0
拉我想从别人的私人注册表[containerregistry.us.xxxxx.com:8088]拉码头工人的形象。当我拉着泊坞窗像我收到此错误泊坞窗：注册表：无法从别人的私有注册
[[email protected] ~]# docker pull containerregistry.us.xxxxx.com:8088/kafk-server:1
Error response from daemon: Get https://containerregistry.us.xxxxx.com:8088/v1/_ping: x509: certificate signed by unknown authority
1）我尝试添加在此文件夹/etc/docker/certs.d/containerregistry.us.xxxxx.com:8088他们给出ca.crt证书。
2）然后在docker.service文件在/usr/lib/systemd/system/，我试图在docker.service加入 --insecure-注册表containerregistry.us.xxxxx.com:8088 在该行这样 ExecStart=/usr/bin/dockerd
TO
ExecStart=/usr/bin/dockerd --insecure-registry containerregistry.us.xxxxx.com:8088
然后我重新启动码头工人和守护
[[email protected] ~]#systemctl daemon-reload
[[email protected] ~]#systemctl restart docker
Job for docker.service failed because the control process exited with error code. See "systemctl status docker.service" and "journalctl -xe" for details.`
配置：
[[email protected] ~]# docker info
Containers: 113
Running: 29
Paused: 0
Stopped: 84
Images: 50
Server Version: 1.13.1
Storage Driver: overlay2
Kernel Version: 4.1.12-61.1.28.el7uek.x86_64
Operating System: Oracle Linux Server 7.3
OSType: linux
Architecture: x86_64
CPUs: 4
请告诉如何添加不安全注册表有此配置，这样我就可以拉。我有证书文件。 –