Thankyou

I just realized that STX4.0 uses containerd as the runtime and have got the below question now. The registry that we use locally is a HTTP based.

In order to make changes to adapt to the insecure registry we tried to do the following but it never works.

/etc/containerd/config.toml

[plugins.cri.registry]
[plugins.cri.registry.mirrors]
# Begin of insecure registries
[plugin.cri.registry.mirrors."artifactory. myownregistry.com:8093"]
endpoint = ["http://artifactory.myownregistry.com:8093"]

[plugins.cri.registry.configs."artifactory. myownregistry:8093".tls]
insecure_skip_verify = true
[plugins.cri.registry.configs."artifactory. myownregistry:8093".auth]
username = "myusername"
password = "mypassword"

I understand that the /etc/containerd/config.toml is not the right place to edit as this is not persistent but was expecting it to work for the first time. Would the same “system service-parameter-add” works even for this or is there any other API to do this?

Regards,

Venkata Veldanda

From: Sun, Austin <austin.sun@intel.com>
Sent: Friday, February 19, 2021 6:49 AM
To: Venkata Ramana Veldanda <Venkata.Veldanda@radisys.com>; starlingx-discuss@lists.starlingx.io
Subject: RE: Private Docker Registries

The e-mail below is from an external source. Please do not open attachments or click links from an unknown or suspicious origin.

Hi Venkata:

You can try command below :

“system service-parameter-modify docker docker-registry url=xxxx”  command to modify registry , suggest you lock/unlock controller once changes

Thanks.

BR
Austin Sun.

From: Venkata Ramana Veldanda <Venkata.Veldanda@radisys.com>
Sent: Thursday, February 18, 2021 10:17 PM
To: starlingx-discuss@lists.starlingx.io
Subject: [Starlingx-discuss] Private Docker Registries

Hi,

I am using STX4.0

Is there a supported way (either a system CLI or GUI) to add private docker registry ?.

For example – I try to add the following here and it would reset upon the reboot.

controller-0:/etc/docker# cat /etc/docker/daemon.json

{

    "insecure-registries" : ["artifactory.myownregistry.com:8093"]

}

Or do we only do this the puppet manifest way?

Regards,

Venkata Veldanda