1 环境

ubuntu20 virtualbox 的虚拟机

2 docker 与 docker-compose

  1. bruce@bruce-VirtualBox:~/harbor$ docker -v & docker-compose -v
  2. [1] 36159
  3. Docker version 20.10.7, build 20.10.7-0ubuntu5~20.04.2
  4. docker-compose version 1.25.0, build unknown
  5. [1]+  已完成               docker -v
  6. bruce@bruce-VirtualBox:~/harbor$
  1. 题外话，开始没有 docker-compose，直接执行 sudo apt install docker-compose

3 安装

3.1 离线下载

下载地址：https://github.com/goharbor/harbor/releases 选择自己的版本，本次使用的是 2.4.2

3.2 解压

解压： tar -zxvf harbor-offline-installer-v2.4.2.tgz

3.3 配置

配置：cp harbor.yml.tmp harbor.yml，并修改 harbor.yml
主要是hostname，密码，https，docker volume 等

下面是全部的 harbor.yml 内容：

  1. # Configuration file of Harbor
  3. # The IP address or hostname to access admin UI and registry service.
  4. # DO NOT use localhost or 127.0.0.1, because Harbor needs to be accessed by external clients.
  5. hostname: 10.0.2.4
  7. # http related config
  8. http:
  9.   # port for http, default is 80. If https enabled, this port will redirect to https port
  10.   port: 80
  12. # https related config
  13. #https:
  14.   # https port for harbor, default is 443
  15.   #port: 443
  16.   # The path of cert and key files for nginx
  17.   #certificate: /your/certificate/path
  18.   #private_key: /your/private/key/path
  20. # # Uncomment following will enable tls communication between all harbor components
  21. # internal_tls:
  22. #   # set enabled to true means internal tls is enabled
  23. #   enabled: true
  24. #   # put your cert and key files on dir
  25. #   dir: /etc/harbor/tls/internal
  27. # Uncomment external_url if you want to enable external proxy
  28. # And when it enabled the hostname will no longer used
  29. # external_url: https://reg.mydomain.com:8433
  31. # The initial password of Harbor admin
  32. # It only works in first time to install harbor
  33. # Remember Change the admin password from UI after launching Harbor.
  34. harbor_admin_password: Harbor12345
  36. # Harbor DB configuration
  37. database:
  38.   # The password for the root user of Harbor DB. Change this before any production use.
  39.   password: root123
  40.   # The maximum number of connections in the idle connection pool. If it <=0, no idle connections are retained.
  41.   max_idle_conns: 100
  42.   # The maximum number of open connections to the database. If it <= 0, then there is no limit on the number of open connections.
  43.   # Note: the default number of connections is 1024 for postgres of harbor.
  44.   max_open_conns: 900
  46. # The default data volume
  47. data_volume: /data
  49. # Harbor Storage settings by default is using /data dir on local filesystem
  50. # Uncomment storage_service setting If you want to using external storage
  51. # storage_service:
  52. #   # ca_bundle is the path to the custom root ca certificate, which will be injected into the truststore
  53. #   # of registry's and chart repository's containers.  This is usually needed when the user hosts a internal storage with self signed certificate.
  54. #   ca_bundle:
  56. #   # storage backend, default is filesystem, options include filesystem, azure, gcs, s3, swift and oss
  57. #   # for more info about this configuration please refer https://docs.docker.com/registry/configuration/
  58. #   filesystem:
  59. #     maxthreads: 100
  60. #   # set disable to true when you want to disable registry redirect
  61. #   redirect:
  62. #     disabled: false
  64. # Trivy configuration
  65. #
  66. # Trivy DB contains vulnerability information from NVD, Red Hat, and many other upstream vulnerability databases.
  67. # It is downloaded by Trivy from the GitHub release page https://github.com/aquasecurity/trivy-db/releases and cached
  68. # in the local file system. In addition, the database contains the update timestamp so Trivy can detect whether it
