DERs/Harbor

VIC.DERSLLC.COM

Setup Repo Certs

1. Download ca.crt from https://vic.dersllc.com:8282/#/administration/configuration
2. Post it to cloud.dersllc.com and share it publicly

yum -y install ca-certificates
update-ca-trust force-enable
wget http://cloud.dersllc.com/index.php/s/YrqISnQvIHqZCwz/download -O /etc/pki/ca-trust/source/anchors/vic-ca.crt
update-ca-trust extract
update-ca-trust

mkdir -p /root/.docker
wget http://cloud.dersllc.com/index.php/s/lepRsqYTS86yTIc/download -O /root/.docker/config.json
systemctl restart docker

docker login vic.dersllc.com
#
#Username: [email protected]
#Password: <vsphere password>

DER's Harbor Install

cd ~
wget https://storage.googleapis.com/harbor-releases/harbor-online-installer-v1.3.0-rc4.tgz
tar -xzvf harbor-online-installer-v1.3.0-rc4.tgz

cd harbor
wget https://github.com/docker/compose/releases/download/1.18.0/docker-compose-Linux-x86_64
ln -s /harbor/docker-compose-Linux-x86_64 /bin/docker-compose
mkdir -p /data/cert
wget http://time.dersllc.com/ders-star.crt -O /data/cert/server.crt
wget http://time.dersllc.com/ders-star.key -O /data/cert/server.key

vi harbor.cfg 

./install.sh

DER's Docker Repo Setup

wget --no-check-certificate https://time.dersllc.com/ca.crt -O /etc/pki/ca-trust/source/anchors/cacert.cer
update-ca-trust
systemctl restart docker
docker login https://vic.dersllc.com

echo 'DOCKER_OPTS="--insecure-registry vic.dersllc.com"' > /etc/default/docker
wget --no-check-certificate https://time.dersllc.com/ca.crt -O /etc/docker/certs.d/vic.dersllc.com/ca.crt
systemctl restart docker
docker login vic.dersllc.com

tdnf -y install wget
mkdir -p /etc/docker/certs.d/docker.dersllc.com/
wget --no-check-certificate https://time.dersllc.com/ders-ca.crt -O /etc/docker/certs.d/docker.dersllc.com/ders-ca.crt
systemctl restart docker
docker login docker.dersllc.com

mkdir -p /etc/docker/certs.d/harbor.dersllc.com/
wget --no-check-certificate https://time.dersllc.com/ders-ca.crt -O /etc/docker/certs.d/harbor.dersllc.com/ders-ca.crt
systemctl restart docker
docker login harbor.dersllc.com

VCH Deploy

Get Thumbprint

ssh vcsa.dersllc.com
openssl x509 -in /etc/vmware-vpx/ssl/rui.crt -fingerprint -sha1 -noout

./vic/vic-machine-linux create --no-tlsverify --target 192.168.87.85 --user [email protected] --password ****** --name ders-vch1 --public-network /Beavercreek/network/Public --bridge-network /Beavercreek/network/Bridge --compute-resource /Beavercreek/host/HP/Resources --image-store DERS-FILE --insecure-registry 192.168.87.90:443 --thumbprint 8B:0C:4B:59:C6:E2:82:2E:1C:A5:7F:CE:E2:87:D8:A1:14:43:81:95 --volume-store 'DERS-FILE'/volumes:default --registry-ca="./ca.crt"