关于java:10分钟自建企业级Docker镜像仓库这个开源项目太顶了

32次阅读

共计 11085 个字符，预计需要花费 28 分钟才能阅读完成。

平时常常用 Docker 来部署各种环境，发现从 DockerHub 上下载镜像有时候比较慢。第三方的镜像还能够应用一些国内的镜像仓库来减速，如果咱们本人构建的镜像那就不行了。这时候搭建一个公有的镜像仓库很有必要，最近发现 Harbor 这个企业级镜像仓库，十分好用且功能强大，举荐给大家！

SpringBoot 实战电商我的项目 mall（40k+star）地址：https://github.com/macrozheng/mall

Harbor 简介

Harbor 是一款开源的 Docker 镜像仓库服务，在 Github 上目前有 13.4k+Star。提供了基于角色的镜像拜访机制，能够爱护你的镜像平安。

装置

学习开源我的项目的第一步，个别都是把它运行起来，咱们先来把 Harbor 运行起来吧！

  • 下载 Harbor 安装包，这里下载的是 v1.10.6 离线版本，下载地址：https://github.com/goharbor/h…

  • 下载实现后上传到 Linux 服务器，应用如下命令解压；
tar xvf harbor-offline-installer-v1.10.6.tgz
  • 解压实现后，所有文件内容如下；
[root@linux-local harbor]# ll
total 700260
drwxr-xr-x. 3 root root        20 Dec  2 11:18 common
-rw-r--r--. 1 root root      3398 Nov 17 11:58 common.sh
-rw-r--r--. 1 root root      5348 Dec  2 14:41 docker-compose.yml
-rw-r--r--. 1 root root 717021676 Nov 17 11:59 harbor.v1.10.6.tar.gz
-rw-r--r--. 1 root root      5882 Dec  2 11:21 harbor.yml
-rwxr-xr-x. 1 root root      2284 Nov 17 11:58 install.sh
-rw-r--r--. 1 root root     11347 Nov 17 11:58 LICENSE
-rwxr-xr-x. 1 root root      1749 Nov 17 11:58 prepare
  • 批改 Harbor 的配置文件 harbor.yml，批改hostname，并正文掉https 配置，相干属性阐明参考正文即可；
# 指定 Harbor 的治理界面及镜像仓库拜访地址
hostname: 192.168.3.101

# http 相干配置
http:
  # http 端口，如果配置了 https，默认应用 https
  port: 80

# https 相干配置
#https:
#  # https 端口
#  port: 443
#  # 指定 Habor 中 Nginx 的 https 的证书和私钥地址
#  certificate: /your/certificate/path
#  private_key: /your/private/key/path

# Harbor 默认管理员账号 admin 的明码
harbor_admin_password: Harbor12345

# Harbor 内置 PostgreSQL 数据库配置
database:
  # root 用户明码
  password: root123
  # 最大闲暇连接数，小于等于 0 示意无闲暇连贯
  max_idle_conns: 50
  # 最大连接数，小于等于 0 示意无限度
  max_open_conns: 100

# 默认数据目录
data_volume: /data

# Clair configuration
clair:
  # The interval of clair updaters, the unit is hour, set to 0 to disable the updaters.
  updaters_interval: 12

jobservice:
  # Maximum number of job workers in job service
  max_job_workers: 10

notification:
  # Maximum retry count for webhook job
  webhook_job_max_retry: 10

chart:
  # Change the value of absolute_url to enabled can enable absolute url in chart
  absolute_url: disabled

# 日志配置
log:
  # 日志级别配置：debug, info, warning, error, fatal
  level: info
  # 日志本地存储策略
  local:
    # 日志文件滚动数量，超过该数量会删除日志文件
    rotate_count: 50
    # 日志滚动大小，超过该大小会生成新的日志文件
    rotate_size: 200M
    # 日志存储门路
    location: /var/log/harbor

# This attribute is for migrator to detect the version of the .cfg file, DO NOT MODIFY!
_version: 1.10.0

# Configure proxies to be used by Clair, the replication jobservice, and Harbor. Leave blank if no proxies are required.
proxy:
  http_proxy:
  https_proxy:
  # no_proxy endpoints will appended to 127.0.0.1,localhost,.local,.internal,log,db,redis,nginx,core,portal,postgresql,jobservice,registry,registryctl,clair,chartmuseum,notary-server
  no_proxy:
  components:
    - core
    - jobservice
    - clair
  • 应用 install.sh 脚本装置 Harbor:
./install.sh
  • Harbor 启动胜利后会输入如下信息，这里须要留神的是 Harbor 会启动 Nginx、Redis 之类的容器，以前创立过的须要先删除掉，看到 started successfully 就示意启动胜利了；
[Step 0]: checking if docker is installed ...

