网页制作网站开发,网站背景如何做,渠道网络大厦,网上美工培训文章目录 1. #x1f6e0;️ 基础环境配置2. #x1f433; Docker安装3. #x1f6a2; 部署Harbor#xff0c;HTTP访问4. #x1f4e6; 部署ContainerD5. #x1f504; 修改docker配置文件#xff0c;向harbor中推入镜像6. 配置containerd6.1. 拉取镜像验证6.2. 推送镜像… 文章目录 1. ️ 基础环境配置2. Docker安装3. 部署HarborHTTP访问4. 部署ContainerD5. 修改docker配置文件向harbor中推入镜像6. 配置containerd6.1. 拉取镜像验证6.2. 推送镜像验证 1. ️ 基础环境配置 安装基础环境请参考 [Ubuntu 22.04] 安装K8S基础环境准备脚本
2. Docker安装 docker安装请参考 [Ubuntu 22.04] 安装docker并设置镜像加速
3. 部署HarborHTTP访问 [Ubuntu 22.04] 安装Harbor#HTTP方式 浏览器中输入http://192.168.11.20即可访问刚才部署的harbor
4. 部署ContainerD containerd的安装请参考 [Ubuntu 22.04] 安装containerd
5. 修改docker配置文件向harbor中推入镜像 目标向第三步部署的harbor仓库中推入镜像仓库
根据目前的环境有两种方式可以向harbor中推入镜像。其一是通过docker向harbor中推入镜像仓库。其二是通过containerd向harbor中推入镜像
由于目前我们对于containerd并不熟悉因此我们先直接通过docker向harbor中推入镜像由于我们自己搭建的harbor是私有仓库并且是HTTP的方式因此我们需要配置docker的配置文件。
你可以重新找一台机器安装docker做实验或者直接使用harbor那台机器也可以这里我直接使用harbor那台机器上的docker工具向harbor推送镜像。
配置修改如下主要是增加了insecure-registries配置如果你的配置文件中包含其它的配置请不要直接执行否则会覆盖你的配置。另外请一定要注意80端口这个不能省略否则docker会以https的方式访问harbor
tee /etc/docker/daemon.json EOF
{registry-mirrors: [http://hub-mirror.c.163.com,https://mirror.baidubce.com,https://docker.mirrors.ustc.edu.cn,https://registry.docker-cn.com,https://dockerproxy.com,https://ccr.ccs.tencentyun.com,https://registry.cn-hangzhou.aliyuncs.com],insecure-registries: [192.168.11.20:80]
}
EOFsystemctl restart docker.service
这里我随便推送harbor的一个镜像到我自己的harbor仓库当中操作如下第一步重新打tag 第二步docker push。这里需要注意的是再推送镜像之前一定要在登录harbor提前建立仓库目录否则推送会被拒绝另外静态的Tag所指向的仓库端口必须要显式指定80端口否则默认使用443端口
rootharbor-http:~/harbor#
rootharbor-http:~/harbor#
rootharbor-http:~/harbor# cat /etc/docker/daemon.json
{registry-mirrors: [http://hub-mirror.c.163.com,https://mirror.baidubce.com,https://docker.mirrors.ustc.edu.cn,https://registry.docker-cn.com,https://dockerproxy.com,https://ccr.ccs.tencentyun.com,https://registry.cn-hangzhou.aliyuncs.com],insecure-registries: [192.168.11.20:80,192.168.11.30]
}
rootharbor-http:~/harbor# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
goharbor/redis-photon v2.8.2 6f4498a430ca 7 weeks ago 121MB
goharbor/harbor-registryctl v2.8.2 fa61a236a6d6 7 weeks ago 142MB
goharbor/registry-photon v2.8.2 f80e71363231 7 weeks ago 79.3MB
goharbor/nginx-photon v2.8.2 3d009028f260 7 weeks ago 120MB
goharbor/harbor-log v2.8.2 2914d282d9bf 7 weeks ago 127MB
goharbor/harbor-jobservice v2.8.2 40118f1568a8 7 weeks ago 141MB
goharbor/harbor-core v2.8.2 0bbbd1f379fc 7 weeks ago 165MB
goharbor/harbor-portal v2.8.2 3e74e0758aa4 7 weeks ago 127MB
goharbor/harbor-db v2.8.2 5126635ae9f0 7 weeks ago 174MB
goharbor/prepare v2.8.2 eb3cf3cdd17a 7 weeks ago 163MB
hello-world latest 9c7a54a9a43c 2 months ago 13.3kB
rootharbor-http:~/harbor#
rootharbor-http:~/harbor# docker tag goharbor/harbor-core:v2.8.2 192.168.11.20:80/goharbor/harbor-core:v2.8.2
rootharbor-http:~/harbor#
rootharbor-http:~/harbor# docker login -u admin -p harbor666 192.168.11.20:80
WARNING! Using --password via the CLI is insecure. Use --password-stdin.
