环境：18.04.1-Ubuntu

安装docker

参考链接https://docs.docker.com/engine/install/ubuntu/

具体如下：

更新apt & 允许使用https

sudo apt-get update

sudo apt-get install \
    apt-transport-https \
    ca-certificates \
    curl \
    gnupg \
    lsb-release

添加gpk key

curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo gpg --dearmor -o /usr/share/keyrings/docker-archive-keyring.gpg

设置稳定的安装源（arm芯片机器执行自行参考链接原文）

echo \
  "deb [arch=amd64 signed-by=/usr/share/keyrings/docker-archive-keyring.gpg] https://download.docker.com/linux/ubuntu \
  $(lsb_release -cs) stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null

安装docker

sudo apt-get update
sudo apt-get install docker-ce docker-ce-cli containerd.io

使用https证书

离线环境不装这个也行

下载acme配置邮箱邮箱请替换成实际的

wget -O -  https://get.acme.sh | sh -s email=xxx@xxx.com

安装成功如下

--2021-03-19 08:05:43--  https://get.acme.sh/
Resolving get.acme.sh (get.acme.sh)... 104.21.34.62, 172.67.199.16, 2606:4700:3031::ac43:c710, ...
Connecting to get.acme.sh (get.acme.sh)|104.21.34.62|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/html]
Saving to: ‘STDOUT’
-                                                               [ <=>                                                                                                                                     ]     937  --.-KB/s    in 0s      
2021-03-19 08:05:44 (25.8 MB/s) - written to stdout [937]
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100  204k  100  204k    0     0  4650k      0 --:--:-- --:--:-- --:--:-- 4650k
[Fri Mar 19 08:05:44 UTC 2021] Installing from online archive.
[Fri Mar 19 08:05:44 UTC 2021] Downloading https://github.com/acmesh-official/acme.sh/archive/master.tar.gz
[Fri Mar 19 08:05:45 UTC 2021] Extracting master.tar.gz
[Fri Mar 19 08:05:45 UTC 2021] It is recommended to install socat first.
[Fri Mar 19 08:05:45 UTC 2021] We use socat for standalone server if you use standalone mode.
[Fri Mar 19 08:05:45 UTC 2021] If you don't use standalone mode, just ignore this warning.
[Fri Mar 19 08:05:45 UTC 2021] Installing to /root/.acme.sh
[Fri Mar 19 08:05:45 UTC 2021] Installed to /root/.acme.sh/acme.sh
[Fri Mar 19 08:05:45 UTC 2021] Installing alias to '/root/.bashrc'
[Fri Mar 19 08:05:45 UTC 2021] OK, Close and reopen your terminal to start using acme.sh
[Fri Mar 19 08:05:45 UTC 2021] Installing cron job
no crontab for root
no crontab for root
[Fri Mar 19 08:05:45 UTC 2021] Good, bash is found, so change the shebang to use bash as preferred.
[Fri Mar 19 08:05:45 UTC 2021] OK
[Fri Mar 19 08:05:45 UTC 2021] Install success!

生成证书

export Ali_Key="LTAI4FmiHYjQAr32GkmkjAfH" && export  Ali_Secret="bk7IXxKVHcoVsmf4mP8N85ANkNgsMi" ;acme.sh --issue --dns dns_ali -d "*.test.com"

结果有下面的

-----END CERTIFICATE-----
[Fri Mar 19 08:08:26 UTC 2021] Your cert is in  /root/.acme.sh/*.test.com/*. .com.cer 
[Fri Mar 19 08:08:26 UTC 2021] Your cert key is in  /root/.acme.sh/*.test.com/*.test.com.key 
[Fri Mar 19 08:08:26 UTC 2021] The intermediate CA cert is in  /root/.acme.sh/*.test.com/ca.cer 
[Fri Mar 19 08:08:26 UTC 2021] And the full chain certs is there:  /root/.acme.sh/*.test.com/fullchain.cer

注意 key 用这个 /root/.acme.sh/*.test.com/*.test.com.key

CA 用 /root/.acme.sh/*.test.com/fullchain.cer 用第一个会有问题

安装harbor

github拿最新的tar包解压到服务器

https://github.com/goharbor/harbor/releases

安装docker compose

https://github.com/docker/compose/releases

去上面的地址下载一个docker-compose-Linux-x86_64

cp  docker-compose-Linux-x86_64  /usr/local/bin/docker-compose
chmod +x /usr/local/bin/docker-compose

在线安装harbor

https://github.com/goharbor/harbor/releases

解压harbor-online-installer-v2.2.1.tgz

修改解压后的配置文件 harbor.yml.tmpl

修改hostname和证书位置如果不需要https 可以不配

# The IP address or hostname to access admin UI and registry service.
# DO NOT use localhost or 127.0.0.1, because Harbor needs to be accessed by external clients.
hostname: reg.mydomain.com

# https related config
https:
  # https port for harbor, default is 443
  port: 443
  # The path of cert and key files for nginx
  certificate: /your/certificate/path
  private_key: /your/private/key/path

修改密码的配置默认是admin Harbor12345

# Remember Change the admin password from UI after launching Harbor.
harbor_admin_password: Harbor12345

把文件改名

mv harbor.yml.tmpl harbor.yml

下面一键安装

root@test-harbor:/harbor# ./install.sh 
[Step 0]: checking if docker is installed ...
Note: docker version: 20.10.5
[Step 1]: checking docker-compose is installed ...
Note: docker-compose version: 1.28.5
[Step 2]: preparing environment ...
[Step 3]: preparing harbor configs ...
prepare base dir is set to /harbor
no config file: /harbor/harbor.yml
root@test-harbor:/harbor# cp harbor.yml.tmpl harbor.yml
root@test-harbor:/harbor# 
Digest: sha256:5721c120d6e44e1bdc3b9c0d56af57848430cabe5bbca415ff9f353c2f53024a
Status: Downloaded newer image for goharbor/nginx-photon:v2.1.4
Creating harbor-log ... done
Creating harbor-portal     ... done
Creating harbor-db     ... done
Creating registryctl   ... done
Creating redis         ... done
Creating registry      ... done
Creating harbor-core   ... done
Creating harbor-jobservice ... done
Creating nginx             ... done
✔ ----Harbor has been installed and started successfully.----
root@test-harbor:/harbor#