## 進入PostgreSQL容器
docker exec -it xxxx bash

## 執行 psql 進入資料庫
postgres [ / ]$ psql
psql (9.6.14)
Type "help" for help.

## 查看當前所有的資料庫，postgres、template0、template1為默認資料庫
postgres=# \l
                                   List of databases
     Name     |  Owner   | Encoding |   Collate   |    Ctype    |   Access privileges   
--------------+----------+----------+-------------+-------------+-----------------------
 notaryserver | postgres | UTF8     | en_US.UTF-8 | en_US.UTF-8 | =Tc/postgres         +
              |          |          |             |             | postgres=CTc/postgres+
              |          |          |             |             | server=CTc/postgres
 notarysigner | postgres | UTF8     | en_US.UTF-8 | en_US.UTF-8 | =Tc/postgres         +
              |          |          |             |             | postgres=CTc/postgres+
              |          |          |             |             | signer=CTc/postgres
 postgres     | postgres | UTF8     | en_US.UTF-8 | en_US.UTF-8 | 
 registry     | postgres | UTF8     | en_US.UTF-8 | en_US.UTF-8 | 
 template0    | postgres | UTF8     | en_US.UTF-8 | en_US.UTF-8 | =c/postgres          +
              |          |          |             |             | postgres=CTc/postgres
 template1    | postgres | UTF8     | en_US.UTF-8 | en_US.UTF-8 | =c/postgres          +
              |          |          |             |             | postgres=CTc/postgres
(6 rows)

## 導出表結構及數據
postgres [ / ]$ pg_dump -U postgres registry > /tmp/registry.sql
postgres [ / ]$ pg_dump -U postgres notaryserver > /tmp/notaryserver.sql
postgres [ / ]$ pg_dump -U postgres notarysigner > /tmp/notarysigner.sql
    -U 資料庫用戶
    -p 訪問埠
    -f 指定文件，和 > 功能一樣
    -h 指定資料庫地址
    -s 表示只導出表結構，不導數據

## 導出到宿主機
docker cp [容器id]:/tmp/registry.sql ./
docker cp [容器id]:/tmp/notaryserver.sql ./
docker cp [容器id]:/tmp/notarysigner.sql ./

# Install RPM
sudo yum install -y https://download.postgresql.org/pub/repos/yum/reporpms/EL-7-x86_64/pgdg-redhat-repo-latest.noarch.rpm

# Install server
sudo yum install -y postgresql13-server

# init db
sudo /usr/pgsql-13/bin/postgresql-13-setup initdb

# 修改遠程訪問配置
vim /var/lib/pgsql/13/data/postgresql.conf
...
將 listen_addresses = 'localhost' 修改為
listen_addresses = '*'
...

# 添加信任的遠程連接,生產中不要添加0.0.0.0
vim /var/lib/pgsql/13/data/pg_hba.conf
...
host    all             all             0.0.0.0/0               trust
# host    all             all             0.0.0.0/0               md5
# 最後一列如果是trust，則登錄pg不需要密碼，若為md5，則需要密碼
...


# start and enable server
sudo systemctl enable postgresql-13
sudo systemctl start postgresql-13

# 檢查服務是否啟動成功
ps看進程 或 ss看埠號

## 直接寫入新密碼
postgres=# \password
輸入新的密碼：
再次輸入：

## 創建資料庫
postgres=# CREATE DATABASE registry;
postgres=# CREATE DATABASE notaryserver;
postgres=# CREATE DATABASE notarysigner;

## 導入數據
psql -h post1 -U postgres -p 5432 -d registry -f registry.sql 
psql -h post1 -U postgres -p 5432 -d notaryserver -f notaryserver.sql 
psql -h post1 -U postgres -p 5432 -d notarysigner -f notarysigner.sql 
    -U 資料庫用戶
    -p 訪問埠
    -f 指定文件，和 < 功能一樣
    -h 指定資料庫地址
    -d 指定資料庫名

