did i must del images and "docker-compose up -d" again?

We verify a user's credentials against our LDAP server. We find it can't be synchronized with our LDAP server(In fact, permission deny) when we delete an user through the WebUI of harbor. What's worse, we can't recover the deleted user unless re-deploy entire project as well as clean all data in database.

In my opinion, user management can be removed from harbor if the auth mode is ladp_auth, which can be exactly taken over by LDAP server.

Currently Harbor's components (proxy, UI, registry, etc) run in an unmanaged fashion (and probably as single instances). We may leverage Kubernetes as the hosting platform so that we could:

• use replication controller, daemon set, autoscaler, health check, and monitoring to auto-manage Harbor's components, in pursuit of higher availability and scalability
• use rolling-update to manage new releases of Harbor
• use config map to elegantly support different settings

We could start with defining the Pod/RC/Service files for Harbor's components, and later make a Turn-Key solution with 1-click-installation on K8s.

I was able to start the dockers on v1 a few days ago, but after changing to v2, it can't connect to database:

Removing deploy_proxy_1
Starting deploy_log_1
Starting deploy_ui_1
Starting deploy_mysql_1
Starting deploy_registry_1
Recreating d0e168193174_d0e168193174_d0e168193174_d0e168193174_deploy_proxy_1
Attaching to deploy_log_1, deploy_ui_1, deploy_registry_1, deploy_mysql_1, deploy_proxy_1
ui_1        | 2016-04-06T15:09:54Z [INFO] Config path: /etc/ui/app.conf
registry_1  | time="2016-04-06T15:09:54.443001161Z" level=info msg="debug server listening localhost:5001" 
ui_1        | 2016-04-06T15:09:54Z [INFO] failed to connect to db, retry after 2 seconds...
registry_1  | time="2016-04-06T15:09:54.444358057Z" level=info msg="configuring endpoint harbor (http://ui/service/notifications), timeout=500ns, headers=map[]" go.version=go1.5.3 instance.id=0e9d47bc-ecdd-42ab-9404-7ce92e546174 service=registry version=v2.3.0 
ui_1        | 2016-04-06T15:09:56Z [INFO] failed to connect to db, retry after 2 seconds...
mysql_1     | 2016-04-06 15:09:54 0 [Note] mysqld (mysqld 5.6.29) starting as process 1 ...
registry_1  | time="2016-04-06T15:09:54.444443413Z" level=info msg="redis not configured" go.version=go1.5.3 instance.id=0e9d47bc-ecdd-42ab-9404-7ce92e546174 service=registry version=v2.3.0 
ui_1        | 2016-04-06T15:09:58Z [INFO] failed to connect to db, retry after 2 seconds...
registry_1  | time="2016-04-06T15:09:54.44537561Z" level=info msg="using inmemory blob descriptor cache" go.version=go1.5.3 instance.id=0e9d47bc-ecdd-42ab-9404-7ce92e546174 service=registry version=v2.3.0 
ui_1        | 2016-04-06T15:10:00Z [INFO] failed to connect to db, retry after 2 seconds...
registry_1  | time="2016-04-06T15:09:54.445568058Z" level=debug msg="configured \"token\" access controller" go.version=go1.5.3 instance.id=0e9d47bc-ecdd-42ab-9404-7ce92e546174 service=registry version=v2.3.0 
registry_1  | time="2016-04-06T15:09:54.445635237Z" level=info msg="listening on [::]:5000" go.version=go1.5.3 instance.id=0e9d47bc-ecdd-42ab-9404-7ce92e546174 service=registry version=v2.3.0 
ui_1        | 2016-04-06T15:10:02Z [INFO] failed to connect to db, retry after 2 seconds...
mysql_1     | 2016-04-06 15:09:54 1 [Note] Plugin 'FEDERATED' is disabled.
ui_1        | 2016-04-06T15:10:04Z [INFO] failed to connect to db, retry after 2 seconds...
mysql_1     | 2016-04-06 15:09:54 1 [Note] InnoDB: Using atomics to ref count buffer pool pages
mysql_1     | 2016-04-06 15:09:54 1 [Note] InnoDB: The InnoDB memory heap is disabled
mysql_1     | 2016-04-06 15:09:54 1 [Note] InnoDB: Mutexes and rw_locks use GCC atomic builtins
mysql_1     | 2016-04-06 15:09:54 1 [Note] InnoDB: Memory barrier is not used
mysql_1     | 2016-04-06 15:09:54 1 [Note] InnoDB: Compressed tables use zlib 1.2.8
mysql_1     | 2016-04-06 15:09:54 1 [Note] InnoDB: Using Linux native AIO
mysql_1     | 2016-04-06 15:09:54 1 [Note] InnoDB: Using CPU crc32 instructions
mysql_1     | 2016-04-06 15:09:54 1 [Note] InnoDB: Initializing buffer pool, size = 128.0M
mysql_1     | 2016-04-06 15:09:54 1 [Note] InnoDB: Completed initialization of buffer pool
mysql_1     | 2016-04-06 15:09:54 1 [Note] InnoDB: Highest supported file format is Barracuda.
mysql_1     | 2016-04-06 15:09:54 1 [Note] InnoDB: 128 rollback segment(s) are active.
mysql_1     | 2016-04-06 15:09:54 1 [Note] InnoDB: Waiting for purge to start
mysql_1     | 2016-04-06 15:09:54 1 [Note] InnoDB: 5.6.29 started; log sequence number 1701222
