![\"\u65b0\u5efa\u4ed3\u5e93\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/01\/20260130190911-697d01d76f814.jpg\")
<\/p>\nharbor\u662fVMware\u516c\u53f8\u5f00\u6e90\u7684\u4e00\u6b3e\u4f01\u4e1a\u7ea7\u955c\u50cf\u4ed3\u5e93，\u5e95\u5c42\u57fa\u4e8edocker-compose\u6765\u7ba1\u7406harbor\u670d\u52a1 docker\u7684\u79c1\u6709\u4ed3\u5e93\u7528\u8d77\u6765\u592a\u9ebb\u70e6\u6211\u4eec\u4f7f\u7528harbor\u6765\u7ba1\u7406\u955c\u50cf \u63a5\u4e0b\u6765\u5b66\u4e60\u4e00\u4e0b\u5982\u4f55\u642d\u5efa\u90e8\u7f72\u4e00\u4e2a\u9ad8\u53ef\u7528\u4f01\u4e1a\u7ea7\u7684harbot\u79c1\u6709\u4ed3\u5e93\u7684\u90e8\u7f72\u8fc7\u7a0b \u6211\u7684\u7cfb\u7edf\u662fUbuntu22.04\u7248\u672c<\/p>\n
wget https:\/\/github.com\/goharbor\/harbor\/releases\/download\/v2.14.0\/harbor-offline-installer-v2.14.0.tgz<\/p>\n
tar xf harbor-offline-installer-v2.14.0.tgz -C \/usr\/local\/<\/p>\n
cd \/usr\/local\/harbor\/
\ncp harbor.yml{.tmpl,}
\nvim harbor.yml
\n…
\n#hostname: reg.mydomain.com
\nhostname: 10.0.250.4
\n# http related config
\nhttp:
\n # port for http, default is 80. If https enabled, this port will redirect to https port
\n port: 80<\/p>\n
# https related config
\nhttps: #\u53ef\u6ce8\u91ca
\n # # https port for harbor, default is 443
\n port: 443 #\u53ef\u6ce8\u91ca
\n # # The path of cert and key files for nginx
\n certificate: \/etc\/aliyum\/aixxw\/aixxw.xin.pem #\u53ef\u6ce8\u91ca
\n private_key: \/etc\/aliyum\/aixxw\/aixxw.xin.key #\u53ef\u6ce8\u91ca
\n # enable strong ssl ciphers (default: false)
\n # strong_ssl_ciphers: false
\n…
\nharbor_admin_password: 123
\n…
\ndata_volume: \/var\/lib\/harbor
\n…<\/p>\n
\u63d0\u793a：
\n\u6ca1\u6709\u90e8\u7f72docker\u73af\u5883\u7684\u8bf7\u5148\u90e8\u7f72\u94fe\u63a5\u5982\u4e0b：https:\/\/blog.csdn.net\/weixin_45049740\/article\/details\/157514762?sharetype=blogdetail&sharerId=157514762&sharerefer=PC&sharesource=weixin_45049740&spm=1011.2480.3001.8118<\/p>\n
[root@master02 harbor]# .\/install.sh<\/p>\n
[Step 0]: checking if docker is installed …<\/p>\n
Note: docker version: 20.10.24<\/p>\n
[Step 1]: checking docker-compose is installed …<\/p>\n
Note: docker-compose version: 2.23.0<\/p>\n
[Step 2]: loading Harbor images …
\n5dd32317cf96: Loading layer 40.82MB\/40.82MB
\ne959dc37d186: Loading layer 16.49MB\/16.49MB
\n2cd016989b45: Loading layer 175.3MB\/175.3MB
\nc.yml
\nGenerated configuration file: \/config\/registryctl\/env
\nGenerated configuration file: \/config\/registryctl\/config.yml
\nGenerated configuration file: \/config\/db\/env
\nGenerated configuration file: \/config\/jobservice\/env
\nGenerated configuration file: \/config\/jobservice\/config.yml
\ncopy \/data\/secret\/tls\/harbor_internal_ca.crt to shared trust ca dir as name harbor_internal_ca.crt …
\nca file \/hostfs\/data\/secret\/tls\/harbor_internal_ca.crt is not exist
\ncopy to shared trust ca dir as name storage_ca_bundle.crt …
\ncopy None to shared trust ca dir as name redis_tls_ca.crt …
\nGenerated and saved secret to file: \/data\/secret\/keys\/secretkey
\nSuccessfully called func: create_root_cert
\nGenerated configuration file: \/compose_location\/docker-compose.yml
\nClean up the input dir
\n…
\n….
