How to Deploy your own Container Registry

Mustafa Challawala — Sat, 11 Jan 2020 04:40:04 +0000

Harbor is an open source trusted cloud native registry project that stores, signs, and scans content. Harbor extends the open source Docker Distribution by adding the functionalities usually required by users such as security, identity and management. Having a registry closer to the build and run environment can improve the image transfer efficiency. Harbor supports replication of images between registries, and also offers advanced security features such as user management, access control and activity auditing.

To learn more about Harbor just Visit: https://github.com/goharbor/harbor

-- Deployment Prerequisites for the Target Host

Hardware

The following table lists the minimum and recommended hardware configurations for deploying Harbor.

Resource | Minimum | Recommended

CPU | 2 CPU | 4 CPU
Memory | 4 GB | 8 GB
Disk | 40 GB | 160 GB

Software

The following table lists the software versions that must be installed on the target host.

Software | Version | Description

Network ports

Harbor requires that the following ports be open on the target host.

Port | Protocol | Description

443 | HTTPS | Harbor portal and core API accept HTTPS requests on this port. You can change this port in the configuration file.
4443 | HTTPS | Connections to the Docker Content Trust service for Harbor. Only required if Notary is enabled. You can change this port in the configuration file.
80 | HTTP | Harbor portal and core API accept HTTP requests on this port. You can change this port in the configuration file.

-- Installation Procedure

Download and Unpack the Installer

Go to the Harbor releases page (https://github.com/goharbor/harbor/releases).
Download either the online or offline installer for the version you want to install

Use tar to extract the installer package:

Online installer:

bash $ tar xvf harbor-online-installer-version.tgz

Offline installer:

bash $ tar xvf harbor-offline-installer-version.tgz

Configure the harbor.yml file.
hostname: hostname.com
http:
port: 80
harbor_admin_password: password
database:
password: password
data_volume: /data

Installation with Clair, and Chart Repository Service

bash  $ sudo ./install.sh --with-clair --with-chartmuseum

Notes:
Managing Harbor Lifecycle
Stop Harbor:

bash $ sudo docker-compose stop

 Stopping nginx              ... done
 Stopping harbor-portal      ... done
 Stopping harbor-jobservice  ... done
 Stopping harbor-core        ... done   
 Stopping registry           ... done
 Stopping redis              ... done
 Stopping registryctl        ... done
 Stopping harbor-db          ... done
 Stopping harbor-log         ... done

Restart Harbor after Stopping:

bash $ sudo docker-compose start

 Starting log         ... done
 Starting registry    ... done
 Starting registryctl ... done
 Starting postgresql  ... done
 Starting core        ... done
 Starting portal      ... done
 Starting redis       ... done
 Starting jobservice  ... done
 Starting proxy       ... done

Reconfigure Harbor

bash $ sudo docker-compose down -v

bash $ vim harbor.yml

bash $ sudo prepare --with-clair --with-chartmuseum

bash $ sudo docker-compose up -d

How to Access harbor-registry to Client machine

Add registry to insecure registries

bash $ sudo echo "{"insecure-registries":["hostname.com"]}" > /etc/docker/daemon.json

Restart docker service
```
bash $ sudo service docker restart
```

bash $ sudo docker login http://hostname.com

Reference Link:

https://github.com/goharbor/harbor/blob/master/docs/installation_guide.md

DEV Community: Mustafa Challawala