亚洲香蕉成人av网站在线观看_欧美精品成人91久久久久久久_久久久久久久久久久亚洲_热久久视久久精品18亚洲精品_国产精自产拍久久久久久_亚洲色图国产精品_91精品国产网站_中文字幕欧美日韩精品_国产精品久久久久久亚洲调教_国产精品久久一区_性夜试看影院91社区_97在线观看视频国产_68精品久久久久久欧美_欧美精品在线观看_国产精品一区二区久久精品_欧美老女人bb

首頁 > 服務器 > Web服務器 > 正文

docker私庫Harbor的架構與組件說明

2024-09-01 13:56:17
字體:
來源:轉載
供稿:網友

這篇文章來了解一下harbor架構的組成和運行時各個組件的使用方式。

架構

docker,私庫,Harbor

容器信息

[root@liumiao harbor]# docker-compose ps    Name           Command        State                Ports                ------------------------------------------------------------------------------------------------------------------------------harbor-adminserver  /harbor/start.sh         Up                          harbor-db      /usr/local/bin/docker-entr ...  Up   3306/tcp                       harbor-jobservice  /harbor/start.sh         Up                          harbor-log      /bin/sh -c /usr/local/bin/ ...  Up   127.0.0.1:1514->10514/tcp                    harbor-ui      /harbor/start.sh         Up                          nginx        nginx -g daemon off;       Up   0.0.0.0:443->443/tcp, 0.0.0.0:4443->4443/tcp, 0.0.0.0:80->80/tcp redis        docker-entrypoint.sh redis ...  Up   6379/tcp                       registry       /entrypoint.sh serve /etc/ ...  Up   5000/tcp                       [root@liumiao harbor]# 

具體說明

docker,私庫,Harbor

proxy

proxy就是使用nginx作為反向代理,而整個的核心則在于nginx的設定文件,通過如下的設定文件可以清楚的看到harbor所解釋的將各個其他組件集成在一起的說明內容,而實際的實現也基本上就是靠nginx的設定。

[root@liumiao harbor]# lsLICENSE common          docker-compose.notary.yml ha     harbor.v1.5.2.tar.gz open_source_licenseNOTICE  docker-compose.clair.yml docker-compose.yml     harbor.cfg install.sh      prepare[root@liumiao harbor]# cat common/config/nginx/nginx.conf worker_processes auto;events { worker_connections 1024; use epoll; multi_accept on;}http { tcp_nodelay on; # this is necessary for us to be able to disable request buffering in all cases proxy_http_version 1.1; upstream registry {  server registry:5000; } upstream ui {  server ui:8080; } log_format timed_combined '$remote_addr - '  '"$request" $status $body_bytes_sent '  '"$http_referer" "$http_user_agent" '  '$request_time $upstream_response_time $pipe'; access_log /dev/stdout timed_combined; server {  listen 80;  server_tokens off;  # disable any limits to avoid HTTP 413 for large image uploads  client_max_body_size 0;  location / {   proxy_pass http://ui/;   proxy_set_header Host $host;   proxy_set_header X-Real-IP $remote_addr;   proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;   # When setting up Harbor behind other proxy, such as an Nginx instance, remove the below line if the proxy already has similar settings.   proxy_set_header X-Forwarded-Proto $scheme;   proxy_buffering off;   proxy_request_buffering off;  }  location /v1/ {   return 404;  }  location /v2/ {   proxy_pass http://ui/registryproxy/v2/;   proxy_set_header Host $http_host;   proxy_set_header X-Real-IP $remote_addr;   proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;   # When setting up Harbor behind other proxy, such as an Nginx instance, remove the below line if the proxy already has similar settings.   proxy_set_header X-Forwarded-Proto $scheme;   proxy_buffering off;   proxy_request_buffering off;  }  location /service/ {   proxy_pass http://ui/service/;   proxy_set_header Host $host;   proxy_set_header X-Real-IP $remote_addr;   proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;   # When setting up Harbor behind other proxy, such as an Nginx instance, remove the below line if the proxy already has similar settings.   proxy_set_header X-Forwarded-Proto $scheme;   proxy_buffering off;   proxy_request_buffering off;  }  location /service/notifications {   return 404;  } }}[root@liumiao harbor]# 