\nNote: stopping existing Harbor instance …<\/p>\n
[Step 5]: starting Harbor …
\n[+] Building 0.0s (0\/0) docker:default
\n[+] Running 10\/10
\n \u2714 Network harbor_harbor Created 0.2s
\n \u2714 Container harbor-log Started 0.1s
\n \u2714 Container harbor-portal Started 0.1s
\n \u2714 Container redis Started 0.2s
\n \u2714 Container registryctl Started 0.1s
\n \u2714 Container registry Started 0.1s
\n \u2714 Container harbor-db Started 0.1s
\n \u2714 Container harbor-core Started 0.0s
\n \u2714 Container harbor-jobservice Started 0.1s
\n \u2714 Container nginx Started 0.1s
\n\u2714 —-Harbor has been installed and started successfully.—-<\/p>\n
[root@master02 harbor]# docker-compose ps -a
\nNAME IMAGE COMMAND SERVICE CREATED STATUS PORTS
\nharbor-core goharbor\/harbor-core:v2.14.0 "\/harbor\/entrypoint.\u2026" core 4 minutes ago Up 4 minutes (healthy)
\nharbor-db goharbor\/harbor-db:v2.14.0 "\/docker-entrypoint.\u2026" postgresql 4 minutes ago Up 4 minutes (healthy)
\nharbor-jobservice goharbor\/harbor-jobservice:v2.14.0 "\/harbor\/entrypoint.\u2026" jobservice 4 minutes ago Up 4 minutes (healthy)
\nharbor-log goharbor\/harbor-log:v2.14.0 "\/bin\/sh -c \/usr\/loc\u2026" log 4 minutes ago Up 4 minutes (healthy) 127.0.0.1:1514->10514\/tcp
\nharbor-portal goharbor\/harbor-portal:v2.14.0 "nginx -g 'daemon of\u2026" portal 4 minutes ago Up 4 minutes (healthy)
\nnginx goharbor\/nginx-photon:v2.14.0 "nginx -g 'daemon of\u2026" proxy 4 minutes ago Up 4 minutes (healthy) 0.0.0.0:80->8080\/tcp
\nredis goharbor\/redis-photon:v2.14.0 "redis-server \/etc\/r\u2026" redis 4 minutes ago Up 4 minutes (healthy)
\nregistry goharbor\/registry-photon:v2.14.0 "\/home\/harbor\/entryp\u2026" registry 4 minutes ago Up 4 minutes (healthy)
\nregistryctl goharbor\/harbor-registryctl:v2.14.0 "\/home\/harbor\/start.\u2026" registryctl 4 minutes ago Up 4 minutes (healthy)
\n[root@master02 harbor]# <\/p>\n
\u8bbf\u95eeUI\u9875\u9762\u67e5\u770b
\n80： http:\/\/10.0.250.4\/harbor\/projects
\n\u5185\u7f51 \u914d\u7f6ehosts\u8f6c\u53d1
\n443： https:\/\/hb.aixxw.xin\/harbor\/projects<\/p>\n
\u5173\u4e8e\u81ea\u7b7e\u8bc1\u4e66\u57fa\u4e8ek8s\u96c6\u7fa4cfssl\u7b7e\u53d1CAz\u8bc1\u4e66<\/p>\n
================================\u5206\u5272\u7ebf===================================
\n\u94fe\u63a5：
\nhttps:\/\/blog.csdn.net\/weixin_45049740\/article\/details\/156514328?spm=1001.2014.3001.5502<\/p>\n
[root@master01 ~]# cd \/k8s\/certs\/pki
\n[root@master01 pki]# ls
\n admin-csr.json etcd-ca-csr.json k8s-ca-csr.json
\n apiserver-csr.json etcd-csr.json 's -ntl | grep 10257'
\n bootstrap-secret.yaml front-proxy-ca-csr.json 's -ntl | grep 10259'
