Docker私有仓库harbor

Docker私有仓库harbor

目录

• Docker私有仓库harbor
  • Harbor私有仓库介绍
  • Harbor部署
    • • harbor页面不显示排错思路
  • Harbor的使用
  • Harbor拉镜像
  • 自制镜像推送到Harbor
    • • 自动构建wordpress镜像
      • 部署项目

Harbor私有仓库介绍

---

Harbor 是为企业用户设计的容器镜像仓库开源项目，包括了权限管理(RBAC)、LDAP、审计、安全漏洞扫描、镜像验真、管理界面、自我注册、HA 等企业必需的功能，同时针对中国用户的特点，设计镜像复制和中文支持等功能。

官网：TP

Harbor部署

---

# 1.安装docker-compose
[root@db01 ~]$ yum install -y docker-compose

# 2.检查是否安装成功
[root@db01 ~]$ docker-compose version
docker-compose version 1.18.0, build 8dd22a9
docker-py version: 2.6.1
CPython version: 3.6.8
OpenSSL version: OpenSSL 1.0.2k-fips 26 Jan 2017

# 3.下载harbor安装包
[root@db01 ~]$ wget https://github.com/goharbor/harbor/releases/download/v2.3.4/harbor-offline-installer-v2.3.4.tgz

# 4.解压
[root@db01 ~]$ tar xf harbor-offline-installer-v1.9.0-rc1.tgz

# 5.修改配置文件
[root@db01 harbor]$ vim /root/harbor/harbor.yml
hostname: 10.0.0.51
harbor_admin_password: 123

# 6.安装harbor
[root@db01 harbor]$ ll
-rw-r--r-- 1 root root 619632806 Sep  4  2019 harbor.v1.9.0.tar.gz
-rw-r--r-- 1 root root      5790 Nov 18 09:48 harbor.yml
-rwxr-xr-x 1 root root      5088 Sep  4  2019 install.sh
-rw-r--r-- 1 root root     11347 Sep  4  2019 LICENSE
-rwxr-xr-x 1 root root      1748 Sep  4  2019 prepare

[root@db01 harbor]$ ./install.sh

[root@db01 /tmp/harbor]$ ll
drwxr-xr-x 3 root root        20 Nov 18 09:49 common
-rw-r--r-- 1 root root      5285 Nov 18 09:49 docker-compose.yml
-rw-r--r-- 1 root root 619632806 Sep  4  2019 harbor.v1.9.0.tar.gz
-rw-r--r-- 1 root root      5790 Nov 18 09:48 harbor.yml
-rwxr-xr-x 1 root root      5088 Sep  4  2019 install.sh
-rw-r--r-- 1 root root     11347 Sep  4  2019 LICENSE
-rwxr-xr-x 1 root root      1748 Sep  4  2019 prepare

打开电饭煲访问：http://10.0.0.51/

harbor页面不显示排错思路

1、查看日志，是否正常

2、如果日志正常，使用curl命令，是否能获取到harbor网页，

3、如果能获取到harbor网页，则证明docker启动harbor没有问题

4、宿主机到浏览器是不通的，使用telnet验证80端口是否通

5、如果不通，查看宿主机防火墙、selinux、内核转发是否开启

Harbor的使用

---

# harbor的启停
[root@db01 ~]$ cd harbor/
[root@db01 harbor]$ docker-compose stop
[root@db01 harbor]$ docker-compose start
[root@db01 harbor]$ docker-compose restart

# 上传镜像到harbor
需要修改镜像名称
## 命名规则：
## harbor地址/项目名称/镜像名称:标签

10.0.0.51/guanwang/centos7:v2

# docker修改镜像名称
## docker tag ：重命名镜像，类似于cp，原镜像还在
[root@db01 ~]$ docker tag centos:7 centos7:v1
[root@db01 ~]$ docker tag centos:7 10.0.0.51/guanwang/centos7:v2