WARNING! Your password will be stored unencrypted in /root/.docker/config.json.
Configure a credential helper to remove this warning. See
https://docs.docker.com/engine/reference/commandline/login/#credentials-storeLogin Succeeded
rootharbor-http:~/harbor#
rootharbor-http:~/harbor# docker push 192.168.11.20:80/goharbor/harbor-core:v2.8.2
The push refers to repository [192.168.11.20:80/goharbor/harbor-core]
c8ec2ddada08: Pushed
e1c4f1102d2f: Pushed
17583ba2a843: Pushed
0a049ad6bb06: Pushed
557ccce847e1: Pushed
9cb5dd968a55: Pushed
06d8a79a810a: Pushed
88edeb5b4944: Pushed
c00acf6f4f58: Pushed
21e7914e06fb: Pushed
v2.8.2: digest: sha256:654efa193924544a680f1cc7aaadb8d9fb4e1dcaa8c84a74c71b7fe861973838 size: 2411
rootharbor-http:~/harbor#
rootharbor-http:~/harbor# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
goharbor/redis-photon v2.8.2 6f4498a430ca 7 weeks ago 121MB
goharbor/harbor-registryctl v2.8.2 fa61a236a6d6 7 weeks ago 142MB
goharbor/registry-photon v2.8.2 f80e71363231 7 weeks ago 79.3MB
goharbor/nginx-photon v2.8.2 3d009028f260 7 weeks ago 120MB
goharbor/harbor-log v2.8.2 2914d282d9bf 7 weeks ago 127MB
goharbor/harbor-jobservice v2.8.2 40118f1568a8 7 weeks ago 141MB
192.168.11.20:80/goharbor/harbor-core v2.8.2 0bbbd1f379fc 7 weeks ago 165MB
goharbor/harbor-core v2.8.2 0bbbd1f379fc 7 weeks ago 165MB
goharbor/harbor-portal v2.8.2 3e74e0758aa4 7 weeks ago 127MB
goharbor/harbor-db v2.8.2 5126635ae9f0 7 weeks ago 174MB
goharbor/prepare v2.8.2 eb3cf3cdd17a 7 weeks ago 163MB
hello-world latest 9c7a54a9a43c 2 months ago 13.3kB
rootharbor-http:~/harbor# 6. 配置containerd
mkdir -p /etc/containerd/certs.d/192.168.11.20:80
tee /etc/containerd/certs.d/192.168.11.20:80/hosts.toml EOF
server http://192.168.11.20:80[host.http://192.168.11.20:80]capabilities [pull, resolve, push]skip_verify true
EOFsystemctl restart containerd.service
6.1. 拉取镜像验证
执行ctr image pull --plain-httptrue 192.168.11.20:80/goharbor/harbor-core:v2.8.2
rootcontainerd:~#
rootcontainerd:~# ctr image ls -q
docker.io/library/redis:alpine
rootcontainerd:~# cat /etc/containerd/certs.d/192.168.11.20\:80/hosts.toml
server http://192.168.11.20:80[host.http://192.168.11.20:80]capabilities [pull, resolve, push]skip_verify true
rootcontainerd:~#
rootcontainerd:~#
rootcontainerd:~# ctr image pull --plain-httptrue 192.168.11.20:80/goharbor/harbor-core:v2.8.2