  69. # should download a newer version from the Internet or use the cached one. Currently, the database is updated every
  70. # 12 hours and published as a new release to GitHub.
  71. trivy:
  72.   # ignoreUnfixed The flag to display only fixed vulnerabilities
  73.   ignore_unfixed: false
  74.   # skipUpdate The flag to enable or disable Trivy DB downloads from GitHub
  75.   #
  76.   # You might want to enable this flag in test or CI/CD environments to avoid GitHub rate limiting issues.
  77.   # If the flag is enabled you have to download the `trivy-offline.tar.gz` archive manually, extract `trivy.db` and
  78.   # `metadata.json` files and mount them in the `/home/scanner/.cache/trivy/db` path.
  79.   skip_update: false
  80.   #
  81.   # The offline_scan option prevents Trivy from sending API requests to identify dependencies.
  82.   # Scanning JAR files and pom.xml may require Internet access for better detection, but this option tries to avoid it.
  83.   # For example, the offline mode will not try to resolve transitive dependencies in pom.xml when the dependency doesn't
  84.   # exist in the local repositories. It means a number of detected vulnerabilities might be fewer in offline mode.
  85.   # It would work if all the dependencies are in local.
  86.   # This option doesn’t affect DB download. You need to specify "skip-update" as well as "offline-scan" in an air-gapped environment.
  87.   offline_scan: false
  88.   #
  89.   # insecure The flag to skip verifying registry certificate
  90.   insecure: false
  91.   # github_token The GitHub access token to download Trivy DB
  92.   #
  93.   # Anonymous downloads from GitHub are subject to the limit of 60 requests per hour. Normally such rate limit is enough
  94.   # for production operations. If, for any reason, it's not enough, you could increase the rate limit to 5000
  95.   # requests per hour by specifying the GitHub access token. For more details on GitHub rate limiting please consult
  96.   # https://developer.github.com/v3/#rate-limiting
  97.   #
  98.   # You can create a GitHub token by following the instructions in
  99.   # https://help.github.com/en/github/authenticating-to-github/creating-a-personal-access-token-for-the-command-line
  100.   #
  101.   # github_token: xxx
  103. jobservice:
  104.   # Maximum number of job workers in job service
  105.   max_job_workers: 10
  107. notification:
  108.   # Maximum retry count for webhook job
  109.   webhook_job_max_retry: 10
  111. chart:
  112.   # Change the value of absolute_url to enabled can enable absolute url in chart
  113.   absolute_url: disabled
  115. # Log configurations
  116. log:
  117.   # options are debug, info, warning, error, fatal
  118.   level: info
  119.   # configs for logs in local storage
  120.   local:
  121.     # Log files are rotated log_rotate_count times before being removed. If count is 0, old versions are removed rather than rotated.
  122.     rotate_count: 50
  123.     # Log files are rotated only if they grow bigger than log_rotate_size bytes. If size is followed by k, the size is assumed to be in kilobytes.
  124.     # If the M is used, the size is in megabytes, and if G is used, the size is in gigabytes. So size 100, size 100k, size 100M and size 100G
  125.     # are all valid.
  126.     rotate_size: 200M
  127.     # The directory on your host that store log
  128.     location: /var/log/harbor
  130.   # Uncomment following lines to enable external syslog endpoint.
  131.   # external_endpoint:
  132.   #   # protocol used to transmit log to external endpoint, options is tcp or udp
  133.   #   protocol: tcp
  134.   #   # The host of external endpoint
  135.   #   host: localhost
  136.   #   # Port of external endpoint
  137.   #   port: 5140
  139. #This attribute is for migrator to detect the version of the .cfg file, DO NOT MODIFY!
  140. _version: 2.4.0
