一、https 需要的ca证书创建
1056 mkdir -p /data/cert && cd /data/cert
1057 openssl genrsa -out ca.key 2048
1058 openssl req -x509 -new -nodes -key ca.key -days 10000 -out ca.crt -subj "/CN=Harbor-ca"
1059 ll
1060 openssl req -newkey rsa:4096 -nodes -sha256 -keyout server.key -out server.csr
1061 ll
1062 echo subjectAltName = IP:192.168.0.169 > extfile.cnf
1063 cat extfile.cnf
1064 openssl x509 -req -in server.csr -CA ca.crt -CAkey ca.key -CAcreateserial -days 365 -extfile extfile.cnf -out server.crt
二、x509: certificate signed by unknown authority 登录时候报错
[root@169_test harbor]# cat /etc/docker/daemon.json
{
"insecure-registries": ["192.168.0.169"]
}
[root@169_test harbor]#
三、harbor.yml配置项目
[root@169_test harbor]# cat harbor.yml |grep -v "#"
hostname: 192.168.0.169
https:
port: 443
certificate: /data/cert/server.crt
private_key: /data/cert/server.key
四、goharbor/nginx-photon:v1.8.0 启动失败
Error response from daemon: configured logging driver does not support reading
关注docker-compose.yml 以下选项是否对应
[root@169_test harbor]# cat docker-compose.yml |grep cert
source: /data/cert/server.key
target: /etc/cert/server.key
source: /data/cert/server.crt
target: /etc/cert/server.crt
[root@169_test harbor]#
五、mytest项目没有创建，用户没有相关项目操作权限，导致报没有权限
[root@169_test ~]# docker login 192.168.0.169
Authenticating with existing credentials...
WARNING! Your password will be stored unencrypted in /root/.docker/config.json.
Configure a credential helper to remove this warning. See
https://docs.docker.com/engine/reference/commandline/login/#credentials-store
Login Succeeded
[root@169_test ~]# docker push 192.168.0.169/mytest/mariadb10.3
The push refers to repository [192.168.0.169/mytest/mariadb10.3]
9fe1346a8e46: Preparing
44b71d929e12: Preparing
23402936133c: Preparing
d4149884a4c1: Preparing
c80bf439605a: Preparing
21e1e894139d: Waiting
d69483a6face: Waiting
denied: requested access to the resource is denied
备注：
软件版本：harbor.v1.8.0.tar.gz
备注
上传命令：
登录 docker login 192.168.0.169
查看镜像 docker images
给镜像打标签 docker tag mytest/mariadb10.3:latest 192.168.0.169/mytest/mariadb10.3:latest
查看镜像信息 docker images
上传镜像，注意要有mytest项目 docker push 192.168.0.169/mytest/mariadb10.3