mysql_1     | 2016-04-06 15:09:54 1 [Note] Server hostname (bind-address): '*'; port: 3306
mysql_1     | 2016-04-06 15:09:54 1 [Note] IPv6 is available.
mysql_1     | 2016-04-06 15:09:54 1 [Note]   - '::' resolves to '::';
mysql_1     | 2016-04-06 15:09:54 1 [Note] Server socket created on IP: '::'.
mysql_1     | 2016-04-06 15:09:54 1 [Warning] 'proxies_priv' entry '@ root@3381ee0ee5ce' ignored in --skip-name-resolve mode.
mysql_1     | 2016-04-06 15:09:54 1 [Note] Event Scheduler: Loaded 0 events
mysql_1     | 2016-04-06 15:09:54 1 [Note] mysqld: ready for connections.
mysql_1     | Version: '5.6.29'  socket: '/var/run/mysqld/mysqld.sock'  port: 3306  MySQL Community Server (GPL)
ui_1        | 2016-04-06T15:10:06Z [INFO] failed to connect to db, retry after 2 seconds...
ui_1        | 2016-04-06T15:10:08Z [INFO] failed to connect to db, retry after 2 seconds...
ui_1        | 2016-04-06T15:10:10Z [INFO] failed to connect to db, retry after 2 seconds...
ui_1        | 2016-04-06T15:10:12Z [INFO] failed to connect to db, retry after 2 seconds...
ui_1        | 2016-04-06T15:10:14Z [INFO] failed to connect to db, retry after 2 seconds...
ui_1        | 2016-04-06T15:10:16Z [INFO] failed to connect to db, retry after 2 seconds...
ui_1        | 2016-04-06T15:10:18Z [INFO] failed to connect to db, retry after 2 seconds...
ui_1        | 2016-04-06T15:10:20Z [INFO] failed to connect to db, retry after 2 seconds...
ui_1        | 2016-04-06T15:10:22Z [INFO] failed to connect to db, retry after 2 seconds...
ui_1        | 2016-04-06T15:10:24Z [INFO] failed to connect to db, retry after 2 seconds...
ui_1        | 2016-04-06T15:10:26Z [INFO] failed to connect to db, retry after 2 seconds...
ui_1        | 2016-04-06T15:10:28Z [INFO] failed to connect to db, retry after 2 seconds...
ui_1        | 2016-04-06T15:10:30Z [INFO] failed to connect to db, retry after 2 seconds...
ui_1        | 2016-04-06T15:10:32Z [INFO] failed to connect to db, retry after 2 seconds...
ui_1        | 2016-04-06T15:10:34Z [INFO] failed to connect to db, retry after 2 seconds...
ui_1        | 2016-04-06T15:10:36Z [INFO] failed to connect to db, retry after 2 seconds...
ui_1        | 2016-04-06T15:10:38Z [INFO] failed to connect to db, retry after 2 seconds...
ui_1        | 2016-04-06T15:10:40Z [INFO] failed to connect to db, retry after 2 seconds...
ui_1        | 2016-04-06T15:10:42Z [INFO] failed to connect to db, retry after 2 seconds...
ui_1        | 2016-04-06T15:10:44Z [INFO] failed to connect to db, retry after 2 seconds...
ui_1        | 2016-04-06T15:10:46Z [INFO] failed to connect to db, retry after 2 seconds...
ui_1        | 2016-04-06T15:10:48Z [INFO] failed to connect to db, retry after 2 seconds...
ui_1        | 2016-04-06T15:10:50Z [INFO] failed to connect to db, retry after 2 seconds...
ui_1        | 2016-04-06T15:10:52Z [INFO] failed to connect to db, retry after 2 seconds...
ui_1        | panic: Failed to connect to DB after 60 seconds
ui_1        | 
ui_1        | goroutine 1 [running]:
ui_1        | github.com/vmware/harbor/dao.InitDB()
ui_1        |   /go/src/github.com/vmware/harbor/dao/base.go:100 +0x4c8
ui_1        | main.main()
ui_1        |   /go/src/github.com/vmware/harbor/main.go:70 +0x40
ui_1        | 
ui_1        | goroutine 17 [syscall, locked to thread]:
ui_1        | runtime.goexit()
ui_1        |   /usr/local/go/src/runtime/asm_amd64.s:1696 +0x1
ui_1        | 
ui_1        | goroutine 5 [syscall]:
ui_1        | os/signal.loop()
ui_1        |   /usr/local/go/src/os/signal/signal_unix.go:22 +0x18
ui_1        | created by os/signal.init.1
ui_1        |   /usr/local/go/src/os/signal/signal_unix.go:28 +0x37
ui_1        | 
ui_1        | goroutine 6 [chan receive]:
ui_1        | github.com/vmware/harbor/vendor/github.com/astaxie/beego/cache.(*MemoryCache).vaccuum(0xc8200f2660)
ui_1        |   /go/src/github.com/vmware/harbor/vendor/github.com/astaxie/beego/cache/memory.go:216 +0x71
ui_1        | created by github.com/vmware/harbor/vendor/github.com/astaxie/beego/cache.(*MemoryCache).StartAndGC
ui_1        |   /go/src/github.com/vmware/harbor/vendor/github.com/astaxie/beego/cache/memory.go:206 +0x25c
ui_1        | 
ui_1        | goroutine 7 [sleep]:
ui_1        | time.Sleep(0x77359400)
ui_1        |   /usr/local/go/src/runtime/time.go:59 +0xf9
ui_1        | github.com/vmware/harbor/dao.InitDB.func1(0xc82000a02b, 0x5, 0x0, 0x0, 0xc820278a10)
ui_1        |   /go/src/github.com/vmware/harbor/dao/base.go:93 +0x226
ui_1        | created by github.com/vmware/harbor/dao.InitDB
ui_1        |   /go/src/github.com/vmware/harbor/dao/base.go:96 +0x310
deploy_ui_1 exited with code 2

