mirror of
https://github.com/docker/docs.git
synced 2026-11-05 00:14:17 +03:00
document how to install registry custom CA
Signed-off-by: Ben Bodenmiller <bbodenmiller@hotmail.com>
This commit is contained in:
committed by
Misty Stanley-Jones
parent
a6244f5ce3
commit
cfcdc63d52
@@ -42,6 +42,22 @@ subcommand outputs the configuration command you should use.
|
||||
|
||||
For a complete list of `docker-machine` subcommands, see the [Docker Machine subcommand reference](reference/index.md).
|
||||
|
||||
## Custom root Certificate Authority for Registry
|
||||
|
||||
Users using their own Docker Registry will experience `x509: certificate signed by unknown authority`
|
||||
error messages if their registry is signed by custom root Certificate Authority and it is
|
||||
not registered with Docker Engine. As discussed in the [Docker Engine documentation](https://docs.docker.com/engine/security/certificates/#/understanding-the-configuration)
|
||||
certificates should be placed at `/etc/docker/certs.d/hostname/ca.crt`
|
||||
where `hostname` is your Registry server's hostname.
|
||||
|
||||
```console
|
||||
docker-machine scp certfile default:ca.crt
|
||||
docker-machine ssh default
|
||||
sudo mv ~/ca.crt /etc/docker/certs.d/hostname/ca.crt
|
||||
exit
|
||||
docker-machine restart
|
||||
```
|
||||
|
||||
## Crash Reporting
|
||||
|
||||
Provisioning a host is a complex matter that can fail for a lot of reasons. Your
|
||||
|
||||
Reference in New Issue
Block a user