Shulou(Shulou.com)06/02 Report--

After logging in, I found that the original user information and mirror data are still there, which is still good.

Next, verify whether the docker client can pull the image from harbor:

[root@k8s1 ~] # docker login yuweibing.comUsername: ywbPassword: Error response from daemon: Get https://yuweibing.com/v2/: x509: certificate signed by unknown authority

Failed to find authentication. The reason is that you also need to set the authentication information of docker for the domain name yuweibing.com, and copy the public key and private key of the domain name and the CA file to the authentication directory of docker: / etc/docker/certs.d/yuweibing.com/, as follows:

Go to the ssl directory where the above key file is located and execute the following command: openssl x509-inform PEM-in yuweibing.com.crt-out yuweibing.com.cert cp yuweibing.com.cert / etc/docker/certs.d/yuweibing.com/ cp yuweibing.com.key / etc/docker/certs.d/yuweibing.com/ cp ca.crt / etc/docker/certs.d/yuweibing.com/

Copy the three files generated above also scp to the / etc/docker/certs.d/yuweibing.com/ directory of all docker clients that need to log in to harbor. Note that this directory needs to be created and that the hosts file parsing yuweibing.com needs to be modified in the docker client.

Verify it again:

[root@k8s1 yuweibing.com] # docker login yuweibing.comUsername: ywbPassword: WARNING! Your password will be stored unencrypted in / root/.docker/config.json.Configure a credential helper to remove this warning. See https://docs.docker.com/engine/reference/commandline/login/#credentials-storeLogin Succeeded [root@k8s1 yuweibing.com] #

Verified successfully!

Summary:

If you want to use http deployment to save trouble when installing harbor, the docker client uses secure connection https when using register repository by default. If you want to change to http, you need to modify docker configuration, which is very troublesome. So you still need to use the https method.

The change from http mode to https mode mainly requires the re-generation of CA certificate (authority), web server certificate (harbor server), and the server issues registration to CA. After that, modify the harbor.cfg configuration file, configure the server certificate file into the configuration file, modify the hostname from the IP address to the domain name, re-prepare and install, and the install program will delete and regenerate the containers in the original docker-compose.

The reinstalled user information and mirror data are retained.

Finally, don't forget to configure the public key and private key of the docker client harbor server, and do the domain name resolution. If there is no dns server resolution, directly modify the hosts file on the docker client to resolve the harbor configured domain name.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.