# 修改docker配置文件
{
"bip": "192.168.200.1/24",
"registry-mirrors": ["https://pgz00k39.mirror.aliyuncs.com"],
"insecure-registries": ["http://10.0.0.51"]				# //添加harbor网页
}

# 重启docker
[root@db01 harbor]$ systemctl restart docker

# 登录harbor
[root@db01 harbor]$ docker login 10.0.0.51
Username: admin
Password:
WARNING! Your password will be stored unencrypted in /root/.docker/config.json.
Configure a credential helper to remove this warning. See
https://docs.docker.com/engine/reference/commandline/login/#credentials-store
Login Succeeded

# 推送镜像，必须先在harbor上面创建对应项目
[root@db01 harbor]$ docker push 10.0.0.51/guanwang/centos7:v2

Harbor拉镜像

---

# 1.修改配置文件
[root@db02 ~]$ vim /etc/docker/daemon.json
{
"registry-mirrors": ["https://pgz00k39.mirror.aliyuncs.com"],
"insecure-registries": ["http://10.0.0.51"]			# //添加harbor页面uri
}

# 2.重启docker
[root@db02 ~]$ systemctl restart docker

# 3.登录harbor认证
[root@db02 ~]$ docker login 10.0.0.51
Username: admin
Password:
WARNING! Your password will be stored unencrypted in /root/.docker/config.json.
Configure a credential helper to remove this warning. See
https://docs.docker.com/engine/reference/commandline/login/#credentials-store
Login Succeeded

# 4.拉取镜像
[root@db02 ~]$ docker pull 10.0.0.51/guanwang/centos7:v2
v2: Pulling from guanwang/centos7
Digest: sha256:dead07b4d8ed7e29e98de0f4504d87e8880d4347859d839686a31da35a3b532f
Status: Downloaded newer image for 10.0.0.51/guanwang/centos7:v2
10.0.0.51/guanwang/centos7:v2

[root@db02 ~]$ docker images
REPOSITORY                         TAG       IMAGE ID       CREATED                  SIZE
10.0.0.51/guanwang/centos7         v2        eeb6ee3f44bd   2 months ago             204MB

自制镜像推送到Harbor

---

自动构建wordpress镜像

harbor创建对应项目

• MySQL镜像

# 拉取纯净版MySQL镜像
[root@db01 ~]$ docker pull mysql:5.7

# 修改MySQL镜像名称
[root@db01 ~]$ docker tag mysql:5.7 10.0.0.51/blog/wordpress_mysql:v1

# 推送镜像到 Harbor
[root@db01 ~]$ docker push 10.0.0.51/blog/wordpress_mysql:v1

• centos7镜像

# 拉取纯净版sentos7镜像
[root@db01 ~]$ docker pull sentos:7

# 工作目录下准备好需要的代码包、配置文件、脚本...
[root@db01 /Dockerfile/wordpress]$ ll
total 35264
-rw-r--r-- 1 root root 19674604 Aug 18 12:13 php.tgz
-rw-r--r-- 1 root root      256 Nov 16 19:56 proxy_params
-rw-r--r-- 1 root root      100 Nov 18 11:15 start.sh
-rw-r--r-- 1 root root      386 Nov 16 19:51 wordpress.conf
-rw-r--r-- 1 root root 16414590 Aug 28 16:21 wordpress.tgz
[root@db01 /Dockerfile/wordpress]$ vim wordpress.conf
server {
        listen 80;
        server_name blog.wj.com;
        root /code/wordpress;

        location  / {
                index index.php index.html;
        }

        location ~ \.php$ {
                fastcgi_pass 127.0.0.1:9000;
                fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
                include /etc/nginx/fastcgi_params;
        }
}

