搭建harbor私有镜像仓库

通过docker-compost来构建

1.参考地址：https://blog.csdn.net/submarineas/article/details/112788040 开启https、设置证书位置
2.生成证书：
openssl genrsa -out ca.key 4096

openssl req -x509 -new -nodes -sha512 -days 3650
-subj “/C=CN/ST=Beijing/L=Beijing/O=chinatelecom/OU=ecloudcaas/CN=192.168.56.11”
-key ca.key
-out ca.crt

openssl genrsa -out 192.168.56.11.key 4096

openssl req -sha512 -new
-subj “/C=CN/ST=Beijing/L=Beijing/O=chinatelecom/OU=ecloudcaas/CN=192.168.56.11”
-key 192.168.56.11.key
-out 192.168.56.11.csr

openssl x509 -req -sha512 -days 3650
-extfile v3.ext
-CA ca.crt -CAkey ca.key -CAcreateserial
-in 192.168.56.11.csr
-out 192.168.56.11.crt

openssl x509 -inform PEM -in 192.168.56.11.crt -out 192.168.56.11.cert

cp 192.168.56.11.cert /etc/docker/cert/192.168.56.11/
cp 192.168.56.11.key /etc/docker/cert/192.168.56.11/
cp ca.crt /etc/docker/certs.d/ # 后续helm访问都需要使用改证书

3.启动服务加上后缀
./prepare
./install.sh –with-notary –with-clair –with-chartmuseum