Docker私服仓库Harbor安装的步骤详解

-rw-r--r--. 1 root root 4514 5月 22 22:23 harbor.yml
-rwxr-xr-x. 1 root root 5088 5月 21 15:59 install.sh
-rw-r--r--. 1 root root 11347 5月 21 15:59 LICENSE
-rwxr-xr-x. 1 root root 1654 5月 21 15:59 prepare

# 停止
[root@harbor harbor]# docker-compose stop
Stopping nginx ... done
Stopping harbor-portal ... done
Stopping harbor-jobservice ... done
Stopping harbor-core ... done
Stopping registryctl ... done
Stopping redis ... done
Stopping registry ... done
Stopping harbor-db ... done
Stopping harbor-log ... done

# 运行
[root@harbor harbor]# docker-compose start
Starting log ... done
Starting postgresql ... done
Starting redis ... done
Starting registry ... done
Starting core ... done
Starting jobservice ... done
Starting portal ... done
Starting proxy ... done
Starting registryctl ... done

在另外一个服务器(client)登录harbor

[root@client ~]# docker login 10.19.46.15
Username: admin
Password:
Error response from daemon: Get https://10.19.46.15/v2/: dial tcp 10.19.46.15:443: connect: connection refused

这是因为docker1.3.2版本开始默认docker registry使用的是https，我们设置Harbor默认http方式，所以当执行用docker login、pull、push等命令操作非https的docker regsitry的时就会报错。

解决https

在harbor那台服务器,在harbor的安装目录

vim docker-compose.yml

然后同时编辑harbor和client的docker配置文件,

10.19.46.15 是harbor的ip地址

# 1.
vim /etc/docker/daemon.json
{
 "insecure-registries": [
 "10.19.46.15"
 ]}
# 2.添加ExecStart=/usr/bin/dockerd |--insecure-registry=10.19.46.15
vim /usr/lib/systemd/system/docker.service
# 把这行注释掉,添加下面的配置 ExecStart=/usr/bin/dockerd -H fd:// --containerd=/run/containerd/containerd.sock
ExecStart=/usr/bin/dockerd
  |--insecure-registry=10.19.46.15

1.重启harbor 的 docker-compose,命令文上有
2.重启docker

 systemctl daemon-reload
systemctl restart docker

client 登录仓库

[root@client ~]# docker login 10.19.46.15
Username: admin
Password:
WARNING! Your password will be stored unencrypted in /root/.docker/config.json.
Configure a credential helper to remove this warning. See
https://docs.docker.com/engine/reference/commandline/login/#credentials-store
Login Succeeded

偷工减料