Docker distribution & Harbor

Transcript

1. docker distribution & harbor https://github.com/docker/distribution https://vmware.github.io/harbor/ http://mihalc.in/
2. intro docker distribution a.k.a registry • store & distribute in-house images • private version of https://hub.docker.com/ • storage in azure harbor • extension of registry • frontend • additional functionalities for enterprise-y feeling: ◦ role based access control, projects, namespaces ◦ LDAP ◦ auditing
3. harbor.. demo https://dockerhub.homecredit.net/dashboard 1. LDAP login 2. dashboard 3. projects, team project names 4. public project - library - generic images across teams 5. images, naming convention, REGISTRY/PROJECT/REPO[:TAG] 6. users, roles, add member to the project 7. logs 8. search NOTE: each team must create tech LDAP user associated with project (if they want to push images as part of CI)
4. pull & push to private registry.. demo REGISTRY/PROJECT/REPO[:TAG] • docker pull busybox:latest • docker tag busybox:latest dockerhub.homecredit.net/reward/busybox:latest • docker login dockerhub.homecredit.net • docker push dockerhub.homecredit.net/reward/busybox:latest • docker pull dockerhub.homecredit.net/reward/busybox:latest
5. common docker images.. demo contribute / improve common docker images • https://git.homecredit.net/docker/environments/tree/maste r/common-docker-images it will be broken down into multiple git repos under https://git.homecredit.net/groups/docker (tech LDAP user in progress) let’s have a look at Dockerfiles | docker-compose to see images in action
6. final thoughts • let’s keep it clean & tidy • let’s collaborate
7. That’s all folks thanks for your attention any questions?!?
8. Check this out https://github.com/vmware/harbor/blob/master/docs/user_guide .md https://docs.docker.com/engine/getstarted/step_six/ how to request tech LDAP user: https://omnitracker.homecredit.net/otwg/Login.aspx?autologin =0&lang=en&singleton=3&id=5243331 SR-365133