docker-compose拉结果x509：由不明权限签署的证书 [英] docker-compose pull results in x509: certificate signed by unknown authority

问题描述

  docker-compose pull $ b我尝试从dockerhub中拉出弹性搜索图像时遇到以下错误$ b拉弹力搜索（弹性搜索：2.2.0）... 
拉取存储库docker.io/library/elasticsearch 
错误：拖动图像时出错：获取https://index.docker.io/v1 / repositories / library / elasticsearch / images：x509：由未知权限签署的证书
无法使用docker-compose运行
  

我公司有一个中级根CA，我怀疑是导致问题。任何想法我应该如何配置Docker以使用公司Root CA？

解决方案

我通过添加CA root .crt 提交以下目录： /etc/docker/certs.d/docker.io

在 Unbuntu 14:04 与 Docker版本1.10.0，build 590d5108 和 docker-compose版本1.6.0，构建d99cad6 ：

• 在Internet Explorer浏览到 docker.io/library/elasticsearch ，并使用 DER 格式


• 在Ubuntu上 mkdir -p /etc/docker/certs.d/docker.io/


• cp<来自第一步的证书> .crt /etc/docker/certs.d/docker.io /


• service docker restart


• docker-compose pull 现在的作品和弹性图片下载

此处的更多信息： https://docs.docker.com/engine/security/certificates/

I'm hitting the following error when trying to pull the elastcisearch images from dockerhub.

docker-compose pull
Pulling elasticsearch (elasticsearch:2.2.0)...
Pulling repository docker.io/library/elasticsearch
ERROR: Error while pulling image: Get https://index.docker.io/v1/repositories/library/elasticsearch/images: x509: certificate signed by unknown authority
Failed to run with docker-compose

My company has an Intermediate Root CA that I suspect is causing the problem. Any ideas how I should configure Docker to use the company Root CA?

解决方案

I resolved the problem by adding the CA root .crt file the following directory: /etc/docker/certs.d/docker.io

Steps to resolve on Unbuntu 14:04 with Docker version 1.10.0, build 590d5108 and docker-compose version 1.6.0, build d99cad6:

• In Internet Explorer browse to docker.io/library/elasticsearch and export the companies Intermediate Root CA cert using DER format
• On Ubuntu mkdir -p /etc/docker/certs.d/docker.io/
• cp <cert from step one>.crt /etc/docker/certs.d/docker.io/
• service docker restart
• docker-compose pull now works and elasticsearch image downloads

More info here: https://docs.docker.com/engine/security/certificates/

这篇关于docker-compose拉结果x509：由不明权限签署的证书的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！