mirror of
https://github.com/raymond999999/shell.git
synced 2026-03-12 17:51:35 +08:00
211 lines
8.6 KiB
Bash
211 lines
8.6 KiB
Bash
#!/bin/bash
|
||
#
|
||
#******************************************************************************************************************
|
||
#Author: Raymond
|
||
#QQ: 88563128
|
||
#Date: 2024-01-26
|
||
#FileName: install_harbor_https_v2_1.sh
|
||
#URL: raymond.blog.csdn.net
|
||
#Description: install_harbor_https for CentOS 7 & CentOS Stream 8/9 & Ubuntu 18.04/20.04/22.04 & Rocky 8/9
|
||
#Copyright (C): 2024 All rights reserved
|
||
#******************************************************************************************************************
|
||
SRC_DIR=/usr/local/src
|
||
COLOR="echo -e \\033[01;31m"
|
||
END='\033[0m'
|
||
|
||
URL='https://mirrors.aliyun.com/docker-ce/linux/static/stable/x86_64/'
|
||
DOCKER_FILE=docker-24.0.7.tgz
|
||
|
||
# Docker Compose下载地址：“https://github.com/docker/compose/releases/download/v2.23.3/docker-compose-linux-x86_64”，请提前下载。
|
||
DOCKER_COMPOSE_FILE=docker-compose-linux-x86_64
|
||
|
||
# Harbor下载地址：“https://github.com/goharbor/harbor/releases/download/v2.10.0/harbor-offline-installer-v2.10.0.tgz”，请提前下载。
|
||
HARBOR_FILE=harbor-offline-installer-v
|
||
HARBOR_VERSION=2.10.0
|
||
TAR=.tgz
|
||
HARBOR_INSTALL_DIR=/apps
|
||
DOMAIN=raymonds.cc
|
||
HARBOR_ADMIN_PASSWORD=123456
|
||
|
||
os(){
|
||
OS_ID=`sed -rn '/^NAME=/s@.*="([[:alpha:]]+).*"$@\1@p' /etc/os-release`
|
||
OS_RELEASE_VERSION=`sed -rn '/^VERSION_ID=/s@.*="?([0-9]+)\.?.*"?@\1@p' /etc/os-release`
|
||
}
|
||
|
||
check_file (){
|
||
cd ${SRC_DIR}
|
||
if [ ${OS_ID} == "CentOS" -o ${OS_ID} == "Rocky" ] &> /dev/null;then
|
||
rpm -q wget &> /dev/null || { ${COLOR}"安装wget工具，请稍等..."${END};yum -y install wget &> /dev/null; }
|
||
fi
|
||
if [ ! -e ${DOCKER_FILE} ];then
|
||
${COLOR}"缺少${DOCKER_FILE}文件,如果是离线包,请把文件放到${SRC_DIR}目录下"${END}
|
||
${COLOR}'开始下载DOCKER二进制源码包'${END}
|
||
wget ${URL}${DOCKER_FILE} || { ${COLOR}"DOCKER二进制安装包下载失败"${END}; exit; }
|
||
elif [ ! -e ${DOCKER_COMPOSE_FILE} ];then
|
||
${COLOR}"缺少${DOCKER_COMPOSE_FILE}文件,请把文件放到${SRC_DIR}目录下"${END}
|
||
exit
|
||
elif [ ! -e ${HARBOR_FILE}${HARBOR_VERSION}${TAR} ];then
|
||
${COLOR}"缺少${HARBOR_FILE}${HARBOR_VERSION}${TAR}文件,请把文件放到${SRC_DIR}目录下"${END}
|
||
exit
|
||
else
|
||
${COLOR}"相关文件已准备好"${END}
|
||
fi
|
||
}
|
||
|
||
install_docker(){
|
||
${COLOR}"开始安装Docker，请稍等..."${END}
|
||
if [ ${OS_ID} == "CentOS" -o ${OS_ID} == "Rocky" ] &> /dev/null;then
|
||
rpm -q tar &> /dev/null || { ${COLOR}"安装tar工具，请稍等..."${END};yum -y install tar &> /dev/null; }
|
||
fi
|
||
tar xf ${DOCKER_FILE}
|
||
mv docker/* /usr/bin/
|
||
cat > /lib/systemd/system/docker.service <<-EOF
|
||
[Unit]
|
||
Description=Docker Application Container Engine
|
||
Documentation=https://docs.docker.com
|
||
After=network-online.target firewalld.service
|
||
Wants=network-online.target
|
||
|
||
[Service]
