Harbor 是 Vmwar 公司開源的 企業級的 Docker Registry 管理項目
它主要 提供 Dcoker Registry 管理UI，可基于角色訪問控制, AD/LDAP 集成，日志審核等功能，完全的支持中文。
Harbor 的所有組件都在 Dcoker 中部署，所以 Harbor 可使用 Docker Compose 快速部署。
Ps
docker > =v 1.10.0
docker-compose >= v1.6.0 **
環境：
192.168.40.50 local-master
192.168.40.51 local-node1
一.安裝
下載地址：https://github.com/vmware/harbor/releases
安裝離線安裝版本
yum install python2-pip python-devel
pip install --upgrade pip
pip install docker-compose
wget https://github.com/vmware/harbor/releases/download/0.5.0/harbor-offline-installer-0.5.0.tgz
tar xvf harbor-offline-installer-0.5.0.tgz
官網安裝教程: https://github.com/vmware/harbor/blob/master/docs/installation_guide.md
目錄結構
[root@local-master harbor]# ll -h
total 865M
drwxr-xr-x 4 root root 37 Mar 29 15:10 common
-rw-r--r-- 1 root root 2.2K Dec 6 16:35 docker-compose.yml
-rw------- 1 root root 865M Dec 6 16:37 harbor.0.5.0.tgz
-rw-r--r-- 1 root root 3.7K Mar 30 14:46 harbor.cfg
-rwxr-xr-x 1 root root 4.4K Dec 6 16:35 install.sh
-rw-r--r-- 1 root root 212K Dec 6 16:35 LICENSE
-rw-r--r-- 1 root root 483 Dec 6 16:35 NOTICE
-rwxr-xr-x 1 root root 12K Dec 6 16:35 prepare
修改配置文件harbor.cfg
[root@local-master harbor]# cat harbor.cfg |grep -v '^#'
hostname = 192.168.40.50
ui_url_protocol = http
email_identity =
email_server = smtp.mydomain.com
email_server_port = 25
email_username = sample_admin@mydomain.com
email_password = xxx
email_from = admin <sample_admin@mydomain.com>
email_ssl = false
harbor_admin_password = Harbor12345
#界面默認登陸用戶是admin，密碼是Harbor12345
登陸成功后再修改密碼
auth_mode = db_auth
ldap_url = ldaps://ldap.mydomain.com
ldap_basedn = ou=people,dc=mydomain,dc=com
ldap_uid = uid
ldap_scope = 3
db_password = root123
self_registration = on
use_compressed_js = on
max_job_workers = 3
token_expiration = 30
verify_remote_cert = on
customize_crt = off
crt_country = CN
crt_state = State
crt_location = CN
crt_organization = organization
crt_organizationalunit = organizational unit
crt_commonname = example.com
crt_email = example@example.com
project_creation_restriction = everyone
ssl_cert = /data/cert/server.crt
ssl_cert_key = /data/cert/server.key
二.加載鏡像
[root@local-master harbor]# docker load -i harbor.0.5.0.tgz
三.安裝和啟動
[root@local-master harbor]# ./install.sh
四.訪問harbor管理界面
http://ip
賬號 admin
密碼 Harbor12345
五.配置docker使用harbor作為私有倉庫
#vim /usr/lib/systemd/system/docker.service
ExecStart= ....
--insecure-registry=local-master:80 \
#systemctl restart docker
#docker-compose restart
六. 上傳鏡像和下載鏡像
登陸界面添加項目：yiwu
master主機上配置：
修改docker的tag
[root@local-master harbor]# docker tag index.tenxcloud.com/google_containers/kubernetes-dashboard-amd64:v1.4.1 local-master:80/yiwu/kubernetes-dashboard-amd64:v1.4.1
[root@local-master harbor]# docker login local-master:80
Username: admin
Password:Harbor12345
Login Succeeded
## 或者docker login -u admin -p Harbor12345 -e e-mail-adress local-master:80
將本地鏡像推上私有倉庫
# docker push local-master:80/yiwu/kubernetes-dashboard-amd64:v1.4.1
node節點配置：
[root@local-node2 ~]# cat /etc/sysconfig/docker |grep INSECURE_REGISTRY
# adding the registry to the INSECURE_REGISTRY line and uncommenting it.
# INSECURE_REGISTRY='--insecure-registry'
INSECURE_REGISTRY='--insecure-registry=local-master:80'
# systemctl restart docker
拉取鏡像
# docker pull local-master:80/yiwu/kubernetes-dashboard-amd64:v1.4
七. 管理
進入harbor安裝目錄，可以使用docker-compose命令管理harbor的生命周期
停止Harbor:
$ docker-compose stop
Stopping nginx ... done
Stopping harbor-jobservice ... done
Stopping harbor-ui ... done
Stopping harbor-db ... done
Stopping registry ... done
Stopping harbor-log ... done
啟動 Harbor:
$ docker-compose start
Starting log ... done
Starting ui ... done
Starting mysql ... done
Starting jobservice ... done
Starting registry ... done
Starting proxy ... done
如果要修改harbor的配置，首先要停止harbor的容器實例，然后修改harbor.cfg文件然后執行./install 啟動harbor。
重啟docker后一定要docker-compose start，harbor才能正常
參考：
1.https://mritd.me/2016/06/27/Harbor-%E4%BC%81%E4%B8%9A%E7%BA%A7-Docker-Registry-%E5%88%9D%E8%AF%95/
2.http://blog.csdn.net/shenshouer/article/details/53390581
3.http://www.cnblogs.com/jicki/p/5737369.html
4.http://blog.csdn.net/u013127762/article/details/54314595