  142. # Uncomment external_database if using external database.
  143. # external_database:
  144. #   harbor:
  145. #     host: harbor_db_host
  146. #     port: harbor_db_port
  147. #     db_name: harbor_db_name
  148. #     username: harbor_db_username
  149. #     password: harbor_db_password
  150. #     ssl_mode: disable
  151. #     max_idle_conns: 2
  152. #     max_open_conns: 0
  153. #   notary_signer:
  154. #     host: notary_signer_db_host
  155. #     port: notary_signer_db_port
  156. #     db_name: notary_signer_db_name
  157. #     username: notary_signer_db_username
  158. #     password: notary_signer_db_password
  159. #     ssl_mode: disable
  160. #   notary_server:
  161. #     host: notary_server_db_host
  162. #     port: notary_server_db_port
  163. #     db_name: notary_server_db_name
  164. #     username: notary_server_db_username
  165. #     password: notary_server_db_password
  166. #     ssl_mode: disable
  168. # Uncomment external_redis if using external Redis server
  169. # external_redis:
  170. #   # support redis, redis+sentinel
  171. #   # host for redis: <host_redis>:<port_redis>
  172. #   # host for redis+sentinel:
  173. #   #  <host_sentinel1>:<port_sentinel1>,<host_sentinel2>:<port_sentinel2>,<host_sentinel3>:<port_sentinel3>
  174. #   host: redis:6379
  175. #   password:
  176. #   # sentinel_master_set must be set to support redis+sentinel
  177. #   #sentinel_master_set:
  178. #   # db_index 0 is for core, it's unchangeable
  179. #   registry_db_index: 1
  180. #   jobservice_db_index: 2
  181. #   chartmuseum_db_index: 3
  182. #   trivy_db_index: 5
  183. #   idle_timeout_seconds: 30
  185. # Uncomment uaa for trusting the certificate of uaa instance that is hosted via self-signed cert.
  186. # uaa:
  187. #   ca_file: /path/to/ca
  189. # Global proxy
  190. # Config http proxy for components, e.g. http://my.proxy.com:3128
  191. # Components doesn't need to connect to each others via http proxy.
  192. # Remove component from `components` array if want disable proxy
  193. # for it. If you want use proxy for replication, MUST enable proxy
  194. # for core and jobservice, and set `http_proxy` and `https_proxy`.
  195. # Add domain to the `no_proxy` field, when you want disable proxy
  196. # for some special registry.
  197. proxy:
  198.   http_proxy:
  199.   https_proxy:
  200.   no_proxy:
  201.   components:
  202.     - core
  203.     - jobservice
  204.     - trivy
  206. # metric:
  207. #   enabled: false
  208. #   port: 9090
  209. #   path: /metrics
  211. # Trace related config
  212. # only can enable one trace provider(jaeger or otel) at the same time,
  213. # and when using jaeger as provider, can only enable it with agent mode or collector mode.
  214. # if using jaeger collector mode, uncomment endpoint and uncomment username, password if needed
  215. # if using jaeger agetn mode uncomment agent_host and agent_port
  216. # trace:
  217. #   enabled: true
  218. #   # set sample_rate to 1 if you wanna sampling 100% of trace data; set 0.5 if you wanna sampling 50% of trace data, and so forth
  219. #   sample_rate: 1
  220. #   # # namespace used to differenciate different harbor services
  221. #   # namespace:
  222. #   # # attributes is a key value dict contains user defined attributes used to initialize trace provider
  223. #   # attributes:
  224. #   #   application: harbor
  225. #   # # jaeger should be 1.26 or newer.
  226. #   # jaeger:
  227. #   #   endpoint: http://hostname:14268/api/traces
  228. #   #   username:
  229. #   #   password:
  230. #   #   agent_host: hostname
  231. #   #   # export trace data by jaeger.thrift in compact mode
  232. #   #   agent_port: 6831
  233. #   # otel:
  234. #   #   endpoint: hostname:4318
  235. #   #   url_path: /v1/traces
  236. #   #   compression: false
  237. #   #   insecure: true
  238. #   #   timeout: 10s

