搭建npm私服

搭建环境

操作系统：ubuntu 22.04 arm64

工具：verdaccio

方式一 docker 安装

参考文档

安装
```
docker pull verdaccio/verdaccio
```

启动

docker run -it --rm --name verdaccio -p 4873:4873 verdaccio/verdaccio

将配置复制到本地

docker cp vverdaccio:/verdaccio ~/verdaccio

删除 verdaccio 容器
```
docker rm -f verdaccio
```

修改本地的配置文件

 # 包含所有包的目录的路径
 storage: ./storage/data
 # 包含插件的目录路径
 plugins: ./plugins

 # 完整的webui配置查看 https://verdaccio.org/docs/webui
 web:
 enable: true
 title: npm仓库
 logo: https://lichong.work/logo
 favicon: https://lichong.work/logo
 # 主题色
 primary_color: '#8794AF'
 # gravatar头像支持
 gravatar: true
 # 包默认的排序方式
 sort_packages: asc
 # 默认用户界面转换为暗黑主题
 darkMode: false
 # html缓存
 html_cache: false
 # 默认显示所有功能
 login: true
 # 是否显示右上角verdaccio项目的相关信息
 showInfo: false
 # 是否显示右上角设置
 showSettings: true
 # 结合 darkMode 可以切换主题
 showThemeSwitch: true
 # 是否显示页脚
 showFooter: false
 # 是否可以搜索
 showSearch: true
 # 是否展示包的原始清单
 showRaw: true
 # 是否可以下载压缩包
 showDownloadTarball: true
 #  HTML tags injected after manifest <scripts/>
 # scriptsBodyAfter:
 #    - '<script type="text/javascript" src="https://my.company.com/customJS.min.js"></script>'
 #  HTML tags injected before ends </head>
 #  metaScripts:
 #    - '<script type="text/javascript" src="https://code.jquery.com/jquery-3.5.1.slim.min.js"></script>'
 #    - '<script type="text/javascript" src="https://browser.sentry-cdn.com/5.15.5/bundle.min.js"></script>'
 #    - '<meta name="robots" content="noindex" />'
 #  HTML tags injected first child at <body/>
 #  bodyBefore:
 #    - '<div id="myId">html before webpack scripts</div>'
 #  Public path for template manifest scripts (only manifest)
 #  publicPath: http://somedomain.org/

 # 认证相关完整配置查看 https://verdaccio.org/docs/configuration#authentication
 auth:
 htpasswd:
     file: ./storage/htpasswd
     # Maximum amount of users allowed to register, defaults to "+infinity".
     # You can set this to -1 to disable registration.
     # max_users: 1000
     # Hash algorithm, possible options are: "bcrypt", "md5", "sha1", "crypt".
     # algorithm: bcrypt # by default is crypt, but is recommended use bcrypt for new installations
     # Rounds number for "bcrypt", will be ignored for other algorithms.
     # rounds: 10

 # 上游链路完整配置查看 https://verdaccio.org/docs/configuration#uplinks
 uplinks:
 npmjs:
     url: https://registry.npmjs.org/
 npmmirror:
     url: https://registry.npmmirror.com/

 # 了解如何保护包查看 https://verdaccio.org/docs/protect-your-dependencies/
 # packages完整配置查看 https://verdaccio.org/docs/configuration#packages
 packages:
 '@*/*':
     access: $all
     publish: $authenticated
     unpublish: $authenticated
     proxy: npmmirror
     
 '**':
     # 可以指定用户名/组名（取决于使用的身份验证插件）和三个关键字：“$all”、“$anonymous”、“$authenticated”

     # 允许所有用户（包括未经身份验证的用户）阅读和发布所有包
     access: $all
     # 允许所有已知用户发布/发布包
     publish: $authenticated
     unpublish: $authenticated
     # 如果包在本地找不到，将请求到“npmmirror”代理去查找
     proxy: npmmirror

 # To improve your security configuration and  avoid dependency confusion
 # consider removing the proxy property for private packages
 # https://verdaccio.org/docs/best#remove-proxy-to-increase-security-at-private-packages

 # https://verdaccio.org/docs/configuration#server
 # You can specify HTTP/1.1 server keep alive timeout in seconds for incoming connections.
 # A value of 0 makes the http server behave similarly to Node.js versions prior to 8.0.0, which did not have a keep-alive timeout.
 # WORKAROUND: Through given configuration you can workaround following issue https://github.com/verdaccio/verdaccio/issues/301. Set to 0 in case 60 is not enough.
 server:
 keepAliveTimeout: 60
 # Allow `req.ip` to resolve properly when Verdaccio is behind a proxy or load-balancer
 # See: https://expressjs.com/en/guide/behind-proxies.html
 # trustProxy: '127.0.0.1'

 # https://verdaccio.org/docs/configuration#offline-publish
 # publish:
 #   allow_offline: false

 # https://verdaccio.org/docs/configuration#url-prefix
 # url_prefix: /verdaccio/
 # VERDACCIO_PUBLIC_URL='https://somedomain.org';
 # url_prefix: '/my_prefix'
 # // url -> https://somedomain.org/my_prefix/
 # VERDACCIO_PUBLIC_URL='https://somedomain.org';
 # url_prefix: '/'
 # // url -> https://somedomain.org/
 # VERDACCIO_PUBLIC_URL='https://somedomain.org/first_prefix';
 # url_prefix: '/second_prefix'
 # // url -> https://somedomain.org/second_prefix/'

 # https://verdaccio.org/docs/configuration#security
 # security:
 #   api:
 #     legacy: true
 #     jwt:
 #       sign:
 #         expiresIn: 29d
 #       verify:
 #         someProp: [value]
 #    web:
 #      sign:
 #        expiresIn: 1h # 1 hour by default
 #      verify:
 #         someProp: [value]