\n ca-config.json front-proxy-client-csr.json scheduler-csr.json
\n controller-manager-csr.json k8s-ca-config.json
\n[root@master01 pki]# vim harbor-csr.json
\n{
\n "CN": "10.0.250.4",
\n "key": {
\n "algo": "rsa",
\n "size": 2048
\n },
\n "names": [
\n {
\n "C": "CN",
\n "ST": "Beijing",
\n "L": "Beijing",
\n "O": "Harbor",
\n "OU": "Harbor-manual"
\n }
\n ]
\n}<\/p>\n
\/\/ \u7b7e\u53d1Harbor\u8bc1\u4e66
\n[root@master01 pki]#
\ncfssl gencert \\\\
\n -ca=\/k8s\/certs\/kubernetes\/k8s-ca.pem \\\\
\n -ca-key=\/k8s\/certs\/kubernetes\/k8s-ca-key.pem \\\\
\n -config=k8s-ca-config.json \\\\
\n –hostname=hb.aixxw.xin,10.0.250.4,10.0.250.5,10.0.250.2 \\\\
\n –profile=kubernetes \\\\
\n harbor-csr.json | cfssljson -bare \/k8s\/certs\/kubernetes\/harbor<\/p>\n
[root@master01 pki]# ll \/k8s\/certs\/kubernetes\/harbor*
\n-rw——- 1 root root 1679 Jan 29 21:46 \/k8s\/certs\/kubernetes\/harbor-key.pem
\n-rw-r–r– 1 root root 1078 Jan 29 21:46 \/k8s\/certs\/kubernetes\/harbor.csr
\n-rw-r–r– 1 root root 1476 Jan 29 21:46 \/k8s\/certs\/kubernetes\/harbor.pem<\/p>\n
[root@master01 pki]# scp \/k8s\/certs\/kubernetes\/harbor.pem 10.0.250.4:\/\/etc\/aliyum\/aixxw\/aixxw.xin.pem
\nharbor.pem 100% 1476 2.2MB\/s 00:00
\n[root@master01 pki]# scp \/k8s\/certs\/kubernetes\/harbor-key.pem 10.0.250.4:\/\/etc\/aliyum\/aixxw\/aixxw.xin.key
\nharbor-key.pem
\n[root@master01 pki]# cd \/k8s\/certs\/kubernetes\/
\n[root@master01 kubernetes]# ls
\nadmin-key.pem controller-manager.pem harbor.csr sa.key
\nadmin.csr front-proxy-ca-key.pem harbor.pem sa.pub
\nadmin.pem front-proxy-ca.csr k8s-ca-key.pem scheduler-key.pem
\napiserver-key.pem front-proxy-ca.pem k8s-ca.csr scheduler.csr
\napiserver.csr front-proxy-client-key.pem k8s-ca.pem scheduler.pem
\napiserver.pem front-proxy-client.csr kube-proxy-key.pem
\ncontroller-manager-key.pem front-proxy-client.pem kube-proxy.csr
\ncontroller-manager.csr harbor-key.pem kube-proxy.pem<\/p>\n
[root@master01 kubernetes]# cp \/k8s\/certs\/kubernetes\/k8s-ca.pem \/usr\/local\/share\/ca-certificates\/k8s-root-ca.crt
\n[root@master01 kubernetes]# scp \/k8s\/certs\/kubernetes\/k8s-ca.pem 10.0.250.4:\/\/usr\/local\/share\/ca-certificates\/k8s-root-ca.crt
\nk8s-ca.pem 100% 1363 1.9MB\/s 00:00
\n[root@master01 kubernetes]# scp \/k8s\/certs\/kubernetes\/k8s-ca.pem 10.0.250.5:\/\/usr\/local\/share\/ca-certificates\/k8s-root-ca.crt
\nk8s-ca.pem 100% 1363 2.9MB\/s 00:00
\n[root@master01 kubernetes]# scp \/k8s\/certs\/kubernetes\/k8s-ca.pem 10.0.250.6:\/\/usr\/local\/share\/ca-certificates\/k8s-root-ca.crt
\nk8s-ca.pem 100% 1363 677.1KB\/s 00:00
