Once you have configured harbor.yml copied from harbor.yml.tmpl and optionally set up a storage backend, you install and start Harbor by using the install.sh script. Note that it might take some time for the online installer to download all of the Harbor images from Docker hub.

You can install Harbor in different configurations:

• Just Harbor, without Notary and Trivy
• Harbor with Notary
• Harbor with Trivy
• Harbor with Notary and Trivy

Default installation without Notary and Trivy

The default Harbor installation does not include Notary or Trivy service. Run the following command

sudo ./install.sh

If the installation succeeds, you can open a browser to visit the Harbor interface at http://reg.yourdomain.com, changing reg.yourdomain.com to the hostname that you configured in harbor.yml. If you did not change them in harbor.yml, the default administrator username and password are admin and Harbor12345.

Log in to the admin portal and create a new project, for example, myproject. You can then use Docker commands to log in to Harbor, tag images, and push them to Harbor.

docker login reg.yourdomain.com
docker push reg.yourdomain.com/myproject/myrepo:mytag

Installation with Notary

To install Harbor with the Notary service, add the --with-notary parameter when you run install.sh:

sudo ./install.sh --with-notary

For more information about Notary and Docker Content Trust, see Content Trust in the Docker documentation.

Installation with Trivy

To install Harbor with Trivy service, add the --with-trivy parameter when you run install.sh:

sudo ./install.sh --with-trivy

For more information about Trivy, see the Trivy documentation. For more information about how to use Trivy in an webproxy environment see Configure custom Certification Authorities for trivy

Installation with Notary and Trivy

If you want to install both Notary and Trivy, specify all of the parameters in the same command:

sudo ./install.sh --with-notary --with-trivy

Connecting to Harbor via HTTP

IMPORTANT: If your installation of Harbor uses HTTP rather than HTTPS, you must add the option --insecure-registry to your client’s Docker daemon. By default, the daemon file is located at /etc/docker/daemon.json.

For example, add the following to your daemon.json file:

{
"insecure-registries" : ["myregistrydomain.com:5000", "0.0.0.0"]
}

After you update daemon.json, you must restart both Docker Engine and Harbor.

1. Restart Docker Engine.

   systemctl restart docker
   

2. Stop Harbor.

   docker-compose down -v
   

3. Restart Harbor.

   docker-compose up -d
   

What to Do Next

• If the installation succeeds, see Harbor Administration for information about using Harbor.
• If you deployed Harbor with HTTP and you want to secure the connections to Harbor, see Configure HTTPS Access to Harbor.
• If installation fails, see Troubleshooting Harbor Installation.