 # https://verdaccio.org/docs/configuration#user-rate-limit
 # userRateLimit:
 #   windowMs: 50000
 #   max: 1000

 # https://verdaccio.org/docs/configuration#max-body-size
 # max_body_size: 10mb

 # https://verdaccio.org/docs/configuration#listen-port
 # listen:
 # - localhost:4873            # default value
 # - http://localhost:4873     # same thing
 # - 0.0.0.0:4873              # listen on all addresses (INADDR_ANY)
 # - https://example.org:4873  # if you want to use https
 # - "[::1]:4873"                # ipv6
 # - unix:/tmp/verdaccio.sock    # unix socket

 # The HTTPS configuration is useful if you do not consider use a HTTP Proxy
 # https://verdaccio.org/docs/configuration#https
 # https:
 #   key: ./path/verdaccio-key.pem
 #   cert: ./path/verdaccio-cert.pem
 #   ca: ./path/verdaccio-csr.pem

 # https://verdaccio.org/docs/configuration#proxy
 # http_proxy: http://something.local/
 # https_proxy: https://something.local/

 # webhook通知完整配置查看 https://verdaccio.org/docs/configuration#notifications
 # notify:
 #   method: POST
 #   headers: [{ "Content-Type": "application/json" }]
 #   endpoint: https://usagge.hipchat.com/v2/room/3729485/notification?auth_token=mySecretToken
 #   content: '{"color":"green","message":"New package published: * {{ name }}*","notify":true,"message_format":"text"}'

 middlewares:
 audit:
     enabled: true

 # https://verdaccio.org/docs/logger
 # log settings
 logs: { type: stdout, format: pretty, level: http }
 #experiments:
 #  # support for npm token command
 #  token: false
 #  # enable tarball URL redirect for hosting tarball with a different server, the tarball_url_redirect can be a template string
 #  tarball_url_redirect: 'https://mycdn.com/verdaccio/${packageName}/${filename}'
 #  # the tarball_url_redirect can be a function, takes packageName and filename and returns the url, when working with a js configuration file
 #  tarball_url_redirect(packageName, filename) {
 #    const signedUrl = // generate a signed url
 #    return signedUrl;
 #  }

 # 国际化配置
 i18n:
 web: zh-CN

启动

docker run -it -d --name verdaccio -v ~/verdaccio/conf -p 4873:4873 verdaccio/verdaccio

访问
```
 http://127.0.0.1:4873
```

在项目中访问

nrm add verdaccio http://127.0.0.1:4873
nrm use verdaccio
npm install

这里可能会卡住，可以去看看docker日志

查看报错
```
docker logs --tail 200 verdaccio
```

设置 verdaccio 权限

chown -R 10001:65533 ~/verdaccio/conf/storage

重启
```
docker restart verdaccio
```

方式二 npm 安装

安装 nvm

curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.39.3/install.sh | bash

查看 shell 类型
```
echo $0
```

在.bashrc中添加nvm的环境变量（zsh 在 .zshrc）

vim .bashrc

# NVM
export NVM_DIR="$HOME/.nvm"
[ -s "$NVM_DIR/nvm.sh" ] && \. "$NVM_DIR/nvm.sh"  # This loads nvm
[ -s "$NVM_DIR/bash_completion" ] && \. "$NVM_DIR/bash_completion"  # This loads nvm bash_completion

source ~/.bashrc

$ nvm -v
0.39.3

安装 node
```
nvm install node
```

安装 verdaccio

npm install --location=global verdaccio

启动 verdaccio

$ verdaccio
warn --- config file  - /home/.config/verdaccio/config.yaml
warn --- http address - http://localhost:4873/ - verdaccio/3.0.0

方式三 docker-compose

安装 docker-compose

sudo curl -L https://github.com/docker/compose/releases/download/v2.18.1/docker-compose-`uname -s`-`uname -m` -o /usr/local/bin/docker-compose

镜像

sudo curl -L https://get.daocloud.io/docker/compose/releases/download/v2.18.1/docker-compose-`uname -s`-`uname -m` -o /usr/local/bin/docker-compose

大概有 40 多 M，容易下载失败，需要确定下载成功才能执行后面的操作
下载失败的样子

添加执行权限

sudo chmod +x /usr/local/bin/docker-compose

查看版本
```
docker-compose --version
```
- 这里不能正常查看的，大概率是没有下载成功

创建项目结构和文件

 -verdaccio
     -docker-compose.yml   #docker-compose 配置文件
     -plugins              
     -conf
         -config.yaml      #verdaccio 配置文件
     -storage

设置全部文件夹下面文件权限

sudo chmod -R 777 ~/verdaccio
sudo chmod -R 777 ~/verdaccio/plugins
sudo chmod -R 777 ~/verdaccio/conf
sudo chmod -R 777 ~/verdaccio/conf/config.yaml
sudo chmod -R 777 ~/verdaccio/storage

配置 docker-compose.yml

version: '3.4'

services:
verdaccio:
    image: verdaccio/verdaccio
    container_name: "verdaccio"
    networks:
    - node-network
    environment:
    - VERDACCIO_PORT=4873
    ports:
    - "4873:4873"
    volumes:
    - "./storage:/verdaccio/storage"
    - "./config:/verdaccio/conf"
    - "./plugins:/verdaccio/plugins"
networks:
node-network:
    driver: bridge

配置 verdaccio config.yaml 同 docker 安装方式
启动
```
docker-compose up -d
```

其他收获

虚拟机的 .bash_profile 文件在哪里在用户目录下，使用ls -a命令查看隐藏文件

搭建 npm 私服