\n[root@master01 kubernetes]# scp \/k8s\/certs\/kubernetes\/k8s-ca.pem 10.0.250.7:\/\/usr\/local\/share\/ca-certificates\/k8s-root-ca.crt
\nk8s-ca.pem 100% 1363 3.4MB\/s 00:00
\n[root@master01 kubernetes]# scp \/k8s\/certs\/kubernetes\/k8s-ca.pem 10.0.250.2:\/\/usr\/local\/share\/ca-certificates\/k8s-root-ca.crt<\/p>\n
\u66f4\u65b0\u7cfb\u7edf CA \u4fe1\u4efb\u5e93
\nupdate-ca-certificates
\n[root@master01 kubernetes]# cat \/etc\/hosts
\n127.0.1.1 sertw3u8sr18n.local sertw3u8sr18n
\n127.0.0.1 localhost
\n::1 localhost ip6-localhost ip6-loopback
\nff02::1 ip6-allnodes
\nff02::2 ip6-allrouters
\n10.0.250.2 apiserver-lb
\n10.0.250.3 master01
\n10.0.250.4 master02 hb.aixxw.xin
\n10.0.250.5 master03
\n10.0.250.6 worker01
\n10.0.250.7 worker02
\n \u91cd\u542f\u670d\u52a1<\/p>\n
[root@master02 aixxw]# cd \/usr\/local\/harbor\/
\n[root@master02 harbor]# docker-compose down
\n[+] Running 10\/10
\n \u2714 Container registryctl Removed 0.9s
\n \u2714 Container nginx Removed 0.9s
\n \u2714 Container harbor-jobservice Removed 0.8s
\n \u2714 Container harbor-portal Removed 0.6s
\n \u2714 Container harbor-core Removed 0.8s
\n \u2714 Container registry Removed 0.9s
\n \u2714 Container redis Removed 1.0s
\n \u2714 Container harbor-db Removed 1.1s
\n \u2714 Container harbor-log Removed 10.5s
\n \u2714 Network harbor_harbor Removed 0.1s <\/p>\n
[root@master02 harbor]# .\/prepare
\nprepare base dir is set to \/usr\/local\/harbor
\nClearing the configuration file: \/config\/log\/rsyslog_docker.conf
\n…
\nloaded secret from file: \/data\/secret\/keys\/secretkey
\nGenerated configuration file: \/compose_location\/docker-compose.yml
\nClean up the input dir
\n[root@master02 harbor]# docker-compose up -d
\n[+] Building 0.0s (0\/0) docker:default
\n[+] Running 10\/10
\n \u2714 Network harbor_harbor Created 0.2s
\n \u2714 Container harbor-log Started 0.0s
\n \u2714 Container harbor-portal Started 0.2s
\n \u2714 Container redis Started 0.2s
\n \u2714 Container harbor-db Started 0.2s
\n \u2714 Container registryctl Started 0.2s
\n \u2714 Container registry Started 0.2s
\n \u2714 Container harbor-core Started 0.1s
\n \u2714 Container nginx Started 0.1s
\n \u2714 Container harbor-jobservice Started 0.0s <\/p>\n
[root@master01 kubernetes]# curl https:\/\/10.0.250.4\/harbor\/projects
\n<!DOCTYPE html>
\n<html>
\n <head>
\n <meta charset="utf-8"\/>
\n <title>Harbor<\/title>
\n <base href="\/"\/>
\n <meta name="viewport" content="width=device-width, initial-scale=1"\/>
\n <link rel="icon" type="image\/x-icon" href="favicon.ico?v=2"\/>
\n <link rel="stylesheet" href="styles.ac415221c96d2bef.css"><\/head>
\n <body>
\n <harbor-app>
\n <div class="spinner spinner-lg app-loading app-loading-fixed">
