## Harbor Registry UsianHargoryjsotamrosontimagalsocparli,DotckergiiHatrrbyon extenfibearsDiocekegitshiamplemecosistir written in 6-wiping: • Usihagr Rorgiistem yCnltusupnge • Usihagr ChartmiicenuaGmtusupnge ## Using Harbor Registry in Tenant Clusters F ol l th w s t ed p s r e a n t ed w e n c a l n u t w i t h c t e t s h earbogistrywithaedmpiansswoSd4p dockdorgianuadmi-np**** https://:443 ## Using Harbor Chartmuseum in Tenant Clusters You acnonf igcalut stpndipdu hk l h afrrtasmdoHar b h art mountecunnant

## 采用开源Harbor Registry实现高效安全的容器镜像运维   ## 议程 议程 1 镜像运维 2 开源企业级镜像仓库-Harbor 3 集成Harbor 4 总结 ## Registry – 镜像管理的重要部件 • 镜像存储仓库 - 分发镜像的媒介 - 访问控制和镜像管理较佳节点  容器镜像通常从registry分发 - 在大规模集群场景下，Registry 是镜像分发瓶颈 - I/O - 网络带宽 - 扩展 registry 服务 – 多实例 registry 共享存储 – 多实例 registry 不共享存储 ## 议程 1 镜像运维 2 开源企业级镜像仓库-Harbor 3 集成Harbor 4 总结 ## Harbor开源项目 ##

## 采用Harbor开源企业级Registry实现高效安全的镜像运维  ## QCon 全球软件开发大会 10⽉17-19⽇ 上海·宝华万豪酒店 ![Image](/uploads/documents/e/2/7/d/e27d0d84 报名时间：9月1日-9月15日 扫描添加E小欧， 邀您进入EGO会员预报名群 立即报名 TECHNOLOGY EGO ## 自我介绍 VMware中国研发先进技术中心首席架构师、技术总监 • Harbor开源企业级容器Registry项目创始人 • Cloud Foundry中国社区最早技术布道师之一 - 多年全栈工程师 《区块链技术指南》、《软件定义存储》作者之一 ![Image](/uploads/ Basics 2 Project Harbor Introduction 3 Consistency of Images 4 Security 5 Image Distribution 6 High Availability of Registry ## Agenda 1 Container Image Basics 2 Project Harbor Introduction

# Harbor - 企业级 Docker 私有仓库 ## 一、 安装底层需求 • Python应该是2.7或更高版本 • Docker引擎应为1.10或更高版本 • Docker Compose需要为1.6.0或更高版本 docker-compose: curl -L https://github.com/docker/compose/releases/download/1.9.0/d ### 二、 Harbor 安装：Harbor 官方地址：https://github.com/vmware/harbor/releases 1、解压软件包：tar xvf harbor-offline-installer-.tgz https://github.com/vmware/harbor/releases/download/v1.2.0/harbor-offline-installer-v1 0/harbor-offline-installer-v1.2.0.tgz ### 2、 配置harbor.cfg a、必选参数 hostname: 目标的主机名或者完全限定域名 ui_url_protocol: http或https。默认为http db_password: 用于 db_auth 的 MySQL 数据库的根密码。更改此密码进行任何生产用途 max job workers: （默认值为3）作业服务中的

_1.jpg)  ## HARBOR ### 开源的可信云原生仓库项目 goharbor.io  集成到多个企业级产品中:VIC和PKS Apache 2.0 使用许可  GitHub Repo: https://github.com/goharbor/harbor/ ## Harbor项目简史 ## I nception nception Inception of project in China R&D, VMware Open Sourced 2014.6 2016.3 Project Harbor open sourced on GitHub 2015 Internal pilot in China R&D, VMware ![Image](/uploads/documen

_1.jpg)  ## HARBOR ### 开源的可信云原生仓库项目 goharbor.io  集成到多个企业级产品中:VIC和PKS Apache 2.0 使用许可  GitHub Repo: https://github.com/goharbor/harbor/ ## Harbor项目简史 ## I nception nception Inception of project in China R&D, VMware Open Sourced 2014.6 2016.3 Project Harbor open sourced on GitHub 2015 Internal pilot in China R&D, VMware ![Image](/uploads/documen

[Image](/uploads/documents/e/8/7/5/e875877a2a0c165ecb570df1e409a7b4/p1_2.jpg) ## Harbor Deep Dive Open source trusted cloud native registry Henry Zhang, Chief Architect, VMware R&D China Steven Zou, Staff [Image](/uploads/documents/e/8/7/5/e875877a2a0c165ecb570df1e409a7b4/p2_1.jpg) ## HARBOR ### An open source trusted cloud native registry project goharbor.io  GitHub Repo: https://github.com/go_harbor/harbor/ ## Harbor Project History ![Image](/uploads/documents/e/8/7/5/e875877a2a0c165ecb570df1e409a7b4/p3_1

 ## Harbor开源项目 容器镜像远程复制的实现 Henry Zhang (张海宁) Chief Architect VMWare China GopherChina 2017  ## 自我介绍 • VMware中国研发首席架构师 • Harbor开源企业级容器Registry项目创始人 • Cloud Foundry中国社区最早技术布道师之一 · 多年全栈工程师 • 《区块链技术指南》、《软件定义存储》作者之一  ## HARBOR $ ^{™} $ • An open source enterprise-class registry server. (launched Mar 2016)

## * ³⁄₄Harbor, ʕQ +X 1 J4x/ñ 9 é ~ KŒ ÿ ĆAG 5¢ ÎD% Tony Bai @Neusoft Cloud Technology ## About Me ‡ ,- > (TonyBa) ‡ @Neusoft Cloud Technology ‡ Gopher ‡ Translator & Author ‡ GopherChina lecturer F VS 3. Ct$ÄLö4Ö F VS 1997-1998 ## What is Docker Registry ± Docker Registry È éKŒ ÿ ^ ∅ Ã1Œ*6 ¼ 6 § ± 0 à Î)à _distribution È Î)à ¶registry2.0 •AP ± È é Â: hub.docker.com ± - μ 08\G÷+X ĐFO ~ [Image](/uploads/documents/e/f/b/9/efb9e546dcb208e6b3fa6637d55b1071/p11_1.jpg) 1997-1998 ## Private Registry \[\begin{array}{l}\pm\text{i}^{3}\text{/}_{4}\text{L}\text{ö}\text{@}\text{`}\mu\text{G}\text{

d64fb436c2/p1_1.jpg) ## E ## Har bor James Zabal a Mai nt ai ner ## Harbor Focus Harbor is a trusted cloud native registry that signs, and scans content. The mission is to prcloud native environments /d/680d19e9456359c9c92222d64fb436c2/p7_1.jpg) ## Agenda 1 Cont ai ners 101 2 Introduktion to Harbor 3 Image Consistency 4 Image Security 5 Image Distribution 6 Registrary Robustness High Availability [Image](/uploads/documents/6/8/0/d/680d19e9456359c9c92222d64fb436c2/p11_5.jpg) ## Key Feat ur es Registry features include - Multi-tenant content signing and validation - Identity integration and role-based