1
0
mirror of https://github.com/docker/docs.git synced 2026-11-05 00:14:17 +03:00

document how to install registry custom CA

Signed-off-by: Ben Bodenmiller <bbodenmiller@hotmail.com>
This commit is contained in:
Ben Bodenmiller
2016-08-21 22:43:42 -07:00
committed by Misty Stanley-Jones
parent a6244f5ce3
commit cfcdc63d52

View File

@@ -42,6 +42,22 @@ subcommand outputs the configuration command you should use.
For a complete list of `docker-machine` subcommands, see the [Docker Machine subcommand reference](reference/index.md).
## Custom root Certificate Authority for Registry
Users using their own Docker Registry will experience `x509: certificate signed by unknown authority`
error messages if their registry is signed by custom root Certificate Authority and it is
not registered with Docker Engine. As discussed in the [Docker Engine documentation](https://docs.docker.com/engine/security/certificates/#/understanding-the-configuration)
certificates should be placed at `/etc/docker/certs.d/hostname/ca.crt`
where `hostname` is your Registry server's hostname.
```console
docker-machine scp certfile default:ca.crt
docker-machine ssh default
sudo mv ~/ca.crt /etc/docker/certs.d/hostname/ca.crt
exit
docker-machine restart
```
## Crash Reporting
Provisioning a host is a complex matter that can fail for a lot of reasons. Your