\n Loading…
\n <\/div>
\n <\/harbor-app>
\n <script src="runtime.2ce36195b41ae8b5.js" type="module"><\/script><script src="polyfills.d87db3092ff69ed9.js" type="module"><\/script><script src="scripts.3846d86d42cdb753.js" defer><\/script><script src="main.8999bc94f4db915b.js" type="module"><\/script><\/body>
\n<\/html>
\n[root@master01 kubernetes]# curl https:\/\/hb.aixxw.xin\/harbor\/projects
\n<!DOCTYPE html>
\n<html>
\n <head>
\n <meta charset="utf-8"\/>
\n <title>Harbor<\/title>
\n <base href="\/"\/>
\n <meta name="viewport" content="width=device-width, initial-scale=1"\/>
\n <link rel="icon" type="image\/x-icon" href="favicon.ico?v=2"\/>
\n <link rel="stylesheet" href="styles.ac415221c96d2bef.css"><\/head>
\n <body>
\n <harbor-app>
\n <div class="spinner spinner-lg app-loading app-loading-fixed">
\n Loading…
\n <\/div>
\n <\/harbor-app>
\n <script src="runtime.2ce36195b41ae8b5.js" type="module"><\/script><script src="polyfills.d87db3092ff69ed9.js" type="module"><\/script><script src="scripts.3846d86d42cdb753.js" defer><\/script><script src="main.8999bc94f4db915b.js" type="module"><\/script><\/body>
\n<\/html>
\n================================\u5206\u5272\u7ebf===================================<\/p>\n
\u5148\u65b0\u5efa\u4e00\u4e2a\u4ed3\u5e93 <\/p>\n
scp docker-comp.tar.gz 10.0.250.5:\/root\/
\nscp harbor-offline-installer-v2.14.0.tgz 10.0.250.5:\/root\/<\/p>\n
[root@master03 ~]# tar xf docker-comp.tar.gz
\n[root@master03 ~]# .\/install-docker.sh
\n[root@master03 ~]# docker images
\nREPOSITORY TAG IMAGE ID CREATED SIZE
\n[root@master03 ~]# tar xf harbor-offline-installer-v2.14.0.tgz -C \/usr\/local\/<\/p>\n
[root@master03 ~]# cd \/usr\/local\/harbor\/
\n[root@master03 harbor]# ls
\nLICENSE common.sh harbor.v2.14.0.tar.gz harbor.yml.tmpl install.sh prepare
\ncp harbor.yml{.tmpl,}
\nvim harbor.yml
\n…
\n#hostname: reg.mydomain.com
\nhostname: 10.0.250.5
\n# http related config
\nhttp:
\n # port for http, default is 80. If https enabled, this port will redirect to https port
\n port: 80<\/p>\n
# https related config
\nhttps: #\u53ef\u6ce8\u91ca
\n # # https port for harbor, default is 443
\n port: 443 #\u53ef\u6ce8\u91ca
\n # # The path of cert and key files for nginx
\n certificate: \/etc\/aliyum\/aixxw\/aixxw.xin.pem #\u53ef\u6ce8\u91ca
\n private_key: \/etc\/aliyum\/aixxw\/aixxw.xin.key #\u53ef\u6ce8\u91ca
\n # enable strong ssl ciphers (default: false)
\n # strong_ssl_ciphers: false
\n…
\nharbor_admin_password: 123
\n…
\ndata_volume: \/var\/lib\/harbor
\n…
\n \u63d0\u793a：
\n \u914d\u7f6e\u4e86nginx\u7684\u8bb0\u5f97\u5173\u95ed
\n systemctl disable –now nginx
