# Harbor 私有倉安裝 ### 一. 容器鏡像倉 啟動容器時, docker daemon 會試圖從本地獲取相關的鏡像; 本地鏡像不存在時, 其將從 registry 中下載該鏡像並保存到本地 ![image](https://hackmd.io/_uploads/HkUX1YE40.png) * 鏡像倉選擇 * Docker registry * Docker hub * 第三方私有倉 (harbor) * 鏡像倉說明 ![image](https://hackmd.io/_uploads/B1hNJFVNA.png) ### 二. 建置容器鏡像倉(以 Harbor 為例) ``` 建置環境 : 1. 以 Harbor 建置為例 2. 採 docker-compose 方式佈署 ``` #### (一) docker-compose 環境建置 #### (二) harbor 佈署 > 下載 harbor 離線安裝包 ``` wget https://github.com/goharbor/harbor/releases/download/v2.7.0/harbor-offline-installer-v2.7.0.tgz ``` > 解壓 harbor 離線包及修改設定檔 ```htmlbars= #tar -xvf harbor-offline-installer-v2.7.0.tgz #cd harbor #cp harbor.yml.tmpl harbor.yml #vi harbor.yml ``` :::info #Configuration file of Harbor #The IP address or hostname to access admin UI and registry service. #DO NOT use localhost or 127.0.0.1, because Harbor needs to be accessed by external clients.  **hostname: 192.168.0.217** #http related config http: #port for http, default is 80. If https enabled, this port will redirect to https port  **port: 9090** ::: > 產出 harbor 佈署檔 ``` ./prepare ``` > 佈署 harbor ``` docker-compose up -d ``` (三) harbor 管理頁面 （預設帳密 : admin / Harbor12345) ![image](https://hackmd.io/_uploads/SknryYNN0.png) (四) In-secure 設定 > 於各 Client 節點 ```bash= $sudo vi /usr/lib/systemd/system/crio.service ``` ``` ExecStart=/usr/bin/crio \ --insecure-registry=$your_ip_address:8081 \ ``` ```bash= $sudo vi /etc/docker/daemon.json ``` ``` { "insecure-registries":["http://192.168.0.217:9090/"] } ``` ### 三. 應用演示 ###### tags: `registry` `container` `docker` `Micro-service`