database

可以看到使用的是MariaDB 10.2.14, harbor的數據庫名稱為registry

[root@liumiao harbor]# docker exec -it harbor-db shsh-4.3# mysql -uroot -pliumiaopwWelcome to the MariaDB monitor. Commands end with ; or /g.Your MariaDB connection id is 21Server version: 10.2.14-MariaDB Source distributionCopyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.Type 'help;' or '/h' for help. Type '/c' to clear the current input statement.MariaDB [(none)]> show databases;+--------------------+| Database      |+--------------------+| information_schema || mysql       || performance_schema || registry      |+--------------------+4 rows in set (0.00 sec)MariaDB [(none)]>

數據庫表的信息進行確認后可以看到,當前版本的這種使用方式下,數據庫的表有如下 20張表左右

MariaDB [(none)]> use registry;Reading table information for completion of table and column namesYou can turn off this feature to get a quicker startup with -ADatabase changedMariaDB [registry]> show tables;+-------------------------------+| Tables_in_registry      |+-------------------------------+| access            || access_log          || alembic_version        || clair_vuln_timestamp     || harbor_label         || harbor_resource_label     || img_scan_job         || img_scan_overview       || project            || project_member        || project_metadata       || properties          || replication_immediate_trigger || replication_job        || replication_policy      || replication_target      || repository          || role             || user             || user_group          |+-------------------------------+20 rows in set (0.00 sec)MariaDB [registry]>

Log collector

harbor中的日志缺省會在如下目錄下進行匯集和管理

[root@liumiao harbor]# ls /var/log/harboradminserver.log jobservice.log mysql.log proxy.log redis.log registry.log ui.log[root@liumiao harbor]# 

docker-compose.yml

[root@liumiao harbor]# cat docker-compose.yml version: '2'services: log:  image: vmware/harbor-log:v1.5.2  container_name: harbor-log   restart: always  volumes:   - /var/log/harbor/:/var/log/docker/:z   - ./common/config/log/:/etc/logrotate.d/:z  ports:   - 127.0.0.1:1514:10514  networks:   - harbor registry:  image: vmware/registry-photon:v2.6.2-v1.5.2  container_name: registry  restart: always  volumes:   - /data/registry:/storage:z   - ./common/config/registry/:/etc/registry/:z  networks:   - harbor  environment:   - GODEBUG=netdns=cgo  command:   ["serve", "/etc/registry/config.yml"]  depends_on:   - log  logging:   driver: "syslog"   options:     syslog-address: "tcp://127.0.0.1:1514"    tag: "registry" mysql:  image: vmware/harbor-db:v1.5.2  container_name: harbor-db  restart: always  volumes:   - /data/database:/var/lib/mysql:z  networks:   - harbor  env_file:   - ./common/config/db/env  depends_on:   - log  logging:   driver: "syslog"   options:     syslog-address: "tcp://127.0.0.1:1514"    tag: "mysql" adminserver:  image: vmware/harbor-adminserver:v1.5.2  container_name: harbor-adminserver  env_file:   - ./common/config/adminserver/env  restart: always  volumes:   - /data/config/:/etc/adminserver/config/:z   - /data/secretkey:/etc/adminserver/key:z   - /data/:/data/:z  networks:   - harbor  depends_on:   - log  logging:   driver: "syslog"   options:     syslog-address: "tcp://127.0.0.1:1514"    tag: "adminserver" ui:  image: vmware/harbor-ui:v1.5.2  container_name: harbor-ui  env_file:   - ./common/config/ui/env  restart: always  volumes:   - ./common/config/ui/app.conf:/etc/ui/app.conf:z   - ./common/config/ui/private_key.pem:/etc/ui/private_key.pem:z   - ./common/config/ui/certificates/:/etc/ui/certificates/:z   - /data/secretkey:/etc/ui/key:z   - /data/ca_download/:/etc/ui/ca/:z   - /data/psc/:/etc/ui/token/:z  networks:   - harbor  depends_on:   - log   - adminserver   - registry  logging:   driver: "syslog"   options:     syslog-address: "tcp://127.0.0.1:1514"    tag: "ui" jobservice:  image: vmware/harbor-jobservice:v1.5.2  container_name: harbor-jobservice  env_file:   - ./common/config/jobservice/env  restart: always  volumes:   - /data/job_logs:/var/log/jobs:z   - ./common/config/jobservice/config.yml:/etc/jobservice/config.yml:z  networks:   - harbor  depends_on:   - redis   - ui   - adminserver  logging:   driver: "syslog"   options:     syslog-address: "tcp://127.0.0.1:1514"    tag: "jobservice" redis:  image: vmware/redis-photon:v1.5.2  container_name: redis  restart: always  volumes:   - /data/redis:/data  networks:   - harbor  depends_on:   - log  logging:   driver: "syslog"   options:     syslog-address: "tcp://127.0.0.1:1514"    tag: "redis" proxy:  image: vmware/nginx-photon:v1.5.2  container_name: nginx  restart: always  volumes:   - ./common/config/nginx:/etc/nginx:z  networks:   - harbor  ports:   - 80:80   - 443:443   - 4443:4443  depends_on:   - mysql   - registry   - ui   - log  logging:   driver: "syslog"   options:     syslog-address: "tcp://127.0.0.1:1514"    tag: "proxy"networks: harbor:  external: false[root@liumiao harbor]# 