3.4 prepare 预处理

预处理一下：sudo ./prepare 会生成相关的配置等

  1. bruce@bruce-VirtualBox:~/harbor$ sudo ./prepare 
  2. [sudo] bruce 的密码： 
  3. prepare base dir is set to /home/bruce/harbor
  4. Unable to find image 'goharbor/prepare:v2.4.2' locally
  5. v2.4.2: Pulling from goharbor/prepare
  6. 6c964f3b879f: Pull complete 
  7. 3042f4284e2c: Pull complete 
  8. 7a91ea24644b: Pull complete 
  9. b3c79e094a18: Pull complete 
  10. 110443f7949d: Pull complete 
  11. 1fbee02500d7: Pull complete 
  12. 8675c3a61fe1: Pull complete 
  13. d48514bf9c2b: Pull complete 
  14. Digest: sha256:b14da6252672c596291f02a5e76fbb065f558aaf0a647f90e1c77aefaa29db74
  15. Status: Downloaded newer image for goharbor/prepare:v2.4.2
  16. WARNING:root:WARNING: HTTP protocol is insecure. Harbor will deprecate http protocol in the future. Please make sure to upgrade to https
  17. Generated configuration file: /config/portal/nginx.conf
  18. Generated configuration file: /config/log/logrotate.conf
  19. Generated configuration file: /config/log/rsyslog_docker.conf
  20. Generated configuration file: /config/nginx/nginx.conf
  21. Generated configuration file: /config/core/env
  22. Generated configuration file: /config/core/app.conf
  23. Generated configuration file: /config/registry/config.yml
  24. Generated configuration file: /config/registryctl/env
  25. Generated configuration file: /config/registryctl/config.yml
  26. Generated configuration file: /config/db/env
  27. Generated configuration file: /config/jobservice/env
  28. Generated configuration file: /config/jobservice/config.yml
  29. Generated and saved secret to file: /data/secret/keys/secretkey
  30. Successfully called func: create_root_cert
  31. Generated configuration file: /compose_location/docker-compose.yml
  32. Clean up the input dir
  33. bruce@bruce-VirtualBox:~/harbor$