I verified that my docker-compose version is 1.7.0:

docker-compose version 1.7.0rc1, build 1ad8866
docker-py version: 1.8.0-rc2
CPython version: 2.7.9
OpenSSL version: OpenSSL 1.0.1e 11 Feb 2013

and my docker version is 1.10.3:

Client:
 Version:      1.10.3
 API version:  1.22
 Go version:   go1.5.3
 Git commit:   20f81dd
 Built:        Thu Mar 10 15:54:52 2016
 OS/Arch:      linux/amd64

Server:
 Version:      1.10.3
 API version:  1.22
 Go version:   go1.5.3
 Git commit:   20f81dd
 Built:        Thu Mar 10 15:54:52 2016
OS/Arch:      linux/amd64

when i run "docker-compose up -d"

[root@bj-dockercloud-1 Deploy]# docker-compose up -d
Creating network "deploy_default" with the default driver
ERROR: 404 page not found

how can i fix it, thanks

My env:
CentOS Linux release 7.2.1511 (Core)
docker-compose version 1.7.0, build 0d7bf73
Docker version 1.8.2-el7.centos, build a01dc02/1.8.2

Try to leverage the default network.

If, for some reason, uploading the first image of a repository failed, you can still see the repository created on UI. However, when click on the repository, an error with HTML code will show up. Please see the snapshot.

we need follow a general convention to adjust the project layout. the lower-case is fine in linux culture. please consider it. thanks a lot.

I signed up an new account "demouser1" by going through the self-registration process and then created a "demo" project.

I'd like to add a new member named "test" to "demo" project, but it is failed.
It is said "User does not exist".

i see 0.1.0 is just for ubuntu 14

I can login by docker client (all in same machine),but can not push image.

[root@registry]# docker push newtest/shaozp-hello-world:latest
The push refers to a repository [docker.io/newtest/shaozp-hello-world]
Repository does not exist: newtest/shaozp-hello-world

[root@registry]# docker push localhost:newtest/shaozp-hello-world:latest
Error parsing reference: "localhost:newtest/shaozp-hello-world:latest" is not a valid repository/tag

what's wrong?

mac os 10.11.1
go get github.com/mqu/openldap
show error Cannot compile

github.com/mqu/openldap

/Users/wenhuazhang/GoProjects/src/github.com/mqu/openldap/add-modify-delete.go:48:9: warning: 'ldap_add_ext_s' is deprecated: first deprecated in OS X 10.11 - use OpenDirectory Framework [-Wdeprecated-declarations]
/Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.11.sdk/usr/include/ldap.h:1160:1: note: 'ldap_add_ext_s' has been explicitly marked deprecated here
/Users/wenhuazhang/GoProjects/src/github.com/mqu/openldap/add-modify-delete.go:54:9: warning: 'ldap_modify_ext_s' is deprecated: first deprecated in OS X 10.11 - use OpenDirectory Framework [-Wdeprecated-declarations]
/Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.11.sdk/usr/include/ldap.h:1430:1: note: 'ldap_modify_ext_s' has been explicitly marked deprecated here
/Users/wenhuazhang/GoProjects/src/github.com/mqu/openldap/add-modify-delete.go:60:9: warning: 'ldap_rename_s' is deprecated: first deprecated in OS X 10.11 - use OpenDirectory Framework [-Wdeprecated-declarations]
/Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.11.sdk/usr/include/ldap.h:1467:1: note: 'ldap_rename_s' has been explicitly marked deprecated here
/Users/wenhuazhang/GoProjects/src/github.com/mqu/openldap/add-modify-delete.go:65:9: warning: 'ldap_mods_free' is deprecated: first deprecated in OS X 10.11 - use OpenDirectory Framework [-Wdeprecated-declarations]
/Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.11.sdk/usr/include/ldap.h:2014:1: note: 'ldap_mods_free' has been explicitly marked deprecated here
/Users/wenhuazhang/GoProjects/src/github.com/mqu/openldap/add-modify-delete.go:166:23: warning: 'ldap_delete_s' is deprecated: first deprecated in OS X 10.10 - use ldap_delete_ext_s [-Wdeprecated-declarations]
/Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.11.sdk/usr/include/ldap.h:1363:1: note: 'ldap_delete_s' has been explicitly marked deprecated here