## 安裝nfs工具
yum -y install nfs-utils rpcbind

## 編輯共享目錄
vim /etc/exports
...
/alibaba *(rw,no_root_squash,no_all_squash,sync)
...

## 掛載
mkdir /alibaba
mount -t nfs post2:/alibaba/ /alibaba/

## 安裝 || 或源碼安裝自行選擇
yum -y install redis

## 
vim /etc/redis
...
bind 0.0.0.0 # 設置所有主機可以連接
requirepass redis # 設置客戶端連接密碼
daemonize yes # 打開守護進程模式
...

## 啟動redis
systemctl start redis

## 查看埠狀態
[root@centos7 src]# ss -tnlp | grep 6379 
LISTEN     0      128    127.0.0.1:6379                     *:*                   users:(("redis-server",pid=3405,fd=6))

## 自行下載源碼包
https://github.com/goharbor/harbor/releases

## 解壓進入
tar zxvf harbor-offline-installer-v2.1.2.tgz && cd harbor/

## 導入鏡像
docker load -i harbor.v2.1.2.tar.gz

## 編輯配置文件，需要更改的主要有以下幾點：
    1.hostname 改為主機ip或完全限定域名，不要使用127.0.0.1或localhost
    2.https選項，如需要，指定crt和key的路徑，若不需要，直接注釋掉
    3.harbor_admin_password，默認密碼，可以更改
    4.data_volume，數據默認存儲位置，設計為共享路徑
    5.注釋掉database模組 及 Clair模組
    6.開啟external_database 和 external_redis模組及正確配置其中參數
    7.集群內所有harbor配置均一樣，改一下hostname值即可

hostname: hub.vfancloud1.com

https:
  # https port for harbor, default is 443
  port: 443
  # The path of cert and key files for nginx
  certificate: /data/cert/server.crt
  private_key: /data/cert/server.key

harbor_admin_password: Harbor12345

data_volume: /alibaba

external_database:
  harbor:
    host: 192.168.24.253
    port: 5432
    db_name: external_redis
    username: postgres
    password: 123456
    ssl_mode: disable
    max_idle_conns: 2
    max_open_conns: 0
  clair:
    host: 192.168.24.253
    port: 5432
    db_name: clair
    username: postgres
    password: 123456
    ssl_mode: disable
  notary_signer:
    host: 192.168.24.253
    port: 5432
    db_name: notarysigner
    username: postgres
    password: 123456
    ssl_mode: disable
  notary_server:
    host: 192.168.24.253
    port: 5432
    db_name: notaryserver
    username: postgres
    password: 123456
    ssl_mode: disable

external_redis:
  # support redis, redis+sentinel
  # host for redis: <host_redis>:<port_redis>
  # host for redis+sentinel:
  #  <host_sentinel1>:<port_sentinel1>,<host_sentinel2>:<port_sentinel2>,<host_sentinel3>:<port_sentinel3>
  host: 192.168.24.253:6379
  password: redis
  # sentinel_master_set must be set to support redis+sentinel
  #sentinel_master_set:
  # db_index 0 is for core, it's unchangeable
  registry_db_index: 1
  jobservice_db_index: 2
  chartmuseum_db_index: 3
  clair_db_index: 4
  trivy_db_index: 5
  idle_timeout_seconds: 30

[root@kubenode2 harbor]# docker pull hub.vfancloud2.com/library/myapp:v1
v1: Pulling from library/myapp
550fe1bea624: Pull complete 
af3988949040: Pull complete 
d6642feac728: Pull complete 
c20f0a205eaa: Pull complete 
438668b6babd: Pull complete 
bf778e8612d0: Pull complete 
Digest: sha256:9eeca44ba2d410e54fccc54cbe9c021802aa8b9836a0bcf3d3229354e4c8870e
Status: Downloaded newer image for hub.vfancloud2.com/library/myapp:v1
hub.vfancloud2.com/library/myapp:v1