[Starlingx-discuss] Private Docker Registries

[Venkata Ramana Veldanda]

Thankyou

I just realized that STX4.0 uses containerd as the runtime and have got the below question now. The registry that we use locally is a HTTP based.

In order to make changes to adapt to the insecure registry we tried to do the following but it never works.

/etc/containerd/config.toml

[plugins.cri.registry]
[plugins.cri.registry.mirrors]
# Begin of insecure registries
[plugin.cri.registry.mirrors."artifactory. myownregistry.com:8093"]
endpoint = ["http://artifactory.myownregistry.com:8093"]

[plugins.cri.registry.configs."artifactory. myownregistry:8093".tls]
insecure_skip_verify = true
[plugins.cri.registry.configs."artifactory. myownregistry:8093".auth]
username = "myusername"
password = "mypassword"

I understand that the /etc/containerd/config.toml is not the right place to edit as this is not persistent but was expecting it to work for the first time. Would the same "system service-parameter-add" works even for this or is there any other API to do this?


Regards,
Venkata Veldanda

From: Sun, Austin <austin.sun at intel.com>
Sent: Friday, February 19, 2021 6:49 AM
To: Venkata Ramana Veldanda <Venkata.Veldanda at radisys.com>; starlingx-discuss at lists.starlingx.io
Subject: RE: Private Docker Registries

The e-mail below is from an external source. Please do not open attachments or click links from an unknown or suspicious origin.
Hi Venkata:
You can try command below :
"system service-parameter-modify docker docker-registry url=xxxx"  command to modify registry , suggest you lock/unlock controller once changes


Thanks.
BR
Austin Sun.


From: Venkata Ramana Veldanda <Venkata.Veldanda at radisys.com<mailto:Venkata.Veldanda at radisys.com>>
Sent: Thursday, February 18, 2021 10:17 PM
To: starlingx-discuss at lists.starlingx.io<mailto:starlingx-discuss at lists.starlingx.io>
Subject: [Starlingx-discuss] Private Docker Registries

Hi,
I am using STX4.0

Is there a supported way (either a system CLI or GUI) to add private docker registry ?.

For example - I try to add the following here and it would reset upon the reboot.

controller-0:/etc/docker# cat /etc/docker/daemon.json
{
    "insecure-registries" : ["artifactory.myownregistry.com:8093"]
}

Or do we only do this the puppet manifest way?

Regards,
Venkata Veldanda

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.starlingx.io/pipermail/starlingx-discuss/attachments/20210219/b669ffff/attachment.html>