github.com/mqu/openldap

/Users/wenhuazhang/GoProjects/src/github.com/mqu/openldap/openldap.go:86:23: warning: 'ldap_bind_s' is deprecated: first deprecated in OS X 10.10 - use ldap_sasl_bind_s [-Wdeprecated-declarations]
/Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.11.sdk/usr/include/ldap.h:1275:1: note: 'ldap_bind_s' has been explicitly marked deprecated here
/Users/wenhuazhang/GoProjects/src/github.com/mqu/openldap/openldap.go:101:23: warning: 'ldap_initialize' is deprecated: first deprecated in OS X 10.11 - use OpenDirectory Framework [-Wdeprecated-declarations]
/Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.11.sdk/usr/include/ldap.h:1541:1: note: 'ldap_initialize' has been explicitly marked deprecated here
/Users/wenhuazhang/GoProjects/src/github.com/mqu/openldap/openldap.go:123:23: warning: 'ldap_search_s' is deprecated: first deprecated in OS X 10.10 - use ldap_search_ext_s [-Wdeprecated-declarations]
/Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.11.sdk/usr/include/ldap.h:1925:1: note: 'ldap_search_s' has been explicitly marked deprecated here
/Users/wenhuazhang/GoProjects/src/github.com/mqu/openldap/openldap.go:139:23: warning: 'ldap_start_tls_s' is deprecated: first deprecated in OS X 10.11 - use OpenDirectory Framework [-Wdeprecated-declarations]
/Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.11.sdk/usr/include/ldap.h:1569:1: note: 'ldap_start_tls_s' has been explicitly marked deprecated here
/Users/wenhuazhang/GoProjects/src/github.com/mqu/openldap/openldap.go:153:23: warning: 'ldap_unbind' is deprecated: first deprecated in OS X 10.10 - use ldap_unbind_ext [-Wdeprecated-declarations]
/Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.11.sdk/usr/include/ldap.h:1967:1: note: 'ldap_unbind' has been explicitly marked deprecated here

github.com/mqu/openldap

/Users/wenhuazhang/GoProjects/src/github.com/mqu/openldap/options-errors.go:71:42: warning: 'ldap_err2string' is deprecated: first deprecated in OS X 10.11 - use OpenDirectory Framework [-Wdeprecated-declarations]
/Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.11.sdk/usr/include/ldap.h:1384:1: note: 'ldap_err2string' has been explicitly marked deprecated here
/Users/wenhuazhang/GoProjects/src/github.com/mqu/openldap/options-errors.go:88:23: warning: 'ldap_get_option' is deprecated: first deprecated in OS X 10.11 - use OpenDirectory Framework [-Wdeprecated-declarations]
/Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.11.sdk/usr/include/ldap.h:978:1: note: 'ldap_get_option' has been explicitly marked deprecated here
/Users/wenhuazhang/GoProjects/src/github.com/mqu/openldap/options-errors.go:105:23: warning: 'ldap_set_option' is deprecated: first deprecated in OS X 10.11 - use OpenDirectory Framework [-Wdeprecated-declarations]
/Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.11.sdk/usr/include/ldap.h:984:1: note: 'ldap_set_option' has been explicitly marked deprecated here