使用注意事項:自定義端口號

在前一篇文章的例子中我們使用默認的80口作為harbor的端口,如果希望進行更改(比如改為8848),按照如下步驟進行修改即可

docker,私庫,Harbor

設定內容

可以通過查看數據庫的properties或者api/systeminfo來確認harbor設定項目的詳細信息

properties

[root@liumiao harbor]# docker exec -it harbor-db shsh-4.3# mysql -uroot -pliumiaopwWelcome to the MariaDB monitor. Commands end with ; or /g.Your MariaDB connection id is 153Server version: 10.2.14-MariaDB Source distributionCopyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.Type 'help;' or '/h' for help. Type '/c' to clear the current input statement.MariaDB [(none)]> use registryReading table information for completion of table and column namesYou can turn off this feature to get a quicker startup with -ADatabase changedMariaDB [registry]> select * from properties;+----+--------------------------------+----------------------------------------------+| id | k               | v                      |+----+--------------------------------+----------------------------------------------+| 1 | cfg_expiration         | 5                      || 2 | project_creation_restriction  | everyone                   || 3 | uaa_client_secret       | <enc-v1>cBvRPcG+p3oNVnJh8VM+SjvlcEsKYg==   || 4 | clair_db_host         | postgres                   || 5 | token_service_url       | http://ui:8080/service/token         || 6 | mysql_password         | <enc-v1>HDqd+PbHcG9EWK9DF3RzM43fTtPvCjdvyQ== || 7 | uaa_endpoint          | uaa.mydomain.org               || 8 | max_job_workers        | 50                      || 9 | sqlite_file          |                       || 10 | email_from           | admin <sample_admin@mydomain.com>      || 11 | ldap_base_dn          | ou=people,dc=mydomain,dc=com         || 12 | clair_db_port         | 5432                     || 13 | mysql_port           | 3306                     || 14 | ldap_search_dn         |                       || 15 | clair_db_username       | postgres                   || 16 | email_insecure         | false                    || 17 | database_type         | mysql                    || 18 | ldap_filter          |                       || 19 | with_notary          | false                    || 20 | admin_initial_password     | <enc-v1>4ZEvd/GfBYSdF9I6PfeI/XIvfGhPITaD3w== || 21 | notary_url           | http://notary-server:4443          || 22 | auth_mode           | db_auth                   || 23 | ldap_group_search_scope    | 2                      || 24 | ldap_uid            | uid                     || 25 | email_username         | sample_admin@mydomain.com          || 26 | mysql_database         | registry                   || 27 | reload_key           |                       || 28 | clair_url           | http://clair:6060              || 29 | ldap_group_search_filter    | objectclass=group              || 30 | email_password         | <enc-v1>h18ptbUM5oJwtKOzjJ4X5LOiPw==     || 31 | email_ssl           | false                    || 32 | ldap_timeout          | 5                      || 33 | uaa_client_id         | id                      || 34 | registry_storage_provider_name | filesystem                  || 35 | self_registration       | true                     || 36 | email_port           | 25                      || 37 | ui_url             | http://ui:8080                || 38 | token_expiration        | 30                      || 39 | email_identity         |                       || 40 | clair_db            | postgres                   || 41 | uaa_verify_cert        | true                     || 42 | ldap_verify_cert        | true                     || 43 | ldap_group_attribute_name   | cn                      || 44 | mysql_host           | mysql                    || 45 | read_only           | false                    || 46 | ldap_url            | ldaps://ldap.mydomain.com          || 47 | ext_endpoint          | http://192.168.163.128            || 48 | ldap_group_base_dn       | ou=group,dc=mydomain,dc=com         || 49 | with_clair           | false                    || 50 | admiral_url          | NA                      || 51 | ldap_scope           | 2                      || 52 | registry_url          | http://registry:5000             || 53 | jobservice_url         | http://jobservice:8080            || 54 | email_host           | smtp.mydomain.com              || 55 | ldap_search_password      | <enc-v1>F2QZkeEPTQPsJ9KNsBWcXA==       || 56 | mysql_username         | root                     || 57 | clair_db_password       | <enc-v1>IGBg3NxvT7qCYGIB+zizax+GojoM7ao2VQ== |+----+--------------------------------+----------------------------------------------+57 rows in set (0.00 sec)MariaDB [registry]> 