3.5 安装

安装：sudo ./install.sh

  1. bruce@bruce-VirtualBox:~/harbor$ sudo ./install.sh 
  3. [Step 0]: checking if docker is installed ...
  5. Note: docker version: 20.10.7
  7. [Step 1]: checking docker-compose is installed ...
  9. Note: docker-compose version: 1.25.0
  11. [Step 2]: loading Harbor images ...
  12. 7abced50bfd2: Loading layer [==================================================>]  5.296MB/5.296MB
  13. 43ad630c07b8: Loading layer [==================================================>]  5.928MB/5.928MB
  14. 3457e72d7725: Loading layer [==================================================>]  14.47MB/14.47MB
  15. 4a079b4b377a: Loading layer [==================================================>]  29.29MB/29.29MB
  16. 7b180b7bf3b4: Loading layer [==================================================>]  22.02kB/22.02kB
  17. 7b678649a1be: Loading layer [==================================================>]  14.47MB/14.47MB
  18. Loaded image: goharbor/notary-signer-photon:v2.4.2
  19. 4f650960b0dc: Loading layer [==================================================>]  5.832MB/5.832MB
  20. 967788659fd5: Loading layer [==================================================>]  4.096kB/4.096kB
  21. 30cc19bdf2d6: Loading layer [==================================================>]  3.072kB/3.072kB
  22. 9ccede1a4324: Loading layer [==================================================>]  47.85MB/47.85MB
  23. 86f4685faff0: Loading layer [==================================================>]  12.38MB/12.38MB
  24. 25af1cf9c44e: Loading layer [==================================================>]  61.02MB/61.02MB
  25. Loaded image: goharbor/trivy-adapter-photon:v2.4.2
  26. Loaded image: goharbor/prepare:v2.4.2
  27. 323ed00cae7e: Loading layer [==================================================>]  8.447MB/8.447MB
  28. c3f8c4668352: Loading layer [==================================================>]  3.584kB/3.584kB
  29. 94b71cd07106: Loading layer [==================================================>]   2.56kB/2.56kB
  30. 5d5638decfe4: Loading layer [==================================================>]   75.6MB/75.6MB
  31. 48426521f41c: Loading layer [==================================================>]  5.632kB/5.632kB
  32. bb977315930e: Loading layer [==================================================>]  97.28kB/97.28kB
  33. 2a80a5f64ee7: Loading layer [==================================================>]  11.78kB/11.78kB
  34. 0a5146355ed0: Loading layer [==================================================>]   76.5MB/76.5MB
  35. 7d5eac57d5fa: Loading layer [==================================================>]   2.56kB/2.56kB
  36. Loaded image: goharbor/harbor-core:v2.4.2
  37. f7cedf07c50c: Loading layer [==================================================>]  8.447MB/8.447MB
  38. b2a916599ac7: Loading layer [==================================================>]  3.584kB/3.584kB
  39. 3bc2556f46f8: Loading layer [==================================================>]   2.56kB/2.56kB
  40. a9cc192089ec: Loading layer [==================================================>]  86.96MB/86.96MB
  41. 9e9c53c1bd85: Loading layer [==================================================>]  87.75MB/87.75MB
  42. Loaded image: goharbor/harbor-jobservice:v2.4.2
  43. 6111e09009c2: Loading layer [==================================================>]  7.222MB/7.222MB
  44. Loaded image: goharbor/nginx-photon:v2.4.2
  45. f4658d2c3aa3: Loading layer [==================================================>]  8.447MB/8.447MB
  46. 4b7bdcad271f: Loading layer [==================================================>]  18.13MB/18.13MB
  47. cbb8c130a490: Loading layer [==================================================>]  4.608kB/4.608kB
  48. f1367013643c: Loading layer [==================================================>]  18.93MB/18.93MB
  49. Loaded image: goharbor/harbor-exporter:v2.4.2
  50. a1b12e0ab8ea: Loading layer [==================================================>]  5.296MB/5.296MB
  51. df6629a5ee28: Loading layer [==================================================>]  5.928MB/5.928MB
  52. 944fcde3a84b: Loading layer [==================================================>]  15.88MB/15.88MB
  53. 300e181c27cf: Loading layer [==================================================>]  29.29MB/29.29MB
  54. 87f01e78dde1: Loading layer [==================================================>]  22.02kB/22.02kB
  55. 8306283aa89d: Loading layer [==================================================>]  15.88MB/15.88MB
  56. Loaded image: goharbor/notary-server-photon:v2.4.2
  57. c635aace513a: Loading layer [==================================================>]    5.3MB/5.3MB
  58. 8deb84525956: Loading layer [==================================================>]   64.5MB/64.5MB
  59. 5d1431f9963f: Loading layer [==================================================>]  3.072kB/3.072kB
  60. faeb0aac7135: Loading layer [==================================================>]  4.096kB/4.096kB
  61. 7ade25e3acdb: Loading layer [==================================================>]  65.29MB/65.29MB
  62. Loaded image: goharbor/chartmuseum-photon:v2.4.2
  63. 27495e3181af: Loading layer [==================================================>]  7.222MB/7.222MB
  64. 88649dba6134: Loading layer [==================================================>]  7.356MB/7.356MB
  65. 875f964b6f85: Loading layer [==================================================>]  1.754MB/1.754MB
  66. Loaded image: goharbor/harbor-portal:v2.4.2
  67. c724cc796747: Loading layer [==================================================>]  124.3MB/124.3MB
  68. b6c853c6dc0d: Loading layer [==================================================>]  3.584kB/3.584kB
  69. 0c5772798040: Loading layer [==================================================>]  3.072kB/3.072kB
  70. c5f3bfcfa62d: Loading layer [==================================================>]   2.56kB/2.56kB
  71. 2602a8530e9d: Loading layer [==================================================>]  3.072kB/3.072kB