Note: docker version: 19.03.5

[Step 1]: checking docker-compose is installed ...

Note: docker-compose version: 1.24.0

[Step 2]: loading Harbor images ...
Loaded image: goharbor/harbor-migrator:v1.10.6
Loaded image: goharbor/harbor-core:v1.10.6
Loaded image: goharbor/harbor-db:v1.10.6
Loaded image: goharbor/harbor-registryctl:v1.10.6
Loaded image: goharbor/nginx-photon:v1.10.6
Loaded image: goharbor/clair-photon:v1.10.6
Loaded image: goharbor/clair-adapter-photon:v1.10.6
Loaded image: goharbor/harbor-portal:v1.10.6
Loaded image: goharbor/harbor-log:v1.10.6
Loaded image: goharbor/registry-photon:v1.10.6
Loaded image: goharbor/notary-signer-photon:v1.10.6
Loaded image: goharbor/harbor-jobservice:v1.10.6
Loaded image: goharbor/redis-photon:v1.10.6
Loaded image: goharbor/prepare:v1.10.6
Loaded image: goharbor/notary-server-photon:v1.10.6
Loaded image: goharbor/chartmuseum-photon:v1.10.6


[Step 3]: preparing environment ...

[Step 4]: preparing harbor configs ...
prepare base dir is set to /mydata/harbor/harbor
WARNING:root:WARNING: HTTP protocol is insecure. Harbor will deprecate http protocol in the future. Please make sure to upgrade to https
Clearing the configuration file: /config/log/logrotate.conf
Clearing the configuration file: /config/log/rsyslog_docker.conf
Clearing the configuration file: /config/nginx/nginx.conf
Clearing the configuration file: /config/core/env
Clearing the configuration file: /config/core/app.conf
Clearing the configuration file: /config/registry/config.yml
Clearing the configuration file: /config/registry/root.crt
Clearing the configuration file: /config/registryctl/env
Clearing the configuration file: /config/registryctl/config.yml
Clearing the configuration file: /config/db/env
Clearing the configuration file: /config/jobservice/env
Clearing the configuration file: /config/jobservice/config.yml
Generated configuration file: /config/log/logrotate.conf
Generated configuration file: /config/log/rsyslog_docker.conf
Generated configuration file: /config/nginx/nginx.conf
Generated configuration file: /config/core/env
Generated configuration file: /config/core/app.conf
Generated configuration file: /config/registry/config.yml
Generated configuration file: /config/registryctl/env
Generated configuration file: /config/db/env
Generated configuration file: /config/jobservice/env
Generated configuration file: /config/jobservice/config.yml
loaded secret from file: /secret/keys/secretkey
Generated configuration file: /compose_location/docker-compose.yml
Clean up the input dir


Note: stopping existing Harbor instance ...
Stopping harbor-jobservice ... done
Stopping harbor-core       ... done
Stopping redis             ... done
Stopping registryctl       ... done
Stopping registry          ... done
Stopping harbor-db         ... done
Stopping harbor-portal     ... done
Stopping harbor-log        ... done
Removing harbor-jobservice ... done
Removing harbor-core       ... done
Removing redis             ... done
Removing registryctl       ... done
Removing registry          ... done
Removing harbor-db         ... done
Removing harbor-portal     ... done
Removing harbor-log        ... done
Removing network harbor_harbor


