集成Harbor 4 总结 议程 Harbor开源项目 11 • 开源企业级容器镜像仓库 • 由 VMware 中国团队设计和开发 • 集成到多个企业级产品中:VIC和PKS • Apache 2 使用许可 • https://github.com/vmware/harbor/ Harbor社区的增长 用户和开发者情况 4200+ 星标 镜像分发 审计和日志 记录操作日志以便审计 Restful API 完善的API以支持集成 主要特性 高可用性 高可用性支持 ova@vSphere ova的虚拟机，直接部署在 vSphere上 图形化管理界面 基于开源UI库Clarity构建 提供完备的镜像管理运维能力 增加批处理操作 为镜像库添加描述信息 Harbor 架构 17 Harbor与VIC 27 虚拟容器主机 Docker 容器主机 部署/调度 物理基础架构 C Docker 引擎 Linux 内核 C C Linux 内 核 C Linux 内 核 C Linux 内 核 C Linux 内 核 C C 管理/镜像Registry 安全性 VIC 服务引擎 存储虚拟化

Security 5 Image Distribution 6 High Availability of Registry Lifecycle of Containers and Images 5 Images Containers Stop Start Restart Run Commit Dockerfile Build tag tar archive Save Load registry server. • Initiated by VMware China, adopted by users worldwide. • Integrated into vSphere Integrated Containers. • Apache 2 license. • https://github.com/vmware/harbor/ 8 Key Features • Dev/test env – many people can access – Production – a limited number of people can access • Can be integrated with internal user management system – LDAP/Active Directory 19 Example: Role Based Access Control

2018 goharbor.io Initiated by VMware China, maintained by whole community Integrated into enterprise products: VIC and PKS GitHub Repo: https://github.com/go harbor/harbor/ Apache 2.0 license

Availability Security Multiple Platforms goharbor.io � VMware �� ������, ������ �������� ���:VIC�PKS GitHub Repo: https://github.com/goharbor /harbor/ Apache 2.0 ���� ������������ Project history

Availability Security Multiple Platforms goharbor.io � VMware �� ������, ������ �������� ���:VIC�PKS GitHub Repo: https://github.com/goharbor /harbor/ Apache 2.0 ���� ������������ Project history

is installed. Step 2 Create a new tenant cluster. For more information, see Creating Clusters on vSphere. Step 3 In the Node Configuration screen, copy and paste the Root CA certificate obtained in Step

3 Agenda 1 Containers 101 2 Introduction to Harbor 3 Image Consistency 4 Image Security 5 Image Distribution 6 Registry Robustness / High Availability 4 Agenda 1 Containers 101 2 Introduction Availability 5 6 Images Containers Stop Start Restart Run Commit Dockerfile Build tag tar archive Save Load Push Registry Images Pull Lifecycle of Containers and Images Registry Images Intermediary for shipping and distributing images and applying RBAC Lifecycle of Containers and Images Agenda 1 Containers 101 2 Introduction to Harbor 3 Image Consistency 4 Image Security 5 Image Distribution