RE: Docker registry without HTTPS

2020-08-28 Thread Jose Nunez
; } } Regards, --Jose -Original Message- From: Benjamin Wulff Sent: Friday, August 28, 2020 4:07 AM To: user@mesos.apache.org Subject: Re: Docker registry without HTTPS Hi all, I think the problem is somewhere in the proxy setup (nginx) that the registry is running behind. When I try it

Re: Docker registry without HTTPS

2020-08-28 Thread Benjamin Wulff
Hi all, I think the problem is somewhere in the proxy setup (nginx) that the registry is running behind. When I try it with a registry that does the TLS on it’s own without proxy, but with the same certificates I used before, then mesos pulls the docker images and executes the job. Sorry for

RE: Docker registry without HTTPS

2020-08-27 Thread Jose Nunez
rom: Benjamin Wulff Sent: Thursday, August 27, 2020 11:05 AM To: user@mesos.apache.org Subject: Re: Docker registry without HTTPS Hi Jose, yes, I configured the registry as an insecure registry. I also verified that I can use the docker command to pull from this registry docker pull mother:5000/

Re: Docker registry without HTTPS

2020-08-27 Thread Benjamin Wulff
Hi Jose, yes, I configured the registry as an insecure registry. I also verified that I can use the docker command to pull from this registry docker pull mother:5000/ben/experiment:1 But the problem is that Mesos calls curl to query the registry (I suppose) (1). The point where I am at right

Re: Docker registry without HTTPS

2020-08-27 Thread Benjamin Wulff
Hi all, so I have now configured the registry to do HTTPS. The certificate is self-signed. I now get the log message failed to start: Failed to perform 'curl': curl: (60) Peer's certificate issuer has been marked as not trusted by the user. This is curl’s way of saying that a valid CA certifi

RE: Docker registry without HTTPS

2020-08-27 Thread Jose Nunez
Hello, I do not use Mesos currently but this is what I did in the Docker settings. If you don't care about encryption you can tell docker to use an insecure registry. On /etc/docker/daemon.json: { "insecure-registries" : [ "myregistrymachine.domain:port" ], "features": { "build