|
||
Type=notify
|
||
# the default is not to use systemd for cgroups because the delegate issues still
|
||
# exists and systemd currently does not support the cgroup feature set required
|
||
# for containers run by docker
|
||
ExecStart=/usr/bin/dockerd -H unix://var/run/docker.sock
|
||
ExecReload=/bin/kill -s HUP \$MAINPID
|
||
# Having non-zero Limit*s causes performance problems due to accounting overhead
|
||
# in the kernel. We recommend using cgroups to do container-local accounting.
|
||
LimitNOFILE=infinity
|
||
LimitNPROC=infinity
|
||
LimitCORE=infinity
|
||
# Uncomment TasksMax if your systemd version supports it.
|
||
# Only systemd 226 and above support this version.
|
||
#TasksMax=infinity
|
||
TimeoutStartSec=0
|
||
# set delegate yes so that systemd does not reset the cgroups of docker containers
|
||
Delegate=yes
|
||
# kill only the docker process, not all processes in the cgroup
|
||
KillMode=process
|
||
# restart the docker process if it exits prematurely
|
||
Restart=on-failure
|
||
StartLimitBurst=3
|
||
StartLimitInterval=60s
|
||
|
||
[Install]
|
||
WantedBy=multi-user.target
|
||
EOF
|
||
mkdir -p /etc/docker
|
||
cat > /etc/docker/daemon.json <<-EOF
|
||
{
|
||
"registry-mirrors": [
|
||
"https://registry.docker-cn.com",
|
||
"https://hub-mirror.c.163.com",
|
||
"https://docker.mirrors.ustc.edu.cn"
|
||
],
|
||
"data-root": "/data/docker",
|
||
"exec-opts": ["native.cgroupdriver=systemd"],
|
||
"max-concurrent-downloads": 10,
|
||
"max-concurrent-uploads": 5,
|
||
"log-opts": {
|
||
"max-size": "300m",
|
||
"max-file": "2"
|
||
},
|
||
"live-restore": true
|
||
}
|
||
EOF
|
||
echo 'alias rmi="docker images -qa|xargs docker rmi -f"' >> ~/.bashrc
|
||
echo 'alias rmc="docker ps -qa|xargs docker rm -f"' >> ~/.bashrc
|
||
systemctl daemon-reload
|
||
systemctl enable --now docker &> /dev/null
|
||
systemctl is-active docker &> /dev/null && ${COLOR}"Docker 服务启动成功"${END} || { ${COLOR}"Docker 启动失败"${END};exit; }
|
||
docker version && ${COLOR}"Docker 安装成功"${END} || ${COLOR}"Docker 安装失败"${END}
|
||
}
|
||
|
||
install_docker_compose(){
|
||
${COLOR}"开始安装Docker Compose，请稍等..."${END}
|
||
mv ${SRC_DIR}/${DOCKER_COMPOSE_FILE} /usr/bin/docker-compose
|
||
chmod +x /usr/bin/docker-compose
|
||
docker-compose --version && ${COLOR}"Docker Compose 安装完成"${END} || ${COLOR}"Docker compose 安装失败"${END}
|
||
}
|
||
|
||
install_harbor(){
|
||
${COLOR}"开始安装Harbor，请稍等..."${END}
|
||
[ -d ${HARBOR_INSTALL_DIR} ] || mkdir ${HARBOR_INSTALL_DIR}
|
||
tar xf ${SRC_DIR}/${HARBOR_FILE}${HARBOR_VERSION}${TAR} -C ${HARBOR_INSTALL_DIR}/
|
||
|
||
# 生成私钥和证书
|
||
touch /root/.rnd
|
||
mkdir /apps/harbor/certs/
|
||
cd /apps/harbor/certs/
|
||
openssl genrsa -out ca.key 4096
|
||
openssl req -x509 -new -nodes -sha512 -days 3650 -subj "/C=CN/ST=Beijing/L=Beijing/O=example/OU=Personal/CN=ca.${DOMAIN}" -key ca.key -out ca.crt
|
||
openssl genrsa -out harbor.${DOMAIN}.key 4096
|
||
openssl req -sha512 -new -subj "/C=CN/ST=Beijing/L=Beijing/O=example/OU=Personal/CN=harbor.${DOMAIN}" -key harbor.${DOMAIN}.key -out harbor.${DOMAIN}.csr