github.com/mqu/openldap

/Users/wenhuazhang/GoProjects/src/github.com/mqu/openldap/results.go:111:23: warning: 'ldap_count_entries' is deprecated: first deprecated in OS X 10.11 - use OpenDirectory Framework [-Wdeprecated-declarations]
/Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.11.sdk/usr/include/ldap.h:1633:1: note: 'ldap_count_entries' has been explicitly marked deprecated here
/Users/wenhuazhang/GoProjects/src/github.com/mqu/openldap/results.go:126:23: warning: 'ldap_count_messages' is deprecated: first deprecated in OS X 10.11 - use OpenDirectory Framework [-Wdeprecated-declarations]
/Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.11.sdk/usr/include/ldap.h:1588:1: note: 'ldap_count_messages' has been explicitly marked deprecated here
/Users/wenhuazhang/GoProjects/src/github.com/mqu/openldap/results.go:140:23: warning: 'ldap_count_values_len' is deprecated: first deprecated in OS X 10.11 - use OpenDirectory Framework [-Wdeprecated-declarations]
/Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.11.sdk/usr/include/ldap.h:1826:1: note: 'ldap_count_values_len' has been explicitly marked deprecated here
/Users/wenhuazhang/GoProjects/src/github.com/mqu/openldap/results.go:155:42: warning: 'ldap_first_attribute' is deprecated: first deprecated in OS X 10.11 - use OpenDirectory Framework [-Wdeprecated-declarations]
/Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.11.sdk/usr/include/ldap.h:1804:1: note: 'ldap_first_attribute' has been explicitly marked deprecated here
/Users/wenhuazhang/GoProjects/src/github.com/mqu/openldap/results.go:169:42: warning: 'ldap_first_entry' is deprecated: first deprecated in OS X 10.11 - use OpenDirectory Framework [-Wdeprecated-declarations]
/Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.11.sdk/usr/include/ldap.h:1623:1: note: 'ldap_first_entry' has been explicitly marked deprecated here
/Users/wenhuazhang/GoProjects/src/github.com/mqu/openldap/results.go:183:42: warning: 'ldap_first_message' is deprecated: first deprecated in OS X 10.11 - use OpenDirectory Framework [-Wdeprecated-declarations]
/Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.11.sdk/usr/include/ldap.h:1578:1: note: 'ldap_first_message' has been explicitly marked deprecated here
/Users/wenhuazhang/GoProjects/src/github.com/mqu/openldap/results.go:197:42: warning: 'ldap_get_dn' is deprecated: first deprecated in OS X 10.11 - use OpenDirectory Framework [-Wdeprecated-declarations]
/Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.11.sdk/usr/include/ldap.h:1662:1: note: 'ldap_get_dn' has been explicitly marked deprecated here
/Users/wenhuazhang/GoProjects/src/github.com/mqu/openldap/results.go:212:42: warning: 'ldap_get_values_len' is deprecated: first deprecated in OS X 10.11 - use OpenDirectory Framework [-Wdeprecated-declarations]
/Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.11.sdk/usr/include/ldap.h:1820:1: note: 'ldap_get_values_len' has been explicitly marked deprecated here
/Users/wenhuazhang/GoProjects/src/github.com/mqu/openldap/results.go:226:23: warning: 'ldap_msgfree' is deprecated: first deprecated in OS X 10.11 - use OpenDirectory Framework [-Wdeprecated-declarations]
/Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.11.sdk/usr/include/ldap.h:1869:1: note: 'ldap_msgfree' has been explicitly marked deprecated here
/Users/wenhuazhang/GoProjects/src/github.com/mqu/openldap/results.go:241:42: warning: 'ldap_next_attribute' is deprecated: first deprecated in OS X 10.11 - use OpenDirectory Framework [-Wdeprecated-declarations]
/Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.11.sdk/usr/include/ldap.h:1810:1: note: 'ldap_next_attribute' has been explicitly marked deprecated here
/Users/wenhuazhang/GoProjects/src/github.com/mqu/openldap/results.go:255:42: warning: 'ldap_next_entry' is deprecated: first deprecated in OS X 10.11 - use OpenDirectory Framework [-Wdeprecated-declarations]
/Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.11.sdk/usr/include/ldap.h:1628:1: note: 'ldap_next_entry' has been explicitly marked deprecated here
/Users/wenhuazhang/GoProjects/src/github.com/mqu/openldap/results.go:269:42: warning: 'ldap_next_message' is deprecated: first deprecated in OS X 10.11 - use OpenDirectory Framework [-Wdeprecated-declarations]
/Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.11.sdk/usr/include/ldap.h:1583:1: note: 'ldap_next_message' has been explicitly marked deprecated here
/Users/wenhuazhang/GoProjects/src/github.com/mqu/openldap/results.go:287:23: warning: 'ldap_result' is deprecated: first deprecated in OS X 10.11 - use OpenDirectory Framework [-Wdeprecated-declarations]
/Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.11.sdk/usr/include/ldap.h:1853:1: note: 'ldap_result' has been explicitly marked deprecated here
/Users/wenhuazhang/GoProjects/src/github.com/mqu/openldap/results.go:298:2: warning: 'ldap_value_free_len' is deprecated: first deprecated in OS X 10.11 - use OpenDirectory Framework [-Wdeprecated-declarations]
/Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.11.sdk/usr/include/ldap.h:1830:1: note: 'ldap_value_free_len' has been explicitly marked deprecated here

Need APIs for counting existing projects and repositories group by user

I can't delete my own project and images, even my role is Project Admin.