api/systeminfo

[root@liumiao harbor]# curl http://localhost/api/systeminfo { "with_notary": false, "with_clair": false, "with_admiral": false, "admiral_endpoint": "NA", "auth_mode": "db_auth", "registry_url": "192.168.163.128", "project_creation_restriction": "everyone", "self_registration": true, "has_ca_root": false, "harbor_version": "v1.5.2-8e61deae", "next_scan_all": 0, "registry_storage_provider_name": "filesystem", "read_only": false}[root@liumiao harbor]#

總結

以上就是這篇文章的全部內容了,希望本文的內容對大家的學習或者工作具有一定的參考學習價值,謝謝大家對VEVB武林網的支持。


注:相關教程知識閱讀請移步到服務器教程頻道。
發表評論 共有條評論
用戶名: 密碼:
驗證碼: 匿名發表
亚洲香蕉成人av网站在线观看_欧美精品成人91久久久久久久_久久久久久久久久久亚洲_热久久视久久精品18亚洲精品_国产精自产拍久久久久久_亚洲色图国产精品_91精品国产网站_中文字幕欧美日韩精品_国产精品久久久久久亚洲调教_国产精品久久一区_性夜试看影院91社区_97在线观看视频国产_68精品久久久久久欧美_欧美精品在线观看_国产精品一区二区久久精品_欧美老女人bb
国产精品久久久久久久久久新婚| 欧美综合国产精品久久丁香| 亚洲欧美制服综合另类| 一区二区三区视频免费| 国产91精品在线播放| 91av在线网站| 成年无码av片在线| 精品美女久久久久久免费| 中文字幕亚洲无线码在线一区| 日韩电影中文字幕一区| 国产精品一区久久| 欧美精品video| 欧美激情第99页| 国产精品一区二区三区免费视频| 国产成人精品在线| 亚洲欧美国产精品专区久久| 久久97精品久久久久久久不卡| 欧美性在线视频| 国产免费成人av| 欧美成人午夜激情| 亚洲精品在线看| 欧美性感美女h网站在线观看免费| 国产精品三级在线| 亚洲日本aⅴ片在线观看香蕉| 日韩电影免费在线观看| 亚洲va久久久噜噜噜久久天堂| 国产丝袜一区二区三区免费视频| 精品久久久久久亚洲精品| 亚洲免费视频观看| 欧美大片大片在线播放| 91精品国产色综合久久不卡98| 久久成人精品一区二区三区| 亚洲欧美一区二区三区久久| 亚洲影院高清在线| 欧美日韩综合视频| 国产日韩在线看片| 亚洲成人动漫在线播放| 欧美日韩国产激情| 这里只有视频精品| 亚洲天堂成人在线视频| 久久久久国色av免费观看性色| 欧美精品一本久久男人的天堂| 亚洲国产精品女人久久久| 久久人人97超碰精品888| 精品国产一区二区三区久久狼5月| 久久久久久久久久久人体| 国产一区深夜福利| 伊人久久免费视频| 精品国产91乱高清在线观看| 