Oracle Linux 7安装Harbor

方法

环境: Oracle Linux 7.9

IP: 192.168.31.15

0. 安装高版本openssl

   sudo su -
   openssl version
   ---output
   OpenSSL 1.0.2k-fips  26 Jan 2017
   ---
   

   curl -L https://www.openssl.org/source/openssl-1.1.1m.tar.gz -o openssl-1.1.1m.tar.gz
   tar zxvf openssl-1.1.1m.tar.gz
   cd openssl-1.1.1m
   ./config --prefix=/usr --openssldir=/usr/local/openssl
   make
   make test
   make install
   openssl version
   ---output
   OpenSSL 1.1.1m  14 Dec 2021
   ---
   

1. 修改/etc/hosts

   sudo vi /etc/hosts
   ---
   192.168.31.15 reg.myserver.site
   ---
   

2. 创建证明书和重启docker

   sudo su -
   
   mkdir -p /u01/certs
   cd /u01/certs
   openssl req \
    -newkey rsa:4096 -nodes -sha256 -keyout reg.myserver.site.key \
    -subj "/C=CN/ST=Liaoning/L=Dalian/O=myserver/OU=Personal/CN=reg.myserver.site" \
    -addext "subjectAltName = DNS:reg.myserver.site" \
    -x509 -days 3650 -out reg.myserver.site.crt
   

3. 修改/etc/docker/daemon.json

   cp /u01/certs/reg.myserver.site.crt /etc/pki/ca-trust/source/anchors/reg.myserver.site.crt
   update-ca-trust enable
   
   sudo systemctl daemon-reload
   sudo systemctl restart docker
   

4. 安装docker-compose

   sudo curl -L https://github.com/docker/compose/releases/download/v2.2.3/docker-compose-linux-x86_64 -o /usr/local/bin/docker-compose
   sudo chmod +x /usr/local/bin/docker-compose
   sudo ln -s /usr/local/bin/docker-compose /usr/bin/docker-compose
   

5. 安装Harbor

   sudo su -
   mkdir -p /u01/harbor
   cd /u01/harbor
   curl -L https://github.com/goharbor/harbor/releases/download/v2.4.1/harbor-offline-installer-v2.4.1.tgz | tar xz --strip=1
   cp harbor.yml.tmpl harbor.yml
   
   vi harbor.yml
   ```
   hostname: reg.myserver.site
   (略)
   https:
     certificate: /u01/certs/reg.myserver.site.crt
     private_key: /u01/certs/reg.myserver.site.key
   (略)
   uaa:
     ca_file: /u01/certs/reg.myserver.site.crt  
   ```
   
   ./prepare --with-notary --with-trivy --with-chartmuseum
   docker-compose up -d 
   docker-compose ps
   # docker-compose down
   

6. 测试

   docker login reg.myserver.site -u admin -p Harbor12345
   
   # docker login reg.myserver.site
   # admin/Harbor12345
   

   docker pull hello-world
   
   docker tag hello-world reg.myserver.site/library/hello-world:v1
   docker push reg.myserver.site/library/hello-world:v1