Harbor仓库搭建

MorofushiTakaaki

已于 2025-07-28 18:32:49 修改

阅读量256

点赞数 12

CC 4.0 BY-SA版权

文章标签： docker 容器云原生

于 2025-07-28 17:36:12 首次发布

本文链接：https://blog.youkuaiyun.com/qq_62221574/article/details/149720312

文章目录

版本信息
系统优化
安装docker
安装Harbor

版本信息

中间件名称	下载地址	版本
docker	https://download.docker.com/linux/static/stable/x86_64/docker-27.4.0.tgz	27.4.0
docker-compose	https://github.com/docker/compose/releases/download/v2.39.1/docker-compose-linux-x86_64	v2.39.1
Harbor	https://github.com/goharbor/harbor/archive/refs/tags/v2.13.1.tar.gz	v2.13.1

系统优化

加载 br_netfilter 模块开机自动加载

cat > /etc/modules-load.d/k8s.conf <<EOF
br_netfilter
EOF

立即加载模块

modprobe br_netfilter

配置 sysctl 参数

cat > /etc/sysctl.d/k8s.conf <<EOF
net.ipv4.ip_forward = 1
net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1
EOF

sysctl --system

安装docker

解压安装包

tar -zxvf docker-27.4.0.tgz
cp docker/* /usr/bin/

配置启动文件

cat > /usr/lib/systemd/system/docker.socket <<EOF
[Unit]
Description=Docker Socket for the API

[Socket]
ListenStream=/var/run/docker.sock
SocketMode=0660
SocketUser=root
SocketGroup=docker

[Install]
WantedBy=sockets.target
EOF


cat > /usr/lib/systemd/system/docker.service <<EOF
[Unit]
Description=Docker Application Container Engine
Documentation=https://docs.docker.com
After=network-online.target firewalld.service docker.socket
Wants=network-online.target docker.socket

[Service]
Type=notify
ExecStart=/usr/bin/dockerd
ExecReload=/bin/kill -s HUP \$MAINPID
TimeoutSec=0
RestartSec=2
Restart=always
StartLimitBurst=3
StartLimitInterval=60s
LimitNOFILE=infinity
LimitNPROC=infinity
LimitCORE=infinity
TasksMax=infinity
Delegate=yes
KillMode=process
OOMScoreAdjust=-500

[Install]
WantedBy=multi-user.target
EOF

配置仓库地址

mkdir -p /etc/docker

cat > /etc/docker/daemon.json << EOF
{
    "registry-mirrors": ["https://192.168.8.10","https://docker.xuanyuan.me"],
    "insecure-registries": ["192.168.8.10"]
}
EOF

注释：
registry-mirrors：镜像加速器，用于加速从 Docker Hub 拉取镜像。Docker 会优先从这些镜像地址拉取镜像。
insecure-registries：不安全的私有仓库地址（HTTP 或自签名 HTTPS），Docker 会信任这些地址，不进行 TLS 校验。

启动docker并设置开启自启

systemctl daemon-reload
systemctl start docker
systemctl enable docker

安装Harbor

创建目录

tar -zxvf harbor-offline-installer-v2.13.1.tgz
mkdir -p /harbor/certs
cd /harbor/certs

创建https证书

# 创建服务器证书密钥文件harbor.key
openssl genrsa -des3 -out harbor.key 2048
# 输入密码，确认密码，自己随便定义，但是要记住，后面会用到。

# 创建服务器证书的申请文件harbor.csr
openssl req -new -key harbor.key -out harbor.csr
# 输入密钥文件的密码, 然后一路回车

# 备份一份服务器密钥文件
cp harbor.key harbor.key.org

# 去除文件口令
openssl rsa -in harbor.key.org -out harbor.key
# 输入密钥文件的密码

# 创建一个自当前日期起为期十年的证书 harbor.crt
openssl x509 -req -days 3650 -in harbor.csr -signkey harbor.key -out harbor.crt

修改harbor配置

cp harbor/harbor.yml.tmpl harbor/harbor.yml
# 修改配置如下：
hostname: 192.168.8.10
certificate: /harbor/certs/harbor.crt
private_key: /harbor/certs/harbor.key
harbor_admin_password: Harbor12345
# 数据卷目录
data_volume: /harbor/data
# 日志目录
location: /harbor/log

安装docker-compose

mv docker-compose-linux-x86_64 /usr/bin/docker-compose
chmod +x /usr/bin/docker-compose

安装Harbor

cd harbor
./install.sh

docker ps -a
CONTAINER ID   IMAGE                                 COMMAND                  CREATED             STATUS                    PORTS                                                                                NAMES
f3741f56ec78   goharbor/nginx-photon:v2.13.1         "nginx -g 'daemon of…"   About an hour ago   Up 24 minutes (healthy)   0.0.0.0:80->8080/tcp, [::]:80->8080/tcp, 0.0.0.0:443->8443/tcp, [::]:443->8443/tcp   nginx
94aebe2b405f   goharbor/harbor-jobservice:v2.13.1    "/harbor/entrypoint.…"   About an hour ago   Up 25 minutes (healthy)                                                                                        harbor-jobservice
49cbd42fbcbd   goharbor/harbor-core:v2.13.1          "/harbor/entrypoint.…"   About an hour ago   Up 25 minutes (healthy)                                                                                        harbor-core
228c6fd86a27   goharbor/registry-photon:v2.13.1      "/home/harbor/entryp…"   About an hour ago   Up 25 minutes (healthy)                                                                                        registry
2c372fd7699a   goharbor/harbor-registryctl:v2.13.1   "/home/harbor/start.…"   About an hour ago   Up 25 minutes (healthy)                                                                                        registryctl
02041d9217e6   goharbor/harbor-db:v2.13.1            "/docker-entrypoint.…"   About an hour ago   Up 25 minutes (healthy)                                                                                        harbor-db
d5066cb86bb4   goharbor/harbor-portal:v2.13.1        "nginx -g 'daemon of…"   About an hour ago   Up 24 minutes (healthy)                                                                                        harbor-portal
659aa40d3238   goharbor/redis-photon:v2.13.1         "redis-server /etc/r…"   About an hour ago   Up 25 minutes (healthy)                                                                                        redis
fcb0e67467ec   goharbor/harbor-log:v2.13.1           "/bin/sh -c /usr/loc…"   About an hour ago   Up 25 minutes (healthy)   127.0.0.1:1514->10514/tcp                                                            harbor-log

访问Harbor

访问地址：https://192.168.8.10
账号：admin
密码：Harbor12345

上传镜像至Harbor

# 从公网拉取镜像
docker pull redis

# 修改镜像格式
docker tag redis 192.168.8.10/myrepo/redis

# 连接Harbor
docker login 192.168.8.10
输入账号：admin
输入密码：Harbor12345

# 推送镜像至Harbor的myrepo项目中（myrepo需要手动新建）
docker push 192.168.8.10/myrepo/redis