(DK) HARBOR 구성

 

DOCKER 설치

(DK) Docker Install

CERTIFICATE 생성

 

openssl genrsa -out ca.key 4096


openssl req -x509 -new -nodes -sha512 -days 3650 \
 -subj "/C=CN/ST=Beijing/L=Beijing/O=example/OU=Personal/CN=10.253.107.253" \
 -key ca.key \
 -out ca.crt
 
 
openssl genrsa -out yourdomain.com.key 4096
 
openssl req -sha512 -new \
    -subj "/C=CN/ST=Beijing/L=Beijing/O=example/OU=Personal/CN=10.253.107.253" \
    -key yourdomain.com.key \
    -out yourdomain.com.csr
	
cat > v3.ext <<-EOF
authorityKeyIdentifier=keyid,issuer
basicConstraints=CA:FALSE
keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment
extendedKeyUsage = serverAuth
subjectAltName = @alt_names

[alt_names]
DNS.1=*.vcf.local
#DNS.2=hostname
IP.1=10.253.107.253
#IP.2=10.253.107.253
EOF
	
openssl x509 -req -sha512 -days 3650 \
    -extfile v3.ext \
    -CA ca.crt -CAkey ca.key -CAcreateserial \
    -in yourdomain.com.csr \
    -out yourdomain.com.crt
	
	
openssl x509 -inform PEM -in yourdomain.com.crt -out yourdomain.com.cert
	
cp yourdomain.com.cert /etc/docker/certs.d/yourdomain.com/
cp yourdomain.com.key /etc/docker/certs.d/yourdomain.com/
cp ca.crt /etc/docker/certs.d/yourdomain.com/

apt install docker-compose -y

---

## 인증서 생성시 
mkdir -p /data/cert

cd /data/cert

## docker 인증서 넣기
mkdir -p /etc/docker/cert.d/ { Harbor IP or FQDN }

cp lesstif-rootca.cert /etc/docker/cert.d/{ Harbor IP or FQDN}

## 예시
mkdir -p /etc/docker/cert.d/harbor.vcf.local

cp lesstif-rootca.cert /etc/docker/cert.d/harbor.vcf.local

systemctl restart docker

cp /data/cert/lesstif-rootca.cert /usr/local/share/ca-certificates/

update-ca-certificates

---

HARBOR DOWNLOAD

Releases · goharbor/harbor

cd /var/tmp/

wget https://github.com/goharbor/harbor/releases/download/v1.10.8/harbor-offline-installer-v1.10.8.tgz

tar harbor-offline-installer-v1.10.8.tgz

cd /var/tmp/harbor

vi harbor.yml

hostname: { HARBOR IP or FQDN } ## 인증서를 IP로 생성 했으면 IP , FQDN으로 했으면 FQDN 적용

## Docker Hub 계정 필요

docker login

 ./prepare

 

UI 접속

cat << EOF | tee /etc/docker/daemon.json
{
  "insecure-registries" : ["10.253.108.28","harbor.vcf.local"]
}

EOF

docker login harbor.vcf.local

---

IMAGE PUSH

## IMAGE PUSH
docker image pull nginx

docker tag nginx:latest harbor.vcf.local/library/nginx:latest

docker push harbor.vcf.local/library/nginx:latest