[Step 5]: starting Harbor ...
Creating network "harbor_harbor" with the default driver
Creating harbor-log ... done
Creating harbor-portal ... done
Creating registry      ... done
Creating harbor-db     ... done
Creating registryctl   ... done
Creating redis         ... done
Creating harbor-core   ... done
Creating harbor-jobservice ... done
Creating nginx             ... done
✔ ----Harbor has been installed and started successfully.----
  • 咱们能够应用 docker images 命令查看下装置 Harbor 装置的 Docker 镜像，还挺多的；
REPOSITORY                           TAG                 IMAGE ID            CREATED             SIZE                              latest              dc3bacd8b5ea        8 days ago          1.23MB
goharbor/chartmuseum-photon          v1.10.6             01b70eccaf71        2 weeks ago         178MB
goharbor/harbor-migrator             v1.10.6             a5d4a4ee44e4        2 weeks ago         356MB
goharbor/redis-photon                v1.10.6             99e25b65195c        2 weeks ago         132MB
goharbor/clair-adapter-photon        v1.10.6             aa72598ecc12        2 weeks ago         61.3MB
goharbor/clair-photon                v1.10.6             da1b03030e34        2 weeks ago         171MB
goharbor/notary-server-photon        v1.10.6             37c8bed3e255        2 weeks ago         142MB
goharbor/notary-signer-photon        v1.10.6             c56d82220929        2 weeks ago         139MB
goharbor/harbor-registryctl          v1.10.6             1d3986d90c65        2 weeks ago         101MB
goharbor/registry-photon             v1.10.6             3e669c8204ed        2 weeks ago         83.7MB
goharbor/nginx-photon                v1.10.6             a39d8dd46060        2 weeks ago         43.7MB
goharbor/harbor-log                  v1.10.6             1085d3865a57        2 weeks ago         106MB
goharbor/harbor-jobservice           v1.10.6             aa05538acecf        2 weeks ago         143MB
goharbor/harbor-core                 v1.10.6             193e76e6be5d        2 weeks ago         129MB
goharbor/harbor-portal               v1.10.6             942a9c448850        2 weeks ago         51.8MB
goharbor/harbor-db                   v1.10.6             37da2e5414ae        2 weeks ago         170MB
goharbor/prepare                     v1.10.6             35f073e33ec5        2 weeks ago         177MB
  • 拜访 Harbor 的治理界面，输出账号密码 admin:Harbor12345 登录即可，拜访地址：http://192.168.3.101/

应用

接下来咱们就能够应用 Harbor 来治理咱们的镜像了。

  • 首先点击 新建我的项目 按钮，新建一个我的项目：

  • 这里新建一个叫做 test 的公有我的项目；

  • 因为 docker login 命令默认不反对 http 拜访，所以咱们须要手动开启，应用 Vim 编辑器批改 docker 的配置文件daemon.json；
vi /etc/docker/daemon.json
  • 增加一行 insecure-registries 配置即可，容许应用非平安形式拜访 Harbor 镜像仓库，留神不要少了端口号80；
{"registry-mirrors":["https://xxx.aliyuncs.com"],
 "insecure-registries":["192.168.3.101:80"]
}
  • 再次重新启动 docker 服务；
systemctl restart docker
  • 再次应用 install.sh 启动 Harbor 服务；
./install.sh
  • 应用 docker login 命令拜访 Harbor 镜像仓库，留神加上端口号为80；
[root@linux-local harbor]# docker login 192.168.3.101:80
Username: admin
Password: 
WARNING! Your password will be stored unencrypted in /root/.docker/config.json.
Configure a credential helper to remove this warning. See
https://docs.docker.com/engine/reference/commandline/login/#credentials-store

Login Succeeded
  • 编写 Dockerfile 脚本，用于构建 Docker 镜像，一个最简略的 busybox 脚本如下；
FROM busybox:latest
  • 应用如下命令构建一个本人的 busybox 镜像；
docker build -t 192.168.3.101:80/test/busybox .
  • 将本人构建的 busybox 镜像推送到 Harbor 镜像仓库；
docker push 192.168.3.101:80/test/busybox
  • 推送胜利后在 Harbor 的治理界面中就能够查看到 busybox 镜像了；

  • 因为 Harbor 是用 Docker Compose 部署的，能够间接应用 Docker Compose 的命令来进行和启动。
# 进行 Harbor
docker-compose stop
# 启动 Harbor
docker-compose start

