docker-client-的CA认证

参考 docker docs

需要开启 TLS, 才能让 Docker client 和 daemon 用 HTTPS 通信.

配置

在 /etc/docker/certs.d 目录下, 目录结构如:

/etc/docker/certs.d/        <-- Certificate directory
└── localhost:5000          <-- Hostname:port
   ├── client.cert          <-- Client certificate
   ├── client.key           <-- Client key
   └── ca.crt               <-- Root CA that signed
                                the registry certificate, in PEM

生成 client certificates

openssl genrsa -out client.key 4096
openssl req -new -x509 -text -key client.key -out client.cert