update readme

This commit is contained in:
root 2025-04-22 13:51:11 +02:00
parent 3336e225a9
commit 777a5302f6

View File

@ -25,23 +25,23 @@ This document provides a minimal, engineeroriented guide to deploy Harbor on
systemctl enable --now podman.socket
sed -i 's/unqualified-search-registries = \["registry.access.redhat.com", "registry.redhat.io", "docker.io"\]/unqualified-search-registries = ["docker.io"]/g' /etc/containers/registries.conf
```
- Allow containers to manage cgroups:
```bash
setsebool -P container_manage_cgroup true
```
Allow containers to manage cgroups:
```bash
setsebool -P container_manage_cgroup true
```
4. **Clone your Git repository**
```bash
cd /opt
git clone ssh://git@code.swissmakers.ch:6022/michael.reber/harbor-podman.git
git clone https://code.swissmakers.ch/michael.reber/harbor-podman.git
```
5. **SELinux configuration**
- Set the correct label on persistent data directory:
```bash
semanage fcontext -a -t svirt_sandbox_file_t "/opt/harbor-podman(/.*)?"
restorecon -R /opt/harbor-podman
```
Set the correct label on persistent data directory:
```bash
semanage fcontext -a -t svirt_sandbox_file_t "/opt/harbor-podman(/.*)?"
restorecon -R /opt/harbor-podman
```
5. **Firewall (firewalld)**
```bash
@ -76,10 +76,10 @@ chown -R 1000:1000 /opt/harbor-podman
sed -i 's|^hostname:.*|hostname: harbor.swissmakers.ch|' harbor.yml
```
- Generate random passwords for admin and database:
```bash
sed -i "s|^harbor_admin_password:.*|harbor_admin_password: \"$(openssl rand -base64 30)\"|" harbor.yml
sed -i "/^database:/ { n; n; s|^ password:.*| password: \"$(openssl rand -base64 30)\"| }" harbor.yml
```
```bash
sed -i "s|^harbor_admin_password:.*|harbor_admin_password: \"$(openssl rand -base64 30)\"|" harbor.yml
sed -i "/^database:/ { n; n; s|^ password:.*| password: \"$(openssl rand -base64 30)\"| }" harbor.yml
```
## 5. Run the modified Installer for Podman