๐ก Docker & containerd Insecure Private Registry โ Executive Summary
Technical architectural analysis, practical configuration manifests, and deployment instructions for Docker & containerd Insecure Private Registry.
docker
docker daemon
vi /etc/docker/daemon.json
json
{
"insecure-registries" : ["harbor.Enterprise Cloud.cld"]
}systemctl restart docker
podman docker
vi /etc/containers/registries.conf
rb
[[registry]]
location = "registry.mycluster.williamlieurance.com:5000"
insecure = truesystemctl restart podman
contanerd / nerdctl
bash
sudo mkdir -p /etc/containerd
containerd config default | sudo tee /etc/containerd/config.toml
# SystemGroup ์ค์
vi /etc/containerd/config.toml
toml
..
[plugins."io.containerd.grpc.v1.cri".containerd.default_runtime.options]
SystemdCgroup = true
..
[plugins."io.containerd.grpc.v1.cri".registry]
config_path = ""
[plugins."io.containerd.grpc.v1.cri".registry.auths]
[plugins."io.containerd.grpc.v1.cri".registry.configs]
[plugins."io.containerd.grpc.v1.cri".registry.configs."harbor.dr.dreamcloud.co.kr".tls]
insecure_skip_verify = true
[plugins."io.containerd.grpc.v1.cri".registry.configs."harbor.dr.dreamcloud.co.kr".auth]
auth = "YWRtaW46b2tlc3RybzIwMTg=" #admin:Enterprise Cloud2018 | base64, Last 'K'->'='
[plugins."io.containerd.grpc.v1.cri".registry.headers]
[plugins."io.containerd.grpc.v1.cri".registry.mirrors]
[plugins."io.containerd.grpc.v1.cri".registry.mirrors."harbor.dr.dreamcloud.co.kr"]
endpoint = ["https://harbor.dr.dreamcloud.co.kr"]
bash
systemctl enable containerd
systemctl restart containerd
Leave a Reply