环境
rocky9 minimal
安装docker
配置阿里云的docker源
yum install -y yum-utils device-mapper-persistent-data lvm2
yum-config-manager --add-repo http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
指定安装这个版本的docker-ce
yum list docker-ce --showduplicates | sort -r
yum -y install docker-ce-24.0.7-1.el9
启动docker
cat << EOF > /etc/docker/daemon.json
{
“registry-mirrors”: [“http://hub-mirror.c.163.com”]
}
EOF
systemctl daemon-reload
systemctl enable --now docker
安装docker-compose
curl -SL https://github.com/docker/compose/releases/download/v2.23.3/docker-compose-linux-x86_64 -o /usr/local/bin/docker-compose
chmod a+x /usr/local/bin/docker-compose
ln -s /usr/local/bin/docker-compose /usr/bin/docker-compose
docker-compose --version #查看版本
下载harbor离线安装包
wget https://mirror.ghproxy.com/https://github.com/goharbor/harbor/releases/download/v2.10.0/harbor-offline-installer-v2.10.0.tgz
tar -xf harbor-offline-installer-v2.10.0.tgz
配置安装
cd harbor
证书
mkdir myCerts
cd myCerts/
# ca证书
openssl genrsa -out ca.key 4096
openssl req -x509 -new -nodes -sha512 -days 3650 -subj "/CN=huahuayun.cloud" -key ca.key -out ca.crt
# 服务器证书
openssl genrsa -out server.key 4096
openssl req -new -sha512 -subj "/CN=huahuayun.cloud" -key server.key -out server.csrcat > v3.ext <<-EOF
authorityKeyIdentifier=keyid,issuer
basicConstraints=CA:FALSE
keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment
extendedKeyUsage = serverAuth
subjectAltName = @alt_names[alt_names]
DNS.1=dns.huahuayun.com
DNS.2=223.5.5.5
DNS.3=192.168.2.210
EOFopenssl x509 -req -sha512 -days 3650 -extfile v3.ext -CA ca.crt -CAkey ca.key -CAcreateserial -in server.csr -out server.crt# 查看证书到期时间
openssl x509 -in server.crt -noout -text配置
cd …
cp harbor.yml.tmpl harbor.yml
修改harbor.yml，比如https的端口、hostname、harbor_admin_password、data_volume
比如注释掉https
执行安装
./install.sh
docker-compse ps 查看harbor启动情况
cd harbor
#docker-compose down #停止
#docker-compose up -d #启动
登录❥(^_-)
podman登录
在客户端配置
cat > /etc/containers/registries.conf.d/myregistry.conf << EOF
[[registry]]
location = "hub.huahuayun.cloud"
insecure = true
EOF
podman login http://hub.huahuayun.cloud -u admin -p Harbor12345
podman login --tls-verify=false hub.huahuayun.cloud
docker登录
docker login http://hub.huahuayun.cloud -u admin -p Harbor12345
)