# 编写Dockerfile
[root@db01 /Dockerfile/wordpress]$ vim Dockerfile
FROM centos:7
ADD php.tgz /opt
RUN rm -fr /etc/yum.repos.d/* \
    && curl -o /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-7.repo \
    && curl -o /etc/yum.repos.d/CentOS-Base.repo https://mirrors.aliyun.com/repo/Centos-7.repo \
    && sed -i '/mirrors.aliyuncs.com/d' /etc/yum.repos.d/CentOS-Base.repo \
    && sed -i '/mirrors.cloud.aliyuncs.com/d' /etc/yum.repos.d/CentOS-Base.repo \
    && yum install -y nginx \
    && yum localinstall -y /opt/*.rpm \
    && sed -i 's#user = apache#user = nginx#g' /etc/php-fpm.d/www.conf \
    && sed -i 's#group = apache#group = nginx#g' /etc/php-fpm.d/www.conf \
    && mkdir /code
COPY wordpress.conf /etc/nginx/conf.d/wordpress.conf
COPY proxy_params /etc/nginx/proxy_params
COPY start.sh /start.sh
ADD wordpress.tgz /code/
RUN chown -R nginx.nginx /code \
    && rm -rf /code/wordpress/wp-config.php \
    && rm -rf /opt/* \
    && yum clean all
EXPOSE 80
EXPOSE 9000
CMD ["/bin/sh","/start.sh"]

# 自动构建镜像
[root@db01 /Dockerfile/wordpress]$ docker build -t nginx_php:v1 .	# //如果要推送harbor，就需要改名
[root@db01 /Dockerfile/wordpress]$ docker build -t 10.0.0.51/blog/wordpress:v1 .  # //推荐直接使用harbor格式镜像名称

[root@db01 /Dockerfile/wordpress]$ docker images
REPOSITORY                      TAG                        IMAGE ID       CREATED              SIZE
10.0.0.51/blog/wordpress        v1                         1d0f94af80ae   About a minute ago   721MB
10.0.0.51/blog/wordpress_mysql  v1                         8b43c6af2ad0   25 hours ago         448MB

# 推送镜像至harbor
[root@db01 /Dockerfile/wordpress]$ docker push 10.0.0.51/blog/wordpress:v1

部署项目

### 部署项目
## 创建MySQL的数据目录
[root@db02 ~]$ mkdir /data/mysql/data -p

## 创建wordpress用户数据存储目录
[root@db02 ~]$ mkdir /data/worepress/data -p

## 从harbor拉取代码准备工作
# 1.修改docker配置文件并重启
[root@db02 ~]$ vim /etc/docker/daemon.json
{
  "registry-mirrors": ["https://pgz00k39.mirror.aliyuncs.com"],
  "insecure-registries": ["http://10.0.0.51"]
}

[root@db02 ~]$ systemctl restart docker

# 2.登录harbor认证用户
[root@db02 ~]$ docker login 10.0.0.51

===================================================================================================================
## 启动MySQL，自动拉取harbor镜像
docker run \
--name wordpress-mysql \
-p 3306:3306 \
-v /data/mysql/data:/var/lib/mysql \
-e MYSQL_ROOT_PASSWORD=123 \
-e MYSQL_DATABASE=wordpress \
-e MYSQL_USER=wordpress \
-e MYSQL_PASSWORD=123 \
-d 10.0.0.51/blog/wordpress_mysql:v1 \
--character-set-server=utf8 \
--collation-server=utf8_general_ci

## 启动nginx、php，自动拉取harbor镜像
docker run \
--name wordpress-nginx-php \
--link wordpress-mysql \
-p 80:80 \
-d 10.0.0.51/blog/wordpress:v1

## 检查端口
[root@db02 ~]$ netstat -lntup|grep docker
tcp        0      0 0.0.0.0:3306            0.0.0.0:*               LISTEN      35026/docker-proxy
tcp        0      0 0.0.0.0:80              0.0.0.0:*               LISTEN      35310/docker-proxy
tcp6       0      0 :::3306                 :::*                    LISTEN      35030/docker-proxy
tcp6       0      0 :::80                   :::*                    LISTEN      35314/docker-proxy

本地做域名解析：10.0.0.51 blog.xxx.com

访问blog.xxx.com