00a0<code>\/data\/registry<\/code>\u00a0\u76ee\u5f55\uff0c\u5982\u679c\u4f60\u8981\u5f7b\u5e95\u91cd\u65b0\u5b89\u88c5harbor\uff0c\u5220\u9664\u8fd9\u4e24\u4e2a\u76ee\u5f55\u5373\u53ef<\/li>\n<\/ul>\n<p>\u5148\u8fdb\u5165harbor\u5b89\u88c5\u76ee\u5f55\u00a0<code>cd \/data\/harbor<\/code>\uff0c\u5e38\u89c4\u64cd\u4f5c\u5982\u4e0b\uff1a<\/p>\n<ol>\n<li>\u6682\u505charbor\u00a0<code>docker-compose stop<\/code>\u00a0: docker\u5bb9\u5668stop\uff0c\u5e76\u4e0d\u5220\u9664\u5bb9\u5668<\/li>\n<li>\u6062\u590dharbor\u00a0<code>docker-compose start<\/code>\u00a0: \u6062\u590ddocker\u5bb9\u5668\u8fd0\u884c<\/li>\n<li>\u505c\u6b62harbor\u00a0<code>docker-compose down -v<\/code>\u00a0: \u505c\u6b62\u5e76\u5220\u9664docker\u5bb9\u5668<\/li>\n<li>\u542f\u52a8harbor\u00a0<code>docker-compose up -d<\/code>\u00a0: \u542f\u52a8\u6240\u6709docker\u5bb9\u5668<\/li>\n<\/ol>\n<p>\u4fee\u6539harbor\u7684\u8fd0\u884c\u914d\u7f6e\uff0c\u9700\u8981\u5982\u4e0b\u6b65\u9aa4\uff1a<\/p>\n<div class=\\\"highlight highlight-source-shell\\\">\n<pre><span class=\\\"pl-c\\\"># \u505c\u6b62 harbor<\/span>\n docker-compose down -v\n<span class=\\\"pl-c\\\"># \u4fee\u6539\u914d\u7f6e<\/span>\n vim harbor.cfg\n<span class=\\\"pl-c\\\"># \u6267\u884c.\/prepare\u5df2\u66f4\u65b0\u914d\u7f6e\u5230docker-compose.yml\u6587\u4ef6<\/span>\n .\/prepare\n<span class=\\\"pl-c\\\"># \u542f\u52a8 harbor<\/span>\n docker-compose up -d<\/pre>\n<\/div>\n<h4><a id=\\\"user-content-harbor-\u5347\u7ea7\\\" class=\\\"anchor\\\" href=\\\"https:\/\/github.com\/easzlab\/kubeasz\/blob\/master\/docs\/guide\/harbor.md#harbor-%E5%8D%87%E7%BA%A7\\\" aria-hidden=\\\"true\\\"><\/a>harbor \u5347\u7ea7<\/h4>\n<p>\u4ee5\u4e0b\u6b65\u9aa4\u57fa\u4e8eharbor 1.1.2 \u7248\u672c\u5347\u7ea7\u5230 1.2.2\u7248\u672c<\/p>\n<div class=\\\"highlight highlight-source-shell\\\">\n<pre><span class=\\\"pl-c\\\"># \u8fdb\u5165harbor\u89e3\u538b\u7f29\u540e\u7684\u76ee\u5f55\uff0c\u505c\u6b62harbor<\/span>\n<span class=\\\"pl-c1\\\">cd<\/span> \/data\/harbor\ndocker-compose down\n<span class=\\\"pl-c\\\"># \u5907\u4efd\u8fd9\u4e2a\u76ee\u5f55<\/span>\n<span class=\\\"pl-c1\\\">cd<\/span> ..\nmkdir -p \/backup <span class=\\\"pl-k\\\">&amp;&amp;<\/span> mv harbor \/backup\/harbor\n<span class=\\\"pl-c\\\"># \u4e0b\u8f7d\u66f4\u65b0\u7684\u79bb\u7ebf\u5b89\u88c5\u5305\uff0c\u5e76\u89e3\u538b<\/span>\ntar xvf harbor-offline-installer-v1.2.2.tgz  -C \/data\n<span class=\\\"pl-c\\\"># \u4f7f\u7528\u5b98\u65b9\u6570\u636e\u5e93\u8fc1\u79fb\u5de5\u5177\uff0c\u5907\u4efd\u6570\u636e\u5e93\uff0c\u4fee\u6539\u6570\u636e\u5e93\u8fde\u63a5\u7528\u6237\u548c\u5bc6\u7801\uff0c\u521b\u5efa\u6570\u636e\u5e93\u5907\u4efd\u76ee\u5f55<\/span>\n<span class=\\\"pl-c\\\"># \u8fc1\u79fb\u5de5\u5177\u4f7f\u7528docker\u955c\u50cf\uff0c\u955c\u50cftag\u7531\u5f85\u5347\u7ea7\u5230\u76ee\u6807harbor\u7248\u672c\u51b3\u5b9a\uff0c\u8fd9\u91cc\u7531 1.1.2\u5347\u7ea7\u52301.2.2\uff0c\u6240\u4ee5\u4f7f\u7528 tag 1.2<\/span>\ndocker pull vmware\/harbor-db-migrator:1.2\nmkdir -p \/backup\/db-1.1.2\ndocker run -it --rm -e DB_USR=root -e DB_PWD=xxxx -v \/data\/database:\/var\/lib\/mysql -v \/backup\/db-1.1.2:\/harbor-migration\/backup vmware\/harbor-db-migrator:1.2 backup\n<span class=\\\"pl-c\\\"># \u56e0\u4e3a\u65b0\u8001\u7248\u672c\u6570\u636e\u5e93\u7ed3\u6784\u4e0d\u4e00\u6837\uff0c\u9700\u8981\u6570\u636e\u5e93migration<\/span>\ndocker run -it --rm -e DB_USR=root -e DB_PWD=xxxx -v \/data\/database:\/var\/lib\/mysql vmware\/harbor-db-migrator:1.2 up head\n<span class=\\\"pl-c\\\"># \u4fee\u6539\u65b0\u7248\u672c harbor.cfg(v1.5-v1.7) \u6216 harbor.yml(v1.8+) \u914d\u7f6e\uff0c\u9700\u8981\u4fdd\u6301\u4e0e\u8001\u7248\u672c\u76f8\u5173\u914d\u7f6e\u9879\u4fdd\u6301\u4e00\u81f4\uff0c\u7136\u540e\u6267\u884c\u5b89\u88c5\u5373\u53ef<\/span>\n<span class=\\\"pl-c1\\\">cd<\/span> \/data\/harbor\nvi harbor.cfg\n.\/install.sh<\/pre>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>harbor \u955c\u50cf\u4ed3\u5e93 Habor\u662f\u7531VMWare\u4e2d\u56fd\u56e2\u961f\u5f00\u6e90\u7684\u5bb9\u5668\u955c\u50cf\u4ed3\u5e93\u3002\u4e8b\u5b9e\u4e0a\uff0cHabor\u662f\u5728Docke &hellip;<\/p>\n<p class=\"read-more\"> <a class=\"\" href=\"http:\/\/www.weijing.co\/?p=1607\"> <span class=\"screen-reader-text\">harbor \u955c\u50cf\u4ed3\u5e93<\/span> \u67e5\u770b\u5168\u6587 &raquo;<\/a><\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"default","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":""},"categories":[104,123],"tags":[],"uagb_featured_image_src":{"full":false,"thumbnail":false,"medium":false,"medium_large":false,"large":false,"1536x1536":false,"2048x2048":false,"mailpoet_newsletter_max":false,"woocommerce_thumbnail":false,"woocommerce_single":false,"woocommerce_gallery_thumbnail":false,"shop_catalog":false,"shop_single":false,"shop_thumbnail":false},"uagb_author_info":{"display_name":"weijing","author_link":"http:\/\/www.weijing.co\/?author=4"},"uagb_comment_info":0,"uagb_excerpt":"harbor \u955c\u50cf\u4ed3\u5e93 Habor\u662f\u7531VMWare\u4e2d\u56fd\u56e2\u961f\u5f00\u6e90\u7684\u5bb9\u5668\u955c\u50cf\u4ed3\u5e93\u3002\u4e8b\u5b9e\u4e0a\uff0cHabor\u662f\u5728Docke&hellip;","_links":{"self":[{"href":"http:\/\/www.weijing.co\/index.php?rest_route=\/wp\/v2\/posts\/1607"}],"collection":[{"href":"http:\/\/www.weijing.co\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.weijing.co\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.weijing.co\/index.php?rest_route=\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.weijing.co\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1607"}],"version-history":[{"count":0,"href":"http:\/\/www.weijing.co\/index.php?rest_route=\/wp\/v2\/posts\/1607\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.weijing.co\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1607"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.weijing.co\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1607"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.weijing.co\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1607"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}