I install harbor by harbor_0.1.0.tgz, and is run successed,also can open the web . but push image fail.
prompt:5f70bf18a086: Preparing
1834950e52ce: Preparing
unauthorized: access to the requested resource is not authorized

Hi：
Start ui service failure when use docker-compose up, in my log, I see some error that db can not connection
docker_ui.txt

jschroeder@chit-jsl2:/tmp/harbor/config/ui (master *)$ harbor
2016/03/24 12:01:56 Config path: /etc/ui/harbor.conf
2016-03-24T12:01:56-05:00 [INFO] User id: 1 already has its encrypted password.
^Cjschroeder@chit-jsl2:/tmp/harbor/config/ui (master *)$ export CONFIG_PATH=/bogus/path
jschroeder@chit-jsl2:/tmp/harbor/config/ui (master *)$ harbor
2016/03/24 12:02:16 Config path: /bogus/path
panic: runtime error: invalid memory address or nil pointer dereference
[signal 0xb code=0x1 addr=0x0 pc=0x5302c2]

goroutine 1 [running]:
github.com/vmware/harbor/vendor/github.com/astaxie/beego.(*beegoAppConfig).String(0x0, 0xbccbf0, 0xb, 0x0, 0x0)
    /builddir/build/BUILD/harbor-a61cf3625a162811a5d467cff8291438a0025914/_build/src/github.com/vmware/harbor/vendor/github.com/astaxie/beego/config.go:299 +0x172
github.com/vmware/harbor/controllers.init.1()
    /builddir/build/BUILD/harbor-a61cf3625a162811a5d467cff8291438a0025914/_build/src/github.com/vmware/harbor/controllers/base.go:136 +0x515
github.com/vmware/harbor/controllers.init()
    /builddir/build/BUILD/harbor-a61cf3625a162811a5d467cff8291438a0025914/_build/src/github.com/vmware/harbor/controllers/search.go:28 +0x81
github.com/vmware/harbor/routers.init()
    /builddir/build/BUILD/harbor-a61cf3625a162811a5d467cff8291438a0025914/_build/src/github.com/vmware/harbor/routers/router.go:66 +0x40
main.init()
    /builddir/build/BUILD/harbor-a61cf3625a162811a5d467cff8291438a0025914/main.go:75 +0x59

goroutine 17 [syscall, locked to thread]:
runtime.goexit()
    /usr/local/go/src/runtime/asm_amd64.s:1721 +0x1

goroutine 5 [syscall]:
os/signal.loop()
    /usr/local/go/src/os/signal/signal_unix.go:22 +0x18
created by os/signal.init.1
    /usr/local/go/src/os/signal/signal_unix.go:28 +0x37

goroutine 6 [runnable]:
time.NewTimer(0xa7a3582000, 0x0)
    /usr/local/go/src/time/sleep.go:67 +0x30
time.After(0xa7a3582000, 0x0)
    /usr/local/go/src/time/sleep.go:110 +0x21
github.com/vmware/harbor/vendor/github.com/astaxie/beego/cache.(*MemoryCache).vaccuum(0xc820112c60)
    /builddir/build/BUILD/harbor-a61cf3625a162811a5d467cff8291438a0025914/_build/src/github.com/vmware/harbor/vendor/github.com/astaxie/beego/cache/memory.go:216 +0x4e
created by github.com/vmware/harbor/vendor/github.com/astaxie/beego/cache.(*MemoryCache).StartAndGC
    /builddir/build/BUILD/harbor-a61cf3625a162811a5d467cff8291438a0025914/_build/src/github.com/vmware/harbor/vendor/github.com/astaxie/beego/cache/memory.go:206 +0x270

I plan on fixing this perhaps this weekend and making it give a bit nicer message. Just wanted to file this so it does eventually get fixed. The weird paths are due to me building harbor via a rpm spec file with mock.

Would you be interested in a spec file for an rpm?

When I pull / push images from the Docker hub like ubuntu:14:04 or node:4.2.3 and push them to harbor, everything works fine and I can see the images with their tags etc. inside the repositories.

If I publish my own images the same way, I get an error when clicking the image name inside the repository:

/usr/local/go/src/runtime/asm_amd64.s:437 /usr/local/go/src/runtime/panic.go:423 /usr/local/go/src/runtime/panic.go:12 /go/src/github.com/vmware/harbor/service/utils/registryutils.go:74 /go/src/github.com/vmware/harbor/api/repository.go:132 /usr/local/go/src/runtime/asm_amd64.s:437 /usr/local/go/src/reflect/value.go:432 /usr/local/go/src/reflect/value.go:300 /go/src/github.com/vmware/harbor/vendor/github.com/astaxie/beego/router.go:777 /usr/local/go/src/net/http/server.go:1862 /usr/local/go/src/net/http/server.go:1361 /usr/local/go/src/runtime/asm_amd64.s:1696 

After I start harbor, docker will create a bridge with IP 172.17.0.1 automatically. How can I assign the IP by myself?
I have a host will IP 172.17.1.42 can't access the harbor.

Couldn't register with a username once was used by a deleted user in harbor.