联合 SpringBoot 应用

这里应用之前的 mall-tiny-fabric 我的项目来演示下，如何应用 Maven 插件一键打包并推送到 Harbor 镜像仓库。

  • 首先批改我的项目的 pom.xml 文件，批改推送的 镜像仓库地址 ，并增加 认证信息 即可；
<plugin>
     <groupId>io.fabric8</groupId>
     <artifactId>docker-maven-plugin</artifactId>
     <version>0.33.0</version>
     <executions>
         <!-- 如果想在我的项目打包时构建镜像增加 -->
         <execution>
             <id>build-image</id>
             <phase>package</phase>
             <goals>
                 <goal>build</goal>
             </goals>
         </execution>
     </executions>
     <configuration>
         <!-- Docker 远程管理地址 -->
         <dockerHost>http://192.168.3.101:2375</dockerHost>
         <!-- Docker 推送镜像仓库地址 -->
         <pushRegistry>http://192.168.3.101:80</pushRegistry>
         <!-- 认证信息 -->
         <authConfig>
             <push>
                 <username>admin</username>
                 <password>Harbor12345</password>
             </push>
         </authConfig>
         <images>
             <image>
                 <!-- 因为推送到公有镜像仓库，镜像名须要增加仓库地址 -->
                 <name>192.168.3.101:80/mall-tiny/${project.name}:${project.version}</name>
                 <!-- 定义镜像构建行为 -->
                 <build>
                     <!-- 定义根底镜像 -->
                     <from>java:8</from>
                     <args>
                         <JAR_FILE>${project.build.finalName}.jar</JAR_FILE>
                     </args>
                     <!-- 定义哪些文件拷贝到容器中 -->
                     <assembly>
                         <!-- 定义拷贝到容器的目录 -->
                         <targetDir>/</targetDir>
                         <!-- 只拷贝生成的 jar 包 -->
                         <descriptorRef>artifact</descriptorRef>
                     </assembly>
                     <!-- 定义容器启动命令 -->
                     <entryPoint>["java", "-jar","/${project.build.finalName}.jar"]</entryPoint>
                     <!-- 定义维护者 -->
                     <maintainer>macrozheng</maintainer>
                     <!-- 应用 Dockerfile 构建时关上 -->
                     <!--<dockerFileDir>${project.basedir}</dockerFileDir>-->
                 </build>
                 <!-- 定义容器启动行为 -->
                 <run>
                     <!-- 设置容器名，可采纳通配符 -->
                     <containerNamePattern>${project.artifactId}</containerNamePattern>
                     <!-- 设置端口映射 -->
                     <ports>
                         <port>8080:8080</port>
                     </ports>
                     <!-- 设置容器间连接 -->
                     <links>
                         <link>mysql:db</link>
                     </links>
                     <!-- 设置容器和宿主机目录挂载 -->
                     <volumes>
                         <bind>
                             <volume>/etc/localtime:/etc/localtime</volume>
                             <volume>/mydata/app/${project.artifactId}/logs:/var/logs</volume>
                         </bind>
                     </volumes>
                 </run>
             </image>
         </images>
     </configuration>
</plugin>
  • 推送镜像之前须要在 Harbor 中创立好 mall-tiny 我的项目，否则会无奈推送镜像；

  • 之后应用 Maven 插件打包镜像并推送到 Harbor 仓库，具体能够参考《还在手动部署 SpringBoot 利用？试试这个自动化插件！》，推送过程中输入信息如下；
[INFO] Scanning for projects...
[INFO]                                                                         
[INFO] ------------------------------------------------------------------------
[INFO] Building mall-tiny-fabric 0.0.1-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO] 
[INFO] --- docker-maven-plugin:0.33.0:push (default-cli) @ mall-tiny-fabric ---

[INFO] DOCKER> The push refers to repository [192.168.3.101:80/mall-tiny/mall-tiny-fabric]
###############
[INFO] DOCKER> 0.0.1-SNAPSHOT: digest: sha256:3a54682fd3b04526f6da0916e98f3d0d5ba4193a8ad6aafbe6c05a1badf6c13b size: 2212

[INFO] DOCKER> Temporary image tag skipped. Target image '192.168.3.101:80/mall-tiny/mall-tiny-fabric:0.0.1-SNAPSHOT' already has registry set or no registry is available
[INFO] DOCKER> Pushed 192.168.3.101:80/mall-tiny/mall-tiny-fabric:0.0.1-SNAPSHOT in 2 minutes and 8 seconds 
[INFO] ------------------------------------------------------------------------
[INFO] BUILD SUCCESS
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 02:11 min
[INFO] Finished at: 2020-12-02T15:11:10+08:00
[INFO] Final Memory: 19M/219M
[INFO] ------------------------------------------------------------------------

Process finished with exit code 0
  • 关上 Harbor 治理页面，发现 mall-tiny-fabric 镜像曾经存在了。

总结

Harbor 提供了治理界面让咱们能够更不便地治理 Docker 镜像，同时增加了基于角色的权限治理性能来爱护镜像的平安。之前咱们为了平安地应用镜像，须要应用繁琐的 TLS 来管制近程 Docker 服务打包镜像，具体参考《Docker 服务凋谢了这个端口，服务器分分钟变肉机！》。当初咱们只有搭建一个 Harbor 镜像仓库，而后本地打包好镜像上传到 Harbor，须要应用镜像的时候间接从 Harbor 下载即可！

参考资料

官网文档：https://goharbor.io/docs/2.1….

我的项目源码地址

https://github.com/macrozheng…

本文 GitHub https://github.com/macrozheng/mall-learning 曾经收录，欢送大家 Star！

正文完
java
发表至： java
2020-12-18
 0
浅谈-Spark-的多语言支持
关于java:Java-实现汇总排序
关于java:activiti数据库表变化
关于java:LeetCode刷题日记之反转链表