（1）安装harbor

1，安装Docker环境，Docker版本要求必须大于1.17

[root@harbor ~]# curl -fsSL https://get.docker.com/ | sh
[root@harbor ~]# systemctl start docker && systemctl enable docker

2，安装Docker-compose

[root@harbor ~]# wget https://github.com/docker/compose/releases/download/v2.6.1/docker-compose-linux-x86_64
[root@harbor ~]# mv docker-compose-linux-x86_64 /usr/local/bin/docker-compose
[root@harbor ~]# chmod 777 /usr/local/bin/docker-compose
[root@harbor ~]# docker-compose -v
Docker Compose version v2.6.1

3，下载harbor离线部署包

[root@harbor ~]# wget https://github.com/goharbor/harbor/releases/download/v2.5.3/harbor-offline-installer-v2.5.3.tgz
[root@harbor ~]# tar xf harbor-offline-installer-v2.5.3.tgz

4，修改配置文件，修改监听本机ip或域名，如果没有证书就把https段落注释掉，否则安装会报错

[root@harbor ~]# cd harbor
[root@harbor harbor]# cp harbor.yml.tmpl harbor.yml
[root@harbor harbor]# vim harbor.yml
hostname: harbor.uat.do1.com.cn     #访问域名
#port: 443
#certificate: /your/certificate/path
#private_key: /your/private/key/path
harbor_admin_password: Harbor12345    #Harbor密码
data_volume: /mnt/harbor/data     #存储路径

5，检查安装环境是否满足要求，第一次执行会默认拉取所需镜像

[root@harbor harbor]# ./prepare

6，执行安装

[root@harbor harbor]# ./install.sh

7，访问Harbor控制台

Addr：http://192.168.1.111
User：admin
Pass：Harbor12345

8，Harbor启停

[root@harbor harbor]# cd /mnt/harbor
[root@harbor harbor]# docker-compose start
[root@harbor harbor]# docker-compose stop

9，查询harbor健康状态

[root@harbor harbor]# docker-compose ps

10，所有master节点和worker节点都需要配置harbor的hosts表解析

echo "192.168.1.111 harbor.uat.do1.com.cn harbor.kubesphere.local" >> /etc/hosts

（2）配置Https访问

1，编辑配置文件

[root@harbor harbor]# vim harbor.yml
https:
  port: 443
  certificate: /mnt/harbor/data/certificate/harbor_do1.crt
  private_key: /mnt/harbor/data/certificate/harbor_do1.key

2，上传证书文件

[root@harbor harbor]# mkdir -p /mnt/harbor/data/cert/
[root@harbor harbor]# ls /mnt/harbor/data/cert/
harbor_do1.crt  harbor_do1.key

3，重启Harbor

[root@harbor harbor]# ./prepare
[root@harbor harbor]# docker-compose down -v
[root@harbor harbor]# docker-compose up -d