What I saw in database was

mysql> select user_id,username,deleted,reset_uuid from user;
+---------+-----------+---------+------------+
| user_id | username  | deleted | reset_uuid |
+---------+-----------+---------+------------+
|       1 | admin     |       0 | NULL       |
|       2 | anonymous |       1 | NULL       |
.................
|       4 | jenkins79 |       1 | NULL       |
+---------+-----------+---------+------------+

just list docker server, we would like the harbor can serv a rest api to interact with 3rd app. it's fine to do integration work

To cover the case when user A is disabled and no one can add member to the projects in which user A is the only project admin.

First: thanks for harbor 👍

Is it possible to disable the sign up and let user join only by admin invite?

After I followed the instructions and installed harbor, I can't push my image to the private registry.
Environment: CentOS 7.1 / Docker 1.10 / IP 172.17.1.31
I appended this line to /etc/sysconfig/docker.
OPTIONS='--selinux-enabled --ipv6=false --insecure-registry=172.17.1.31:5001'
But when I push a image,
docker push 172.17.1.31:5001/ubuntu:14.04
I got these logs.
The push refers to a repository [172.17.1.31:5001/ubuntu]
unable to ping registry endpoint https://172.17.1.31:5001/v0/
v2 ping attempt failed with error: Get https://172.17.1.31:5001/v2/: dial tcp 172.17.1.31:5001: getsockopt: connection refused
v1 ping attempt failed with error: Get https://172.17.1.31:5001/v1/_ping: dial tcp 172.17.1.31:5001: getsockopt: connection refused
Anyone have idea?

# cat harbor.cfg|grep email_server
email_server = smtp.xxxxxx.com
email_server_port = 25

Mar 21 11:12:36 registry.idc docker/ui[15559]: 2016/03/21 03:12:36 [password.go:169][E] send email failed: x509: certificate is valid for *.icoremail.net, icoremail.net, not smtp.xxxxxx.com

It is a common situation that serve name does not match with the domain name in certificate when using an email vendor. So, it is better to make smtp TLS configurable.

重现步骤：

1. 开启一个nginx绑定一个域名docker.xxx.com 监听80和443端口，443上挂letsencrypt上获取ssl证书
2. 登录https://docker.xxx.com 访问habor的web控制台正常
3. docker login docker.xxx.com正常
4. docker push docker.xxx.com/demo/xxx 报错 "unauthorized: authentication required"

网上查到的原因是docker login是走https端口443，docker push走http端口80，导致无法读取到docker login获取的token。

临时解决办法：客户机docker启动时候带上--insecure-registry=docker.xxx.com 强制docker login走http的80端口，就可以正常push了

check /docker_ui.log
Apr 14 15:09:42 host-10-1-241-130 docker/ui[4480]: 2016/04/14 07:09:42 #33[1;34m[router.go:828][D] | POST | /userExists | 1.285775ms | match | /userExists | #33[0m
Apr 14 15:09:42 host-10-1-241-130 docker/ui[4480]: 2016-04-14T07:09:42Z [ERROR] [password.go:170]: Send email failed: 501 Mail path must not include special characters.

check /docker_proxy.log
Apr 14 15:09:42 host-10-1-241-130 docker/proxy[4480]: 10.1.39.55 - - [14/Apr/2016:07:09:42 +0000] "POST /userExists HTTP/1.1" 200 4 "http://10.1.241.130/forgotPassword" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36"
Apr 14 15:09:42 host-10-1-241-130 docker/proxy[4480]: 10.1.39.55 - - [14/Apr/2016:07:09:42 +0000] "GET /sendEmail?email=412012135%40qq.com HTTP/1.1" 500 17 "http://10.1.241.130/forgotPassword" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36"

when I login or put image to my private registry, I got the errors: [unable to decode token response: invalid character '<' looking for beginning of value]

anyone else met this problem before?

For those of us who would like to build harbor from source and deploy it manually (perhaps not using docker), it is a bit tricky.

I've been reverse engineering how the source release is different from the binary releases and think it really should be documented better.

I created a demo project through web UI, and push an image to demo project. The image is uploaded to demo project successfully, but no image is displayed repositories on the web UI.

No idea how to issue api request in command line, keeping get 401 Unauthorized response.

I changed the hostname to localhost in harbor.cfg. I was able to see the UI on localhost and login using admin, but I was not able to push any images to the registry:

zeyu@perhaps:~/gocode/src/github.com/caicloud/paging$ docker login localhost
Username (admin): admin
Password: 
WARNING: login credentials saved in /home/zeyu/.docker/config.json
Login Succeeded
zeyu@perhaps:~/gocode/src/github.com/caicloud/paging$ docker push localhost/admin/ubuntu:14.04
The push refers to a repository [localhost/admin/ubuntu]
5f70bf18a086: Image push failed 
1b82ce694c3b: Preparing 
db6b2d84f3c6: Preparing 
05b940eef08d: Preparing 
unauthorized: authentication required

What's the problem?