成人有码视频在线播放| 亚洲精品日产aⅴ| 91探花福利精品国产自产在线| 久久久人成影片一区二区三区| 久久精品视频免费播放| 久久精品国产成人精品| 亚洲午夜精品久久久久久久久久久久| 国产精品video| 欧美一区深夜视频| 伊人久久男人天堂| 欧美性极品xxxx做受| 宅男66日本亚洲欧美视频| 久久久久一本一区二区青青蜜月| 久久久精品中文字幕| 亚洲第一男人av| 91香蕉嫩草影院入口| 久久久久久久色| 久久久久久久久久久免费| 国产精品青草久久久久福利99| 日本午夜人人精品| 亚洲情综合五月天| 亚洲免费一级电影| 亚洲欧美国内爽妇网| 国产精品久久久久久久久粉嫩av| 亚洲第一精品夜夜躁人人躁| 粉嫩老牛aⅴ一区二区三区| 91在线观看免费高清| 懂色av一区二区三区| 亚洲精品资源美女情侣酒店| 日本久久91av| 韩剧1988在线观看免费完整版| 一区二区国产精品视频| 91九色蝌蚪国产| 亚洲福利在线看| 激情久久av一区av二区av三区| 九九久久久久99精品| 久久国产精品久久国产精品| 亚洲伊人久久大香线蕉av| 成人午夜在线影院| 欧美日韩成人黄色| 久久亚洲春色中文字幕| 久久精品中文字幕| 亚洲欧洲视频在线| 亚洲japanese制服美女| 91亚洲永久免费精品| 亚洲最大福利网| 久久国产精品亚洲| 国产日韩在线看片| 亚洲欧美另类国产| 欧洲中文字幕国产精品| 日韩美女在线播放| 国产男人精品视频| 国产精品黄色影片导航在线观看| 亚洲欧美日韩国产中文专区| 中文字幕精品久久| 久久免费视频这里只有精品| 中文字幕在线视频日韩| 国产一区二区三区在线观看网站| 欧美中在线观看| 日韩av电影手机在线| 8x拔播拔播x8国产精品| 亚洲xxx大片| 国产成人精品视频在线| 91人人爽人人爽人人精88v| 国产精品久久久久久久久久久久久| 国产日韩在线观看av| 色悠久久久久综合先锋影音下载| 欧美一级淫片播放口| 在线精品视频视频中文字幕| 亚洲高清福利视频| 亚洲大尺度美女在线| 欧美激情亚洲视频| 57pao精品| 亚洲第一网站免费视频| 国产精品一区久久久| 国产精品久久久久久久久久三级| 欧美自拍视频在线观看| 青青青国产精品一区二区| 国产欧美一区二区三区在线看| 久久免费视频在线观看| 亚洲欧美中文日韩在线| 日韩国产激情在线| 欧美日韩xxx| 欧美黑人极品猛少妇色xxxxx| 2019最新中文字幕| 日韩中文字幕在线视频播放| 第一福利永久视频精品| 欧美激情综合色| 欧美精品一区在线播放| 日本精品性网站在线观看| 亚洲综合国产精品| 久久91亚洲人成电影网站| 精品偷拍各种wc美女嘘嘘| 91网站在线看| 人人爽久久涩噜噜噜网站| 韩国国内大量揄拍精品视频| 欧美在线观看www| 色悠悠国产精品| 欧美性生活大片免费观看网址| 北条麻妃一区二区三区中文字幕| 国产精品国内视频| 成人黄色片在线| 人九九综合九九宗合| 国产精品久久久久久久久借妻| 欧美老肥婆性猛交视频| 日韩av综合网| 国产精品一久久香蕉国产线看观看| 国产欧洲精品视频| 欧美极品少妇与黑人| 国产精品久久久久久影视| 日本电影亚洲天堂| 亚洲欧美一区二区激情| 欧美色播在线播放| 国产精品视频大全| 91视频九色网站|