Astrisk Blog

#  cat /etc/redhat-release
CentOS Linux release 7.2.1511 (Core)
Python 2.7.5 (default, Aug  4 2017, 00:39:18) #系统自带
# docker -v
Docker version 17.06.1-ce, build 874a737
# docker-compose -v
docker-compose version 1.17.0, build ac53b73

https://docs.docker.com/engine/installation/

https://docs.docker.com/compose/install/

# wget https://github.com/vmware/harbor/releases/download/v1.2.2/harbor-offline-installer-v1.2.2.tgz
# tar -zxvf harbor-offline-installer-v1.2.2.tgz
# cd harbor

# mkdir -p /data/cert/
# cd /data/cert/
# export localdomain=harbor.qiusheng.cn
# echo $localdomain
# openssl req -nodes -subj "/C=CN/ST=BeiJing/L=BeiJing/CN=$localdomain" -newkey rsa:2048 -keyout $localdomain.key -out $localdomain.csr
# openssl x509 -req -days 3650 -in $localdomain.csr -signkey $localdomain.key -out $localdomain.crt
# openssl x509 -req -in $localdomain.csr -CA $localdomain.crt -CAkey $localdomain.key -CAcreateserial -out $localdomain.crt -days 10000

# cd ${HARBOR_HOME}
# vim harbor.cfg

#The IP address or hostname to access admin UI and registry service.
#DO NOT use localhost or 127.0.0.1, because Harbor needs to be accessed by external clients.
hostname = harbor.qiusheng.cn

#The protocol for accessing the UI and token/notification service, by default it is http.
#It can be set to https if ssl is enabled on nginx.
ui_url_protocol = https #https

#The path of cert and key files for nginx, they are applied only the protocol is set to https
ssl_cert = /data/cert/harbor.qiusheng.cn.crt
ssl_cert_key = /data/cert/harbor.qiusheng.cn.key

# 保存退出
# ./prepare

# ./install.sh

# docker-compose down

# mkdir -p /etc/docker/certs.d/harbor.qiusheng.cn
# cp /data/cert/harbor.qiusheng.cn.crt /etc/docker/certs.d/harbor.qiusheng.cn/ca.crt

# docker-compose up -d

# docker login harbor.qiusheng.cn
user:admin  password: Harbor12345

Username: admin
Password:
Login Succeeded

# scp scp zhangqiusheng@xx.xx.xx.xx:~/ca.crt ./ #从服务器下载CA证书
# sudo cat ca.crt >> /etc/ssl/certs/ca-certificates.crt
# sudo cd /etc/ssl/certs/
# sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain ./ca-certificates.crt #添加操作系统信任证书
# 重启docker
# docker login harbor.qiusheng.cn -u admin -p Harbor12345