When create an empty project, and enter into this project on the web page, wait for 5 seconds, then an error message pop up, says,
Operation Failed
internal server error null

1. Create a new project test.
2. Click the test project.
3. Wait for 5 seconds, you can see this error message.

Expected behaviour: no error message.

At the very beginning ,I have logined the private registry,but failed to push a images to regitry.And then ,a few minutes later,I try again,and I pushed successfully.So that's happening?

admin should see all repositories and projects whether they are in public.

If setting up harbor behind an nginx proxy or ELB, pushing image to harbor will fail.

That is because in harbor's nginx config, x-fowarded-XXX headers were set again. So harbor nginx will reset the values from first layer nginx or ELB, and the requests will not be routed properly.

Please see this issue: distribution/distribution#970

It would be nice if it could be configured in harbor.cfg to indicate where x-forwarded-XXX headers should be set in harbor's nginx.conf

I pulled 864b814 (to test #49 and #59), then cd Deploy, changed hostname = localhost in harbor.cfg.
Then I ran docker-compose up -d

Wenn I open http://localhost I get a nginx 502 Bad Gateway error.

The last few lines of /var/log/harbor/<date>/docker_ui.log look like this:

12:41:10 failed to connect to db, retry after 2 seconds...

After a few seconds, deploy_ui container is stopping completely.

After pushing images to harbor, I have to run docker-compose kill and docker-compose up -d to see the new images. Search inside the UI also doesn't find them before restarting.

But I can pull the images using the Docker client without restarting.

This has to be done outside the registry, will introduce a "job service",
to have the image transferred asynchrounously

I have seen a docker-compose.yml in this project.But,it not a good way to debug.When I start deploy a development environment,I find it hard to me.The nginx is relay on harbor and there are so many env . So,how do you dev/debug this project?

This is needed to authenticate against Active Directory. Briefly scanning auth/ldap/ldap.go, there isn't a way to set this.

scenario

1. I followed the the guidance build-and-save-images-for-offline-installation
2. downloaded harbor_0.1.0.tgz,
3. unziped
4. cd harbor
5. ./prepare
6. docker-compose build, but the result is proxy uses an image, skipping

my solution

1. mkdir proxy
2. create proxy/Dockerfile, the content of proxy/Dockerfile is FROM nginx:1.9
3. modified docker-compose.yml, replace image: nginx:1.9 to build: ./proxy
4. After that, docker-compose build works

I'm not sure my solution is right. Could you please give me a hand, Thank you very much.

fork/exec /usr/bin/gcc: cannot allocate memory

The 'Created' time displayed on image details dialog is using UTC.

i got this problem also, but it's not the upcase reason
my config.yml

version: 0.1
log:
  level: debug
  fields:
    service: registry
storage:
    cache:
        layerinfo: inmemory
    filesystem:
        rootdirectory: /storage
    maintenance:
        uploadpurging:
            enabled: false
http:
    addr: :5000
    secret: placeholder
    debug:
        addr: localhost:5001
auth:
  token:
    issuer: registry-token-issuer
    realm: https://10.33.40.144/service/token
    rootcertbundle: /etc/registry/root.crt
    service: token-service

notifications:
  endpoints:
      - name: harbor
        disabled: false
        url: http://ui/service/notifications
        timeout: 500
        threshold: 5
        backoff: 1000

log:
log.tar.gz

after 1 minute, ui response

<html>
 <head><title>504 Gateway Time-out</title></head>
 <body bgcolor="white">
 <center><h1>504 Gateway Time-out</h1></center>
 <hr><center>nginx/1.9.4</center>
 </body>
 </html>
 <!-- a padding to disable MSIE and Chrome friendly error page -->
 <!-- a padding to disable MSIE and Chrome friendly error page -->
 <!-- a padding to disable MSIE and Chrome friendly error page -->
 <!-- a padding to disable MSIE and Chrome friendly error page -->
 <!-- a padding to disable MSIE and Chrome friendly error page -->
 <!-- a padding to disable MSIE and Chrome friendly error page -->

but i can use docker client pull image

pls help me

i want debug project on win7.1,how do it.
docker and docker-compose and python sdk is ready.

![harbor_logo_rec](https://cloud.githubusercontent.com/assets/2390463/13483672/8617c868-e131-11e5-8e30-f9509b86a57f.png
![harbor_logo_rec_s]%28https://cloud.githubusercontent.com/assets/2390463/13483731/189c4baa-e132-11e5-9fcc-e59804b92e5a.png%29)

Login as admin and try to push a image failed, got "insufficient scope" from registry/distribution. Here is the command that I use to push

docker push 192.168.99.100/ubuntu:v0.4

the project/namespace where I am trying to push to is the library project under admin account, I supposed to have the write permission. When I dig into the harbor code I find
https://github.com/vmware/harbor/blob/master/service/utils/authutils.go#L66

Obviously, harbor intentionally omit this kind to scenario , I want know is this a bug or not?

thanks