\n[root@master03 harbor]# .\/install.sh<\/p>\n
================================\u5206\u5272\u7ebf================================
\n\u63d0\u793a：
\n\u5f00\u542f\u4e86443\u7684\u4e0d\u8981\u5fd8\u8bb0\u8bc1\u4e66
\n[root@master03 harbor]# mkdir -pv \/etc\/aliyum\/aixxw\/
\nmkdir: created directory '\/etc\/aliyum'
\nmkdir: created directory '\/etc\/aliyum\/aixxw\/'
\n[root@master03 harbor]# cd \/etc\/aliyum\/aixxw\/
\n[root@master03 aixxw]# ls
\naixxw.xin.key aixxw.xin.pem
\n[root@master03 ~]# cd \/usr\/local\/harbor\/
\n================================\u5206\u5272\u7ebf================================<\/p>\n
![\"\u914d\u7f6e\u540c\u6b65\u4e3b\u5e93\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/01\/20260130190912-697d01d81af9c.jpg\")
<\/p>\n
![\"\u8bf7\u6dfb\u52a0\u56fe\u7247\u63cf\u8ff0\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/01\/20260130190912-697d01d8aeb29.jpg\")
game\u955c\u50cf\u5305\u4e0b\u8f7d\u5730\u5740： \u94fe\u63a5:https:\/\/pan.baidu.com\/s\/1k4yZHQoCawwvsUkKRbtBKw?pwd=v2kf \u63d0\u53d6\u7801:v2kf<\/p>\n
\u56de\u5230\u4e3b\u955c\u50cf\u670d\u52a1\u5668 docker load -i testgame-v0.1.tar 73974f74b436: Loading layer 31.57MB\/31.57MB b3c13d98fe6e: Loading layer 62.88MB\/62.88MB Loaded image: testgame:v0.1 [root@master02 ~]# docker image tag testgame:v0.1 hb.aixxw.xin\/gamehtml\/testgame:v0.1 \u767b\u5f55： \u8f93\u5165\u7528\u6237admin \u5bc6\u7801123 \u63d0\u793a：\u914d\u7f6ehosts\u89e3\u6790\u4f18\u5148\u5185\u7f51\u4f20\u8f93 \u516c\u7f51： docker login hb.aixxw.xin #\u767b\u5f55 docker logout hb.aixxw.xin #\u9000\u51fa \u5185\u7f51： docker login 10.0.250.4 docker logout 10.0.250.4 \u63d0\u4ea4 [root@master02 ~]# docker image push hb.aixxw.xin\/gamehtml\/testgame:v0.1<\/p>\n
\u56de\u5230\u526fharbor\u9875\u9762\u89c2\u5bdf\u662f\u5426\u540c\u6b65\u5230\u4f4d \u6bcf1\u5206\u949f\u540c\u6b65\u4e00\u6b21\u592a\u6d88\u8017\u8d44\u6e90\u4ec5\u6d4b\u8bd5\u4f7f\u7528（\u5efa\u8bae\u6539\u62105-15\u5206\u949f\u540c\u6b65\u4e00\u6b21） ![\"\u8bf7\u6dfb\u52a0\u56fe\u7247\u63cf\u8ff0\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/01\/20260130190913-697d01d91a6ec.png\")
<\/p>\n
\u63a5\u4e0b\u91cc\u6784\u5efaharbor\u7684\u9ad8\u53ef\u7528<\/p>\n
\u65b9\u6848\u4e00：keepalived<\/p>\n
7.1 \u4e24\u4e2a\u8282\u70b9\u5b89\u88c5keepalived
\napt -y install keepalived
\n7.2 harbor\u4e3b\u8282\u70b9\u4fee\u6539keepalived\u914d\u7f6e
\n cat > \/etc\/keepalived\/keepalived.conf <<'EOF'
\n! Configuration File for keepalived
\nglobal_defs {
\n router_id 10.0.250.4
\n}
\nvrrp_script chk_nginx {
\n script "\/etc\/keepalived\/check_port.sh 8443"
\n interval 2
\n weight -20
\n}
\nvrrp_instance VI_1 {
