解決: Error response from daemon: Get https://registry.docker.xxx.com/v1/_ping: x509: certificate

Docker version 17.04.0-ce, centos 7

從公司 docker 倉庫 pull 鏡像的時候報 x509: certificate signed by unknown authority.

查了一下, 網上說設置 docker insecure_registry即可解決. 可是按照官網設置DOCKER_OPTS="--insecure-registry registry.docker.xxx.com", 重啓docker沒用.

最後經過添加私有證書到 docker 解決. 步驟:

1. 導出證書. 用 https 打開 registry 並將證書導出: https://registry.docker.xxx.com. 我用的火狐, 提示證書不受信任, 點擊"高級","添加例外","查看", 在"詳情"標籤頁, 有一個"導出"按鈕. 導出一個後綴名爲crt或者cer的證書.
2. 將證書添加到docker.
   • 首先在/etc/docker/certs.d/目錄下建立registry.docker.xxx.com的目錄.
   • 而後將證書拷貝到registry.docker.xxx.com目錄下. 而且將證書重命名爲ca.crt或者ca.cer. 注意, 後綴名不重要, 名字必定要是ca.
   • 重啓docker便可. systemctl restart docker.service

參考連接:
https://docs.docker.com/registry/insecure/#using-self-signed-certificates