离线安装Harbor v2.10.2

文件中的行尾存在非 # 开头的行

shell 如何实现查找不是以 # 分隔符开头的行，但行里有#分隔符

grep -E '^[^#].#.' harbor.yml.tmpl 或 grep -nE '^[^#].#.' harbor.yml.tmpl

日志版本不匹配

#配置正确后，主要有2个配置项，行中带了#

logger_sweeper_duration: 1 #days

webhook_job_http_client_timeout: 3 #seconds

harbor.yaml 配置文件

hostname: harbor.meng.com external_url: https://harbor.meng.comhttp: port: 80https: port: 443 certificate: /data/harbor/cert/harbor.meng.com.crt private_key: /data/harbor/cert/harbor.meng.com.keyharbor_admin_password: Harbor12345database: password: root123 max_idle_conns: 100 max_open_conns: 900 conn_max_lifetime: 5m conn_max_idle_time: 0data_volume: /data/harbor/datatrivy: ignore_unfixed: false skip_update: false skip_java_db_update: false offline_scan: false security_check: vuln insecure: falsejobservice: max_job_workers: 10 job_loggers: - STD_OUTPUT - FILE logger_sweeper_duration: 1 notification: webhook_job_max_retry: 3 webhook_job_http_client_timeout: 3log: level: info local: rotate_count: 50 rotate_size: 200M location: /data/harbor/log_version: 2.10.0proxy: http_proxy: https_proxy: no_proxy: components: - core - jobservice - trivyupload_purging: enabled: true age: 168h interval: 24h dryrun: falsecache: enabled: false expire_hours: 24chart: absolute_url: enabled

Please do NOT set --with-chartmuseum, as chartmusuem has been deprecated and removed.

Please do NOT set --with-notary, as notary has been deprecated and removed.

Notary：镜像签名认证Trivy： 容器漏洞扫描Chart Repository Service： Helm chart 仓库服务从v2.6.0 开始弃用Chartmuseum，并在v2.8.0中开始删除

#配置自定义nginx

1.harbor.yaml文件

#使用外部nginx服务，否则需要注释掉

external_url: https://harbor.meng.com

http:

port: 8080

https:

port: 8443

2.nginx配置

conf/harbor-nginx.conf

server { listen 443 ssl; server_name harbor.meng.com; ssl_certificate /etc/nginx/ssl/harbor.meng.com.crt; ssl_certificate_key /etc/nginx/ssl/harbor.meng.com.key; access_log /var/log/nginx/harbor_access.log; error_log /var/log/nginx/harbor_error.log; location / { proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header Host $http_host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;# proxy_pass http://harbor_address:port/; proxy_pass https://192.168.10.16:8443/; }}

3.配置检测

docker exec -it comm-nginx nginx -t

docker exec -it comm-nginx nginx -s reload

4.harbor本身的也可以访问

https://harbor.meng.com

https://harbor.meng.com：8433