CentOS deployment Harbor
Environmental information###
- Operating system: CentOS Linux release 7.8.2003
- docker：19.03.11
- docker-compose：1.26.0
- harbor：1.10.3
Ready to work###
Assuming that your current CentOS system is a fresh installation, all the following operations are performed with the root account;
- Update:
yum update -y
- Turn off the firewall:
systemctl stop firewalld;systemctl disable firewalld;setenforce 0
- Close SELINUX, modify the file /etc/selinux/config, change the value of SELINUX to disabled, after the modification, as shown in the red box in the following figure:
- Restart the operating system, and log in to SSH again after restarting;
Update yum source###
In order to install the application smoothly, it is recommended to update the yum source;
- Install wget first:
yum -y install wget
- Backup current source:
mv /etc/yum.repos.d/CentOS-Base.repo /etc/yum.repos.d/CentOS-Base.repo.backup
- Download domestic source:
wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo
- Clean and rebuild yum cache:
yum clean all && yum makecache
- Update again:
yum -y update
Install docker
- Create a new user group docker:
groupadd docker
- Join the current account to the docker group:
gpasswd -a root docker
- Install docker:
curl -sSL https://get.docker.com | sh
- After the installation is complete, start docker and set it to start automatically after booting:
systemctl start docker && systemctl enable docker
- Check whether the startup is successful. If you can see the server-related information, it indicates that the startup is successful:
[ root@centos7 ~]# docker version
Client: Docker Engine - Community
Version:19.03.11
API version:1.40
Go version: go1.13.10
Git commit: 42e35e61f3
Built: Mon Jun 109:13:482020
OS/Arch: linux/amd64
Experimental:false
Server: Docker Engine - Community
Engine:
Version:19.03.11
API version:1.40(minimum version 1.12)
Go version: go1.13.10
Git commit: 42e35e61f3
Built: Mon Jun 109:12:262020
OS/Arch: linux/amd64
Experimental:false
containerd:
Version:1.2.13
GitCommit: 7ad184331fa3e55e52b890ea95e65ba581ae3429
runc:
Version:1.0.0-rc10
GitCommit: dc9208a3303feef5b3839f4323d9beb36df0a9dd
docker-init:
Version:0.18.0
GitCommit: fec3683
Install docker image accelerator###
It is recommended to install the docker image accelerator. There are many ways. If you have an Alibaba Cloud registered account, you can refer to the following operations:
- Create a directory:
mkdir -p /etc/docker
- To add the image acceleration configuration, please change the following xxxxxxx to the image address configured by Alibaba Cloud:
tee /etc/docker/daemon.json <<-'EOF'{"registry-mirrors":["https://xxxxxxx.mirror.aliyuncs.com"]}
EOF
- Restart the service:
systemctl daemon-reload \
&& systemctl restart docker
Install docker-compose
- Install dependent tools:
yum -y install tree python-devel gcc epel-release python-pip
Note: If the above operation fails to install, please try again separately;
- Upgrade pip:
pip install --upgrade pip
- Install docker-compose:
pip install docker-compose
- After installation, check the docker-compose version information:
[ root@centos7 ~]# docker-compose version
docker-compose version 1.26.0, build unknown
docker-py version:4.2.1
CPython version:2.7.5
OpenSSL version: OpenSSL 1.0.2k-fips 26 Jan 2017
Install harbor
- Download the online installation package of harbar and unzip it:
wget https://github.com/goharbor/harbor/releases/download/v1.10.3/harbor-online-installer-v1.10.3.tgz \
&& tar -zxvf harbor-online-installer-v1.10.3.tgz
- Get the harbor directory, the content is as follows:
[ root@centos7 ~]# tree harbor
harbor
├── common.sh
├── harbor.yml
├── install.sh
├── LICENSE
└── prepare
-
Open the configuration file harbor.yml, and then start to modify the configuration;
-
hostname configures the local domain name, if there is no domain name, configure it as IP:
-
If you need to modify the http port, modify the position of the red box in the figure below:
-
If https is not required, be sure to comment out the relevant configuration (otherwise it will cause failure to start), as shown in the red box in the following figure:
-