192.168.11.20:80/goharbor/harbor-core:v2.8.2: resolved ||
manifest-sha256:654efa193924544a680f1cc7aaadb8d9fb4e1dcaa8c84a74c71b7fe861973838: done ||
layer-sha256:aea1be403dd1c4dce59794761f350e4706eb70771631535689e2b06a0a241001: done ||
layer-sha256:548383ab94bf8b81b55cabf36298e0b14cca610a07a1ebd5bba013fa61ffab96: done ||
layer-sha256:06212d50621c9654d97e7ec78e972b5017e139b11763375ee4c28bace1fcc087: done ||
layer-sha256:cf14510ec51c323f283e583a5aabfa33337680e953b07d83162a6c5b5d72defc: done ||
layer-sha256:b6c3d89688aed77dcbea624088f7613ac0923ca1f0398c42f0c79503a03baed6: done ||
config-sha256:0bbbd1f379fc1f577c5db15c9deac4a218637e4af0196d97e6771f59d9815355: done ||
layer-sha256:b3381433ebd4d04b664639ab510a6659fec0268dc222de8fb085da676f017cb4: done ||
layer-sha256:b70a76c262e454573e9550cb64962b84a338d78d6f1db4ee9464cce0a8a47dcd: done ||
layer-sha256:378fedafb8051764d80ec29260e7bf3101aabe84b72b23c5829deb2a445391a8: done ||
layer-sha256:f9cd03857d3ab614d97d896de3496a66dffaf4cf5b2051cda730d028d6def94e: done ||
layer-sha256:a3c670ddffbdf7be0c56baae8213258ee6cf339929c86b29905dd11808c80a34: done ||
elapsed: 0.5 s total: 47.1 M (94.2 MiB/s)
unpacking linux/amd64 sha256:654efa193924544a680f1cc7aaadb8d9fb4e1dcaa8c84a74c71b7fe861973838...
done: 1.256989921s
rootcontainerd:~#
rootcontainerd:~#
rootcontainerd:~# ctr image ls -q
192.168.11.20:80/goharbor/harbor-core:v2.8.2
docker.io/library/redis:alpine
rootcontainerd:~#
6.2. 推送镜像验证
执行ctr image push --plain-httptrue -u admin:harbor666 192.168.11.20:80/goharbor/harbor-core:v2.8.3
rootcontainerd:~#
rootcontainerd:~# ctr image ls -q
192.168.11.20:80/goharbor/harbor-core:v2.8.2
docker.io/library/redis:alpine
rootcontainerd:~#
rootcontainerd:~# ctr image tag 192.168.11.20:80/goharbor/harbor-core:v2.8.2 192.168.11.20:80/goharbor/harbor-core:v2.8.3
192.168.11.20:80/goharbor/harbor-core:v2.8.3
rootcontainerd:~# ctr image ls -q
192.168.11.20:80/goharbor/harbor-core:v2.8.2
192.168.11.20:80/goharbor/harbor-core:v2.8.3
docker.io/library/redis:alpine
rootcontainerd:~#
rootcontainerd:~# ctr image push --plain-httptrue -u admin:harbor666 192.168.11.20:80/goharbor/harbor-core:v2.8.3
manifest-sha256:654efa193924544a680f1cc7aaadb8d9fb4e1dcaa8c84a74c71b7fe861973838: done ||
config-sha256:0bbbd1f379fc1f577c5db15c9deac4a218637e4af0196d97e6771f59d9815355: done ||
elapsed: 0.2 s total: 7.7 Ki (38.4 KiB/s)
rootcontainerd:~#
rootcontainerd:~#