\n state MASTER
\n interface eth0
\n virtual_router_id 251
\n priority 100
\n advert_int 1
\n mcast_src_ip 10.0.250.4
\n nopreempt
\n authentication {
\n auth_type PASS
\n auth_pass pwdk8s
\n }
\n track_script {
\n chk_nginx
\n }
\n virtual_ipaddress {
\n 10.0.250.200
\n }
\n}
\nEOF<\/p>\n
7.2 \u526f\u8282\u70b9\u4fee\u6539keepalived\u914d\u7f6e
\n cat > \/etc\/keepalived\/keepalived.conf <<'EOF'
\n! Configuration File for keepalived
\nglobal_defs {
\n router_id 10.0.250.5
\n}
\nvrrp_script chk_nginx {
\n script "\/etc\/keepalived\/check_port.sh 8443"
\n interval 2
\n weight -20
\n}
\nvrrp_instance VI_1 {
\n state BACKUP
\n interface eth0
\n virtual_router_id 251
\n priority 80
\n advert_int 1
\n mcast_src_ip 10.0.250.5
\n nopreempt
\n authentication {
\n auth_type PASS
\n auth_pass pwdk8s
\n }
\n track_script {
\n chk_nginx
\n }
\n virtual_ipaddress {
\n 10.0.250.200
\n }
\n}
\nEOF
\n\u90fd\u914d\u7f6e\u5065\u5eb7\u68c0\u67e5\u811a\u672c
\ncat \/etc\/keepalived\/check_port.sh
\n#!\/bin\/bash
\nCHK_PORT=$1
\n[ -z "$CHK_PORT" ] && { echo "Error: \u68c0\u6d4b\u7aef\u53e3\u4e0d\u80fd\u4e3a\u7a7a！"; exit 1; }
\nss -tln | grep -q ":$CHK_PORT "
\nif [ $? -eq 0 ]; then
\n exit 0
\nelse
\n echo "Warning: 8443\u7aef\u53e3\u672a\u76d1\u542c，\u89e6\u53d1Keepalived\u5207\u6362…"
\n exit 1
\nfi<\/p>\n
\u4fe9\u8282\u70b9\u90fd\u542f\u52a8
\nsystemctl enable –now keepalived
\n\u6d4b\u8bd5
\nhttps:\/\/10.0.250.200\/<\/p>\n
\u65b9\u6848\u4e8c：nginx\u56db\u5c42\u4e3b\u5907\u6a21\u5f0f<\/p>\n
\u6211\u7684\u73af\u5883\u662f\u516c\u6709\u4e91\u53ef\u4ee5\u7528SLB \u4f46\u8fd9\u91cc\u6ca1\u6709\u7528\u81ea\u5df1\u7528LB\u505a\u4e86\u56db\u5c42\u8f6c\u53d1
\ncd \/etc\/nginx\/
\n[root@apiserver-lb nginx]# cat nginx.conf
\n…
\nevents {
\n…
\n}
\n…
\nstream {<\/p>\n
#harbor_nodes
\n upstream harbor_nodes {
\n server 10.0.250.4:443 max_fails=2 fail_timeout=30s;
\n server 10.0.250.5:443 max_fails=2 fail_timeout=30s backup;
\n }
\n # 8444 harbor_nodes
\n server {
\n listen 8444;
\n proxy_pass harbor_nodes;
\n proxy_timeout 1h;
\n proxy_responses 0;
\n proxy_buffer_size 4k;
\n }<\/p>\n
}
\n…
\nhttp {
\n…
\n}<\/p>\n
\u6d4b\u8bd5<\/p>\n
docker login hb.aixxw.xin:8444 #\u767b\u5f55
\n\u6539\u6807\u7b7e
\ndocker image tag hb.aixxw.xin\/gamehtml\/testgame:v0.1 hb.aixxw.xin:8444\/gamehtml\/testgame:v0.1
\n\u63a8\u9001
\ndocker image push hb.aixxw.xin:8444\/gamehtml\/testgame:v0.1
\n\u5728\u526fharbor\u8bd5\u8bd5\u62c9\u53d6\u5230\u672c\u5730docker image\u91cc
\ndocker pull hb.aixxw.xin:8444\/gamehtml\/testgame:v0.1<\/p>\n
docker logout hb.aixxw.xin:8444 #\u9000\u51fa
\n=================================\u5206\u5272\u7ebf=================================
