#冲刺创作新星# Install Harbor on Centos 原创

curl https://download.docker.com/linux/centos/docker-ce.repo -o /etc/yum.repos.d/docker-ce.repo
yum install docker-ce -y
sudo mkdir -p /etc/docker
sudo tee /etc/docker/daemon.json <<-'EOF'
{
  "registry-mirrors": ["https://v27k018o.mirror.aliyuncs.com"]
}
EOF
sudo systemctl daemon-reload
sudo systemctl restart docker
1.
2.
3.
4.
5.
6.
7.
8.
9.
10.

wget https://github.com/docker/compose/releases/download/1.29.2/docker-compose-Linux-x86_64 -O /usr/local/bin/docker-compose
chmod +x /usr/local/bin/docker-compose
ln -s /usr/local/bin/docker-compose /usr/bin/docker-compose
docker-compose --version
1.
2.
3.
4.

wget https://github.com/goharbor/harbor/releases/download/v2.3.0/harbor-offline-installer-v2.3.0.tgz
mkdir -p /data/app
tar -zxvf harbor-offline-installer-v2.3.0.tgz -C /data/app
1.
2.
3.

openssl genrsa -out ca.key 4096
openssl req -x509 -new -nodes -sha512 -days 3650 \
-subj "/C=CN/ST=Zhuhai/L=Zhuhai/O=BW/OU=BW/CN=sohopay.com" \
-key ca.key \
-out ca.crt
1.
2.
3.
4.
5.

openssl genrsa -out harbor.sohopay.com.key 4096
openssl req -sha512 -new \
-subj "/C=CN/ST=Zhuhai/L=Zhuhai/O=BW/OU=BW/CN=harbor.sohopay.com" \
-key harbor.sohopay.com.key \
-out harbor.sohopay.com.csr
1.
2.
3.
4.
5.

cat > v3.ext <<-EOF
authorityKeyIdentifier=keyid,issuer
basicConstraints=CA:FALSE
keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment
extendedKeyUsage = serverAuth
subjectAltName = @alt_names

[alt_names]
DNS.1=harbor.sohopay.com
DNS.2=harbor.sohopay
DNS.3=harbor
EOF
1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
11.
12.

openssl x509 -req -sha512 -days 3650 \
    -extfile v3.ext \
    -CA ca.crt -CAkey ca.key -CAcreateserial \
    -in harbor.sohopay.com.csr \
    -out harbor.sohopay.com.crt
    
openssl x509 -inform PEM -in harbor.sohopay.com.crt -out harbor.sohopay.com.cert
1.
2.
3.
4.
5.
6.
7.

mkdir -p /data/cert
cp harbor.sohopay.com.crt /data/cert/
cp harbor.sohopay.com.key /data/cert/
mkdir -p /etc/docker/certs.d/harbor.sohopay.com/
cp harbor.sohopay.com.cert /etc/docker/certs.d/harbor.sohopay.com/
cp harbor.sohopay.com.key /etc/docker/certs.d/harbor.sohopay.com/
cp ca.crt /etc/docker/certs.d/harbor.sohopay.com/
systemctl restart docker
1.
2.
3.
4.
5.
6.
7.
8.

cp /data/app/harbor/harbor.yml.tmpl /data/app/harbor/harbor.yml
1.

hostname: harbor.sohopay.com
certificate: /data/cert/harbor.sohopay.com.crt
private_key: /data/cert/harbor.sohopay.com.key
harbor_admin_password: P@ssw0rd
1.
2.
3.
4.

cd /data/app/harbor/
./prepare
1.
2.

cd /data/app/harbor/
./install.sh
1.
2.

docker-compose ps
1.

https://harbor-ip
User name: admin Password: P@ssw0rd
1.
2.

　　--insecure-registry  harbor.sohopay.com
1.

systemctl daemon-reload && systemctl restart docker.service
1.

docker login -u admin -p P@ssw0rd harbor.sohopay.com
1.

cd /data/app/harbor
docker-compose down -v
1.
2.

cd /data/app/harbor
docker-compose up -d
1.
2.

cat > /etc/rc.d/init.d/harbor.sh << EOF
#!/bin/bash
# chkconfig: 2345 85 15
# description: docker-compose init start

/usr/local/bin/docker-compose -f /data/app/harbor/docker-compose.yml up -d
EOF
chmod +x /etc/rc.d/init.d/harbor.sh
1.
2.
3.
4.
5.
6.
7.
8.

cd /data/app/harbor
docker-compose stop
docker run -it --name gc --rm --volumes-from registry vmware/registry:2.6.2-photon garbage-collect --dry-run /etc/registry/config.yml
docker run -it --name gc --rm --volumes-from registry vmware/registry-photon:v2.6.2-v1.5.0 garbage-collect /etc/registry/config.yml
docker-compose start
1.
2.
3.
4.
5.

cd /data/app/harbor
./prepare --with-trivy
# restart harbor service
docker-compose -f docker-compose.yml up -d
1.
2.
3.
4.