|
||
cat > v3.ext <<-EOF
|
||
authorityKeyIdentifier=keyid,issuer
|
||
basicConstraints=CA:FALSE
|
||
keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment
|
||
extendedKeyUsage = serverAuth
|
||
subjectAltName = @alt_names
|
||
|
||
[alt_names]
|
||
DNS.1=${DOMAIN}
|
||
DNS.2=ca.${DOMAIN}
|
||
DNS.3=harbor.${DOMAIN}
|
||
EOF
|
||
openssl x509 -req -sha512 -days 3650 -extfile v3.ext -CA ca.crt -CAkey ca.key -CAcreateserial -in harbor.${DOMAIN}.csr -out harbor.${DOMAIN}.crt
|
||
openssl x509 -inform PEM -in harbor.${DOMAIN}.crt -out harbor.${DOMAIN}.cert
|
||
|
||
mv ${HARBOR_INSTALL_DIR}/harbor/harbor.yml.tmpl ${HARBOR_INSTALL_DIR}/harbor/harbor.yml
|
||
sed -ri.bak -e 's/^(hostname:) .*/\1 harbor.'''${DOMAIN}'''/' -e 's@ (certificate:) .*@ \1 '''${HARBOR_INSTALL_DIR}'''/harbor/certs/harbor.'''${DOMAIN}'''.crt@' -e 's@ (private_key:) .*@ \1 '''${HARBOR_INSTALL_DIR}'''/harbor/certs/harbor.'''${DOMAIN}'''.key@' -e 's/^(harbor_admin_password:) .*/\1 '''${HARBOR_ADMIN_PASSWORD}'''/' ${HARBOR_INSTALL_DIR}/harbor/harbor.yml
|
||
if [ ${OS_ID} == "CentOS" -o ${OS_ID} == "Rocky" ] &> /dev/null;then
|
||
rpm -q python3 &> /dev/null || { ${COLOR}"安装python3，请稍等..."${END};yum -y install python3 &> /dev/null; }
|
||
else
|
||
dpkg -s python3 &>/dev/null || { ${COLOR}"安装python3，请稍等..."${END};apt -y install python3 &> /dev/null; }
|
||
fi
|
||
${HARBOR_INSTALL_DIR}/harbor/install.sh --with-trivy && ${COLOR}"Harbor 安装完成"${END} || ${COLOR}"Harbor 安装失败"${END}
|
||
cat > /lib/systemd/system/harbor.service <<-EOF
|
||
[Unit]
|
||
Description=Harbor
|
||
After=docker.service systemd-networkd.service systemd-resolved.service
|
||
Requires=docker.service
|
||
Documentation=http://github.com/vmware/harbor
|
||
|
||
[Service]
|
||
Type=simple
|
||
Restart=on-failure
|
||
RestartSec=5
|
||
ExecStart=/usr/bin/docker-compose -f /apps/harbor/docker-compose.yml up
|
||
ExecStop=/usr/bin/docker-compose -f /apps/harbor/docker-compose.yml down
|
||
|
||
[Install]
|
||
WantedBy=multi-user.target
|
||
EOF
|
||
|
||
systemctl daemon-reload
|
||
systemctl enable harbor &>/dev/null && ${COLOR}"Harbor已配置为开机自动启动"${END}
|
||
}
|
||
|
||
set_swap_limit(){
|
||
if [ ${OS_RELEASE_VERSION} == "18" -o ${OS_RELEASE_VERSION} == "20" ];then
|
||
grep -q "swapaccount=1" /etc/default/grub && { ${COLOR}'"WARNING: No swap limit support"警告,已设置'${END};exit; }
|
||
${COLOR}'设置Docker的"WARNING: No swap limit support"警告'${END}
|
||
sed -ri '/^GRUB_CMDLINE_LINUX=/s@"$@ swapaccount=1"@' /etc/default/grub
|
||
update-grub &> /dev/null
|
||
${COLOR}"10秒后，机器会自动重启"${END}
|
||
sleep 10
|
||
reboot
|
||
fi
|
||
}
|
||
|
||
main(){
|
||
os
|
||
check_file
|
||
[ -f /usr/bin/docker ] && ${COLOR}"Docker已安装"${END} || install_docker
|
||
[ -f /usr/bin/docker-compose ] && ${COLOR}"Docker Compose已安装"${END} || install_docker_compose
|
||
systemctl is-active harbor &> /dev/null && ${COLOR}"Harbor已安装"${END} || install_harbor
|
||
set_swap_limit
|
||
}
|
||
|
||
main
|