Hi Guys, I have an https repository,docker environment can pull images, but container needs to be marked with "- k"

[ytRocky]

This is my docker,Docker client is not using a registry certificate:
cat /etc/docker/daemon.json
{
"insecure-registries":["10.2.3.4:5000"]
}
This Docker client can successfully pull.

---

This is my container:
[plugins."io.containerd.grpc.v1.cri".registry.configs]
[plugins."io.containerd.grpc.v1.cri".registry.configs."10.2.3.4".tls]
insecure_skip_verify = true
[plugins."io.containerd.grpc.v1.cri".registry.headers]
[plugins."io.containerd.grpc.v1.cri".registry.mirrors]
[plugins."io.containerd.grpc.v1.cri".registry.mirrors."10.2.3.4"]
endpoint = ["https://10.2.3.4:5000"]
This container client needs add "-k"
ex: ctr i pull 10.2.3.4:5000/abc -k

---

Can the container successfully pull without adding parameters or placing certificates？thanks.
The Best with You.

[Iceber]

I'm afraid it doesn't work, the registry configuration of the cri plugin configured in config.yaml.

ctr doesn't read containerd's config.yaml, so you need to set -k flag

[Iceber]

Maybe you can try nerdctl, which configures hosts_dir.
https://github.com/containerd/nerdctl/blob/v1.1.0/docs/config.md

[ytRocky]

thanks.