CRIO: How To Connect To Insecure Private Container Registry Using OpenSSL Certificates From CRIO

CRIO: How To Connect To Insecure Private Container Registry Using OpenSSL Certificates From CRIO

Follow below steps. Steps in this doc are tested on Oracle Linux OS, but steps would be similar on other Operating systems

1) On the client machine where you have CRIO, Update /etc/containers/registries.conf file with just these entries. Replace localregistry.oracle.com with the local registry host and <port>> with port where you have localregistry listening.

[[registry]]
location = "localregitry.oracle.com:<port>"
insecure = true

2) On the client machine where you have CRIO, Restart system daemon and CRIO.

systemctl daemon-reload

systemctl restart crio

3) Do testing by pulling the images using crictl pull command from insecure container registry. Below is the command.

crictl pull local-registry:<port>/<image location and name>

4) Verify that you can see images using below command.

crictl images