Docker Insecure Registry

| 16-09-2021
[RAND-1-100] Comments

  1. Docker Insecure Registry Config
  2. Docker Insecure Registry Ubuntu 20.04
  3. Docker Insecure Registry Setup

I have a 3 node swarm cluster. I spun up a registry container on node1 of my swarm cluster.

[root@worker1 ~]# curl -i 'http://localhost:5000/v2/'
HTTP/1.1 200 OK
Content-Length: 2
Content-Type: application/json; charset=utf-8
Docker-Distribution-Api-Version: registry/2.0
X-Content-Type-Options: nosniff
Date: Thu, 13 Apr 2017 11:39:31 GMT

The proper way to set it is via the -engine-insecure-registry argument to docker-machine: You can also pass other options using -engine-opts. For example, set dns via -engine-opt dns=8.8.8.8. Mac docker's config file was in /.docker/daemon, The configuration you added to the software interface is the wrong configuration for the MAC.

Registry

Environment='DOCKEROPTS=-insecure-registry='hostname.cloudapp.net:5000' After loading daemon and restarting docker service, systemd shows that the environment variable is there $ sudo systemctl show docker grep Env. Added '-insecure-registry xx.xx.xx.xx:8081' by modifying the OPTIONS variable in the /etc/sysconfig/docker file: OPTIONS='-default-ulimit nofile=1024:40961 -insecure-registry hostname:8081' Then restarted the docker. I was then able to login to the local docker registry using: docker login -u admin -p password hostname:8081. Aug 05, 2021 You need to configure insecure registry setting on every node in your cluster. Depends on your container runtime (docker vs containerd), the steps are different.

Citrix receiver for mac mojave. A tag and push to the local registry worked:
[root@worker1 ~]# curl ‘http://localhost:5000/v2/bram/mynginx/tags/list’
{“name”:“bram/mynginx”,“tags”:[“1.0”]}

A curl from node2 gives:
[root@worker2 ~]# curl http://:5000/v2/bram/mynginx/tags/list
{“name”:“bram/mynginx”,“tags”:[“1.0”]}

Docker Insecure Registry Config

Docker Insecure Registry

Docker Insecure Registry Ubuntu 20.04

But when I do a pull I get:
[root@worker2 ~]# docker pull 10.0.0.11:5000/bram/mynginx:1.0
Error response from daemon: Get https://:5000/v1/_ping: http: server gave HTTP response to HTTPS client

I added DOCKER_OPTS='–insecure-registry 10.0.0.11:5000' to /etc/default/docker and restarted the docker service but didn’t help.

Docker Insecure Registry Setup

Anyone an idea of what I am doing wrong?