  72. ba9b43b5ffb1: Loading layer [==================================================>]  3.584kB/3.584kB
  73. cf92b578ba00: Loading layer [==================================================>]  20.48kB/20.48kB
  74. Loaded image: goharbor/harbor-log:v2.4.2
  75. fc1f8cdaf1ce: Loading layer [==================================================>]  1.096MB/1.096MB
  76. eb68e72cbb03: Loading layer [==================================================>]  5.888MB/5.888MB
  77. 53a31c9e9836: Loading layer [==================================================>]  166.2MB/166.2MB
  78. bed7172f8681: Loading layer [==================================================>]  17.75MB/17.75MB
  79. c8fcd33ae148: Loading layer [==================================================>]  4.096kB/4.096kB
  80. 0c8d734a07ee: Loading layer [==================================================>]  6.144kB/6.144kB
  81. c01db4825573: Loading layer [==================================================>]  3.072kB/3.072kB
  82. 4802d0abc8ba: Loading layer [==================================================>]  2.048kB/2.048kB
  83. 70bafeb87c65: Loading layer [==================================================>]   2.56kB/2.56kB
  84. 376ced88e40e: Loading layer [==================================================>]   2.56kB/2.56kB
  85. 0ba55f221469: Loading layer [==================================================>]   2.56kB/2.56kB
  86. 55cac263100c: Loading layer [==================================================>]  8.704kB/8.704kB
  87. Loaded image: goharbor/harbor-db:v2.4.2
  88. 30ed654bbb0e: Loading layer [==================================================>]  5.301MB/5.301MB
  89. 51a81f0bf9ea: Loading layer [==================================================>]  4.096kB/4.096kB
  90. 12992ea6b45e: Loading layer [==================================================>]  3.072kB/3.072kB
  91. 91b97bcaa9d7: Loading layer [==================================================>]  17.32MB/17.32MB
  92. 1a992360f6fa: Loading layer [==================================================>]  18.12MB/18.12MB
  93. Loaded image: goharbor/registry-photon:v2.4.2
  94. d7224235291f: Loading layer [==================================================>]  5.301MB/5.301MB
  95. dd26d9070a7b: Loading layer [==================================================>]  4.096kB/4.096kB
  96. 4022ecee5f13: Loading layer [==================================================>]  17.32MB/17.32MB
  97. 93d727d0accc: Loading layer [==================================================>]  3.072kB/3.072kB
  98. 8a56be8f0b84: Loading layer [==================================================>]  28.69MB/28.69MB
  99. 629472303402: Loading layer [==================================================>]  46.81MB/46.81MB
  100. Loaded image: goharbor/harbor-registryctl:v2.4.2
  101. bf4dfb7b7a70: Loading layer [==================================================>]  120.1MB/120.1MB
  102. a0b0ce804b6b: Loading layer [==================================================>]  3.072kB/3.072kB
  103. f088aae660dd: Loading layer [==================================================>]   59.9kB/59.9kB
  104. 2c15508db9bd: Loading layer [==================================================>]  61.95kB/61.95kB
  105. Loaded image: goharbor/redis-photon:v2.4.2
  108. [Step 3]: preparing environment ...
  110. [Step 4]: preparing harbor configs ...
  111. prepare base dir is set to /home/bruce/harbor
  112. WARNING:root:WARNING: HTTP protocol is insecure. Harbor will deprecate http protocol in the future. Please make sure to upgrade to https
  113. Clearing the configuration file: /config/jobservice/env
  114. Clearing the configuration file: /config/jobservice/config.yml
  115. Clearing the configuration file: /config/nginx/nginx.conf
  116. Clearing the configuration file: /config/log/logrotate.conf
  117. Clearing the configuration file: /config/log/rsyslog_docker.conf
  118. Clearing the configuration file: /config/core/app.conf
  119. Clearing the configuration file: /config/core/env
  120. Clearing the configuration file: /config/registry/passwd
  121. Clearing the configuration file: /config/registry/config.yml
  122. Clearing the configuration file: /config/portal/nginx.conf
  123. Clearing the configuration file: /config/db/env
  124. Clearing the configuration file: /config/registryctl/config.yml
  125. Clearing the configuration file: /config/registryctl/env
  126. Generated configuration file: /config/portal/nginx.conf
  127. Generated configuration file: /config/log/logrotate.conf
  128. Generated configuration file: /config/log/rsyslog_docker.conf
  129. Generated configuration file: /config/nginx/nginx.conf
  130. Generated configuration file: /config/core/env
  131. Generated configuration file: /config/core/app.conf
  132. Generated configuration file: /config/registry/config.yml
  133. Generated configuration file: /config/registryctl/env
  134. Generated configuration file: /config/registryctl/config.yml
  135. Generated configuration file: /config/db/env
  136. Generated configuration file: /config/jobservice/env
  137. Generated configuration file: /config/jobservice/config.yml
  138. loaded secret from file: /data/secret/keys/secretkey
  139. Generated configuration file: /compose_location/docker-compose.yml
  140. Clean up the input dir
  144. [Step 5]: starting Harbor ...
  145. Creating network "harbor_harbor" with the default driver
  146. Creating harbor-log ... done
  147. Creating harbor-portal ... done
  148. Creating registry      ... done
  149. Creating registryctl   ... done
  150. Creating redis         ... done
  151. Creating harbor-db     ... done
  152. Creating harbor-core   ... done
  153. Creating nginx             ... done
  154. Creating harbor-jobservice ... done
  155. ✔ ----Harbor has been installed and started successfully.----
  156. bruce@bruce-VirtualBox:~/harbor$

3.6 访问

本次是 http://localhost 或者 http://10.0.2.4，账号是 admin，密码是 Harbor12345
image.png