# 搜索镜像
docker search nginx
docker search --filter=stars=100 nginx

# 拉取镜像
docker pull nginx:latest
docker pull library/nginx:1.24

# 推送镜像（需要登录）
docker login
docker push myusername/myapp:latest

# 拉取频率限制
# 匿名用户：100 次/6 小时
# 登录用户：200 次/6 小时
# 付费用户：无限制

# 下载安装包
wget https://github.com/goharbor/harbor/releases/download/v2.8.0/harbor-offline-installer-v2.8.0.tgz
tar xzf harbor-offline-installer-v2.8.0.tgz
cd harbor

# 配置
cp harbor.yml.tmpl harbor.yml
# 修改 hostname、证书、密码等

# 安装
./install.sh

# 镜像管理
docker tag myapp:latest harbor.example.com/library/myapp:1.0
docker push harbor.example.com/library/myapp:1.0

# 漏洞扫描（内置 Trivy）
# Harbor 自动扫描推送的镜像

# 镜像复制
# 配置复制规则自动同步到其他 Harbor

# .gitlab-ci.yml 集成
build:
  stage: build
  image: docker:latest
  services:
    - docker:dind
  script:
    - docker build -t $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA .
    - docker push $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA
  only:
    - main

# 登录
aws ecr get-login-password --region us-east-1 | \
  docker login --username AWS --password-stdin 123456789.dkr.ecr.us-east-1.amazonaws.com

# 创建仓库
aws ecr create-repository --repository-name myapp

# 推送
docker tag myapp:latest 123456789.dkr.ecr.us-east-1.amazonaws.com/myapp:latest
docker push 123456789.dkr.ecr.us-east-1.amazonaws.com/myapp:latest

# 开发环境：Docker Hub
docker pull node:18-alpine

# 构建后推送到私有仓库
docker tag myapp:dev internal-registry:5000/team-a/myapp:dev
docker push internal-registry:5000/team-a/myapp:dev

# 发布到生产仓库
docker tag myapp:dev prod-registry:5000/myapp:1.2.3
docker push prod-registry:5000/myapp:1.2.3

# Harbor 复制规则示例
apiVersion: goharbor.io/v1alpha1
kind: ReplicationRule
metadata:
  name: sync-to-dr
spec:
  filters:
    - type: name
      value: "library/*"
  trigger:
    type: event_based
    settings:
      creation: true
      deletion: false
  destination:
    registry: dr-registry
    namespace: backup

# Docker Hub
# 仓库设置 → 自动删除旧版本

# Harbor
# 设置保留策略
# 保留最近 10 个版本，删除 90 天前的镜像

# 手动清理
docker image prune -a --filter "until=24h"