Shulou(Shulou.com)05/31 Report--

This article will explain in detail how to configure Harbor for you. The editor thinks it is very practical, so I share it with you as a reference. I hope you can get something after reading this article.

Harbor.cfg configuration details

Hostname: the hostname of the target host, used to access UI and registry services. It should be the IP address or fully qualified domain name (FQDN) of the target computer, such as 192.168.1.10 or reg.yourdomain.com. Do not use localhost or 127.0.0.1 for hostnames-registry services need to be accessed by external clients! Ui_url_protocol: (http or https. The default is http) the protocol used to access the UI and token / notification services. By default, this is http. To set up the https protocol, see configuring Harbor with HTTPS access. Email settings: Harbor requires these parameters to send a password reset email to the user, and only if this feature is needed. Also, please note that SSL connections are not enabled by default-if your SMTP server requires SSL but does not support STARTTLS, you should enable SSL email_ssl = TRUE by setting it. Email_server = smtp.mydomain.comemail_server_port = 25email_username = sample_admin@mydomain.comemail_password = abcemail_from = admin\ email_ssl = falseharbour_admin_password: the administrator's initial password. This password is valid only when the port is first issued. After that, this setting is ignored and the administrator's password should be set in UI. Notice that the default username / password is admin / Harbor12345. Auth_mode: the type of authentication used. By default, it is db_auth, which means that the credentials are stored in the database. For LDAP authentication, set it to ldap_auth. Ldap_url:LDAP endpoint URL (for example, ldaps://ldap.mydomain.com). Used only when auth_mode is set to ldap_auth. Ldap_searchdn: the DN of a user who has permission to search for a LDAP / AD server, such as uid=admin,ou=people,dc=mydomain,dc=com. Ldap_search_pwd: ldap_searchdn by the password of the specified user. Ldap_basedn: find the user's basic DN, such as ou=people,dc=mydomain,dc=com. Used only when auth_mode is set to ldap_auth. Ldap_filter: the search filter used to find users, for example (objectClass=person). Ldap_uid: used to match the user's attributes during a LDAP search, which can be uid,cn, email, or other attributes. Ldap_scope: used to search for the scope of users, 1m LDAPs sceptically supported Basi, 2m LDAPs sceptics on Nelevell, 3muri LDAPs sceptics SUBTREE. The default value is 3. Db_password: the root password of the MySQL database for db_auth. Change this password for any production use! Self_registration: (on or off. The default is on) enables / disables the ability of users to register themselves. When disabled, new users can only be created by administrator users, and only administrator users can create new users in Harbor. Note: when auth_mode is set to ldap_auth, the on-boarding feature is always disabled and this flag is ignored. Use_compressed_js: (on or off. Default is on) for production use, set this flag to on. In development mode, set it to off so that the js file can be modified separately. Max_job_workers: (default is 3) the maximum number of replication worker in the job service. For each image replication job, the worker synchronizes all tags from the repository to the remote destination. Increasing this number allows more concurrent replication jobs in the system. However, since each worker consumes a certain amount of network / CPU / IO resources, carefully select the value of this property based on the host's hardware resources. Token_expiration: the expiration time in minutes for tokens created by the token service, which defaults to 30 minutes. Verify_remote_cert: (on or off. Default is on) this flag determines whether the SSL / TLS certificate is validated when Harbor communicates with the remote registry instance. Setting this property to off bypasses SSL / TLS verification, which is typically used when the remote instance has a self-signed or untrusted certificate. Customize_crt: (on or off. The default is on) when this property is turned on, the prepare script creates the private key and root certificate used to generate / verify registry tokens. The following attribute: crt_country,crt_state,crt_location,crt_organization,crt_organizationalunit,crt_commonname,crt_email is used as a parameter to generate the key. Set this property to off when the key and root certificate are provided by an external source.

Back-end storage adjustment

Mainly in the common/templates/registry/config.yml file, this piece is actually to change the registry configuration file. Prepare after the change, and then docker-compse up-d will be fine.

Version: 0.1log: level: info fields: service: registrystorage: cache: layerinfo: inmemory filesystem: rootdirectory: / storage maintenance: uploadpurging: enabled: false delete: enabled: truehttp: addr:: 5000 secret: placeholder debug: addr: localhost:5001auth: token: issuer: harbor-token-issuer realm: http://172.31.1.6/service/token rootcertbundle: / etc/registry/root.crt service: harbor -registrynotifications: endpoints:-name: harbor disabled: false url: http://ui:8080/service/notifications timeout: 3000ms threshold: 5 backoff: 1s this is the end of the article on "how to configure Harbor" Hope that the above content can be helpful to you, so that you can learn more knowledge, if you think the article is good, please share it for more people to see.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.