\n\u8bd5\u8bd5k8s\u7684ctr\u62c9\u53d6\u600e\u4e48\u6837
\n[root@worker01 ~]# ctr images pull hb.aixxw.xin:8444\/dockersystemos\/ubuntu:22.04
\nhb.aixxw.xin:8444\/dockersystemos\/ubuntu:22.04: resolved |++++++++++++++++++++++++++++++++++++++|
\nmanifest-sha256:bd1487129c4e01470664c3f3c9a25ce01f73ff3df75ffa7eb3388d3d4b945369: done |++++++++++++++++++++++++++++++++++++++|
\nlayer-sha256:9b857f539cb142c9aa2201a17bb8e1cd5cf12edd4a65adf5732fe9f4343964cf: done |++++++++++++++++++++++++++++++++++++++|
\nconfig-sha256:8a3cdc4d1ad3e314a91f76b7b99eed443f2152e3a9bf33e46669b31d094be443: exists |++++++++++++++++++++++++++++++++++++++|
\nelapsed: 1.1 s total: 29.0 M (26.4 MiB\/s)
\nunpacking linux\/amd64 sha256:bd1487129c4e01470664c3f3c9a25ce01f73ff3df75ffa7eb3388d3d4b945369…
\ndone: 9.426132ms
\n[root@worker01 ~]# ctr -n k8s.io images ls |grep hb.aixxw.xin:8444\/dockersystemos\/ubuntu:22.04
\n[root@worker01 ~]# ctr images ls |grep hb.aixxw.xin:8444\/dockersystemos\/ubuntu:22.04
\nhb.aixxw.xin:8444\/dockersystemos\/ubuntu:22.04 application\/vnd.docker.distribution.manifest.v2+json sha256:bd1487129c4e01470664c3f3c9a25ce01f73ff3df75ffa7eb3388d3d4b945369 29.0 MiB linux\/amd64 –
\n[root@worker01 ~]# ctr images rm hb.aixxw.xin:8444\/dockersystemos\/ubuntu:22.04
\nhb.aixxw.xin:8444\/dockersystemos\/ubuntu:22.04
\n[root@worker01 ~]# ctr images ls |grep hb.aixxw.xin:8444\/dockersystemos\/ubuntu:22.04
\n[root@worker01 ~]# <\/p>\n
ok\u81f3\u6b64\u5168\u90e8\u5b8c\u6210 \u8fd9\u5957\u90e8\u7f72\u7edd\u5bf9\u6ee1\u8db3\u65e5\u5e38\u4f7f\u7528\u4e86<\/p>\n","protected":false},"excerpt":{"rendered":"
harbor\u662fVMware\u516c\u53f8\u5f00\u6e90\u7684\u4e00\u6b3e\u4f01\u4e1a\u7ea7\u955c\u50cf\u4ed3\u5e93，\u5e95\u5c42\u57fa\u4e8edocker-compose\u6765\u7ba1\u7406harbor\u670d\u52a1 docker\u7684\u79c1\u6709\u4ed3\u5e93\u7528\u8d77\u6765\u592a\u9ebb\u70e6\u6211\u4eec\u4f7f\u7528harbor\u6765\u7ba1\u7406\u955c\u50cf \u63a5\u4e0b\u6765\u5b66\u4e60\u4e00\u4e0b\u5982\u4f55\u642d\u5efa\u90e8\u7f72\u4e00\u4e2a\u9ad8\u53ef\u7528\u4f01\u4e1a\u7ea7\u7684harbot\u79c1\u6709\u4ed3\u5e93\u7684\u90e8\u7f72\u8fc7\u7a0b \u6211\u7684\u7cfb\u7edf\u662fUbuntu22.04\u7248\u672c
\nharbor\u7684\u9ad8\u53ef\u7528\u90e8\u7f72
\n1. \u4e0b\u8f7dharbor\u8f6f\u4ef6\u5305
\nwget https:\/\/github.com\/goharbor\/harbor\/releases\/downl<\/p>\n","protected":false},"author":2,"featured_media":69038,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[27,120,121,43],"topic":[],"class_list":["post-69042","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-server","tag-docker","tag-kubernetes","tag-121","tag-43"],"yoast_head":"\n