If you want to modify the https setting, modify the position of the red box in the following figure:
-
If you want to modify the initial password of the administrator account, modify the position of the red box in the following figure:
-
Execute ./prepare in the harbor directory, the output of the control bar is as follows:
[ root@centos7 harbor]# clear
[ root@centos7 harbor]# ./prepare
prepare base dir is set to /root/harbor
WARNING:root:WARNING: HTTP protocol is insecure. Harbor will deprecate http protocol in the future. Please make sure to upgrade to https
Generated configuration file:/config/log/logrotate.conf
Generated configuration file:/config/log/rsyslog_docker.conf
Generated configuration file:/config/nginx/nginx.conf
Generated configuration file:/config/core/env
Generated configuration file:/config/core/app.conf
Generated configuration file:/config/registry/config.yml
Generated configuration file:/config/registryctl/env
Generated configuration file:/config/db/env
Generated configuration file:/config/jobservice/env
Generated configuration file:/config/jobservice/config.yml
Generated and saved secret to file:/secret/keys/secretkey
Generated certificate, key file:/secret/core/private_key.pem, cert file:/secret/registry/root.crt
Generated configuration file:/compose_location/docker-compose.yml
Clean up the input dir
- Execute ./install.sh in the harbor directory, the console output is as follows:
......
Digest: sha256:7903f39d47db4182f424539ec36294c407e7ac1e2e39fa095609a296e180b9e0
Status: Downloaded newer image for goharbor/harbor-registryctl:v1.10.3
Creating harbor-log ... done
Creating harbor-db ... done
Creating registry ... done
Creating redis ... done
Creating harbor-portal ... done
Creating registryctl ... done
Creating harbor-core ... done
Creating harbor-jobservice ... done
Creating nginx ... done
✔ ----Harbor has been installed and started successfully.----
- The startup is successful, and the login page is visible when the browser accesses the server address:
- The account is admin, the password is Harbor12345, the login is successful as shown below:
At this point, the harbor is successfully deployed, and then verify whether it is available;
verification###
- Next, verify whether the harbor is available. The verification method is to remotely push the image from another Linux computer (referred to as A computer) to the harbor machine;
- By default, harbor does not allow http connections. You need to modify the settings to support http connections for subsequent operations;
- If you want to connect to the harbor server from computer A, you must configure computer A, where computer A is the Linux operating system;
- Edit the /etc/docker/daemon.json file of computer A (create a new one if it does not exist), add the following content, 192.168.133.174 is the IP address of the harbor server:
{" insecure-registries":["192.168.133.174"]}
- Restart to make the configuration take effect:
systemctl daemon-reload && systemctl restart docker
Remind again: This modification is the configuration of the machine remotely connected to the Harbor service, not the configuration of the Harbor server;
Verify push mirror###
- On computer A, there is a tomcat mirror with id 2eb5a120304e, as shown below:
[ root@centos7 ~]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
tomcat latest 2eb5a120304e 3 days ago 647MB
- Tag this image in accordance with the rules of the dockr mirror repository:
docker tag 2eb5a120304e 192.168.133.174/library/tomcat:latest
- The effect of tagging is as follows:
[ root@centos7 ~]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
192.168.133.174 /library/tomcat latest 2eb5a120304e 3 days ago 647MB
tomcat latest 2eb5a120304e 3 days ago 647MB
- Log in to harbor:
docker login 192.168.133.174-u admin -p Harbor12345
- Push this image to harbor:
docker push 192.168.133.174/library/tomcat:latest
- Because it is a local area network, the push speed is relatively fast:
- Go to the harbor page, you can see the latest uploaded mirror:
So far, the deployment and verification of harbor-1.10 is complete. If you are also deploying harbor, I hope this article can give you some reference;
Recommended Posts