3 Consistency of Images 4 Security 5 Image Distribution 6 High Availability of Registry Agenda 1 Container Image Basics 2 Project Harbor Introduction 3 Consistency of Images 4 Security 5 Image Lifecycle of Containers and Images 5 Images Containers Stop Start Restart Run Commit Dockerfile Build tag tar archive Save Load Push Registry Images Pull Registry Images 6 Push Pull • Repository Repository for storing images • Intermediary for shipping and distributing images • Ideal for access control and other image management Registry - Key Component to Manage Images Agenda 1 Container Image

mission is to provide cloud native environments the ability to confidently manage and serve container images. 3 Agenda 1 Containers 101 2 Introduction to Harbor 3 Image Consistency 4 Image Security 5 Availability 5 6 Images Containers Stop Start Restart Run Commit Dockerfile Build tag tar archive Save Load Push Registry Images Pull Lifecycle of Containers and Images Registry Images 7 Push Push Pull • Repository for storing images • Intermediary for shipping and distributing images and applying RBAC Lifecycle of Containers and Images Agenda 1 Containers 101 2 Introduction to Harbor 3

Cluster 开场 1 镜像运维 2 开源企业级镜像仓库-Harbor 3 集成Harbor 4 总结 议程 4 Registry 镜像 Images Push Pull • 镜像存储仓库 • 分发镜像的媒介 • 访问控制和镜像管理较佳节点 Registry – 镜像管理的重要部件 • 基础镜像 ubuntu:latest V2 Vulnerability Scanning Admin Service 基于角色的访问控制 18 项目 Project 成员 Members 镜像 Images Guest: Developer: Admin: ${Project}/ubuntu:14.04 ${Project}/nginx:1.8, 1.9 ${Project}/golang:1 Project Images Policy Image Project Images 初始复制 Image 增量复制 (含镜像删除复制) 复制策略管理 用二进制格式确保镜像一致性 24 Dev Registry CI Git Test Registry images images images Staging Registry

Remote Harbor instance Image Replication between Registry Instances 16 Project Images Policy Image Project Images Initial replication Image Incremental replication (including image deletion) Test Registry Staging Registry Production Registry images CI Git images images images images images Shipping (Publishing) Images via Replication Requirements of Image Replication • Asynchronous

Harbor Registry Using a Harbor registry, you can host container images in a local, private Docker registry. Harbor is an extension of the basic Docker registry that implements access controls, identity Using imagePullSecrets, Kubernetes resources can connect to a Harbor Registry to retrieve container images on other systems. This chapter contains the following topic: • Using Harbor Registry in Tenant

• ���������� ������ • ���������� ����� • ���������� � • ����LDAP/AD�� ���� �� Members �� Images ���Guest�: ����Developer�: ����Admin�: docker pull ... docker pull/push ... �� operation

• ���������� ������ • ���������� ����� • ���������� � • ����LDAP/AD�� ���� �� Members �� Images ���Guest�: ����Developer�: ����Admin�: docker pull ... docker pull/push ... �� operation

2，但是注意 4.3 章节替换时需对应上 # docker build -t xxxx/harbor-core-base:1.10.2 . 步骤 4 查看生成的镜像。 # docker images |grep xxxx ----结束 Harbor 环境搭建指导书 – CentOS 7.6 5 软件运行 8 5 软件运行 5.1 启动 Harbor