• Online installer: The online installer downloads the Harbor images from Docker hub. For this reason, the installer is very small in size.

• Offline installer: Use the offline installer if the host to which are are deploying Harbor does not have a connection to the Internet. The offline installer contains pre-built images, so it is larger than the online installer.

The installation processes are almost the same for both the online and offline installers.

1. Go to the Harbor releases page.

3. Optionally download the corresponding file to verify that the package is genuine.

   The *.asc file is an OpenPGP key file. Perform the following steps to verify that the downloaded bundle is genuine.

   1. Obtain the public key for the *.asc file.

      You should see the message public key "Harbor-sign (The key for signing Harbor build) <jiangd@vmware.com>" imported

   2. • Offline installer:

      The gpg command verifies that the signature of the bundle matches that of the key file. You should see confirmation that the signature is correct.

      gpg: armor header: Version: GnuPG v1
      gpg: assuming signed data in 'harbor-online-installer-v2.0.2.tgz'
      gpg: Signature made Tue Jul 28 09:49:20 2020 UTC
      gpg:                using RSA key 644FF454C0B4115C
      gpg: using pgp trust model
      gpg:          There is no indication that the signature belongs to the owner.
      Primary key fingerprint: 7722 D168 DAEC 4578 06C9  6FF9 644F F454 C0B4 115C
      gpg: binary signature, digest algorithm SHA1, key algorithm rsa4096

4. Use tar to extract the installer package:

   • Offline installer:

Next Steps

• To secure the connections to Harbor, see Configure HTTPS Access to Harbor.