Registry Harbor 2019(1)Version 1.9.0 and HA Solution

Private Registry Harbor 2019(1)Version 1.9.0 and HA Solution

Check version
> docker --version
Docker version 19.03.2, build 6a30dfc

Install Docker Compose
> sudo yum install epel-release
> sudo yum install -y python-pip
> sudo pip install docker-compose
> sudo pip install --upgrade pip
> sudo yum upgrade python*

Check version
> docker-compose version
docker-compose version 1.24.1, build 4667896
docker-py version: 3.7.3
CPython version: 2.7.5
OpenSSL version: OpenSSL 1.0.2k-fips  26 Jan 2017

Find the offline release version from here https://github.com/goharbor/harbor/releases
> sudo yum install wget
> wget https://storage.googleapis.com/harbor-releases/release-1.9.0/harbor-offline-installer-v1.9.0.tgz

> tar -xf harbor-offline-installer-v1.9.0.tgz
> mv harbor ~/tool/harbor-1.9.0

> sudo ln -s /home/carl/tool/harbor-1.9.0 /opt/harbor-1.9.0
> sudo ln -s /opt/harbor-1.9.0 /opt/harbor

Prepare the configuration
> vi harbor.yml
hostname: 192.168.56.110
http:
  # port for http, default is 80. If https enabled, this port will redirect to https port
  port: 8088
harbor_admin_password: xxxxxxxx

This command will load the configuration, and prepare the images
> sudo ./prepare

Install the software
> sudo ./install.sh

Visit the page
http://192.168.56.110:8088
We can visit the admin page and add user there

Try login with Docker Command Line
> docker login 192.168.56.110
Username: sillycat
Password:
Error response from daemon: Get https://192.168.56.110/v2/: x509: certificate signed by unknown authority

Solution:
> sudo vi /etc/docker/daemon.json
{
        "insecure-registries": ["192.168.56.110:8088"]
}
Restart Docker service
> sudo systemctl restart docker.service

Still exception:
https://github.com/goharbor/harbor/issues/2273
https://github.com/docker/for-mac/issues/1317


How to stop the Service
> sudo docker-compose down -v

How to start the Service
>  sudo docker-compose up -d

Clean database
> rm -r /data/database

Clean the images
> rm -r /data/registry

How to Change Config
> sudo docker-compose down -v

Change configuration file
> vi harbor.yml
hostname: 192.168.56.110
> sudo ./prepare
> sudo docker-compose up -d

Success with this command
> docker login http://192.168.56.110:8088
Username: sillycat
Password:
WARNING! Your password will be stored unencrypted in /home/carl/.docker/config.json.
Configure a credential helper to remove this warning. See
https://docs.docker.com/engine/reference/commandline/login/#credentials-store
Login Succeeded

Try that, pull latest ubuntu
> docker pull ubuntu

Tag the image
> docker tag ubuntu  192.168.56.110:8088/library/ubuntu:v1

Push to server
> docker push 192.168.56.110:8088/library/ubuntu:v1

We can login without prompt
> docker login 192.168.56.110:8088 -u=“sillycat" -p=“xxxxxxxx"

Here is how it release to Docker Registry
    stage('Release to Docker Registry') {
      steps {
        withCredentials([usernamePassword(credentialsId: 'yiyi_harbor', usernameVariable: 'USERNAME', passwordVariable: 'PASSWORD')]) {
        sh '''
        docker build -f deployment/docker/Dockerfile -t 52.13.38.xxx:49002/connector/sillycat/netsuiteconnector:1.1 .
        docker login 52.13.38.xxx:49002 -u="$USERNAME" -p="$PASSWORD"
        docker push 52.13.38.xxx:49002/connector/sillycat/netsuiteconnector:1.1
    '''
        }
      }
    }

HA Solution
Master-Slave can solve the problems that a lot of clients want to fetch the images. But the master is still a single point of failures.
https://www.imooc.com/article/270050

Master-Master can solve the problem, Load balance to the Harbor master.
https://segmentfault.com/a/1190000020144752

Harbor-Harbor Share storage
How to Share the Storage: AWS S3, OpenStack Swift, Ceph and etc. We can directly use NFS.
How to share the session: Redis storage session
How to share database: Use other database instead of local file





References:
https://github.com/NaturalHistoryMuseum/scratchpads2/wiki/Install-Docker-and-Docker-Compose-(Centos-7)
https://github.com/goharbor/harbor/releases
https://github.com/goharbor/harbor
https://blog.51cto.com/coolsky/2343408
https://www.cnblogs.com/breezey/p/9444231.html