pull command should also support private registry with private certs

[ChaosEternal]

for example, when pull from an internal registry,
img command failed:

img pull registry.internal/py-test

Pulling registry.internal/py-test...
failed to do request: Head https://registry.internal/v2/py-test/manifests/latest: x509: certificate signed by unknown authority

[jessfraz]

is this flag not sufficient for you? #85

[jessfraz]

I would love to do what docker does and not actually have flags for those....

…

On Sun, May 27, 2018 at 9:50 AM Jess Frazelle ***@***.***> wrote: is this flag not sufficient for you? #85 <#85> — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#103 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/ABYNbK51lJFFcwGvLkhU8sq7XvYJqBK2ks5t2q8SgaJpZM4UPNxw> .

-- Jessie Frazelle 4096R / D4C4 DD60 0D66 F65A 8EFC 511E 18F3 685C 0022 BFF3 pgp.mit.edu <http://pgp.mit.edu/pks/lookup?op=get&search=0x18F3685C0022BFF3>

[ChaosEternal]

Pull command does not has that flag. I agree with your point, but docker has /etc/docker/certs.d/some-domain/ca.cert On Sun, May 27, 2018 at 9:51 PM Jess Frazelle <[email protected]> wrote:

…

I would love to do what docker does and not actually have flags for those.... On Sun, May 27, 2018 at 9:50 AM Jess Frazelle ***@***.***> wrote: > is this flag not sufficient for you? #85 > <#85> > > — > You are receiving this because you are subscribed to this thread. > Reply to this email directly, view it on GitHub > <#103 (comment)>, > or mute the thread > < https://github.com/notifications/unsubscribe-auth/ABYNbK51lJFFcwGvLkhU8sq7XvYJqBK2ks5t2q8SgaJpZM4UPNxw > > . > -- Jessie Frazelle 4096R / D4C4 DD60 0D66 F65A 8EFC 511E 18F3 685C 0022 BFF3 pgp.mit.edu < http://pgp.mit.edu/pks/lookup?op=get&search=0x18F3685C0022BFF3> — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#103 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/ABbCm43u9MhtjUoTitmeWs97wmAZmyr2ks5t2q9UgaJpZM4UPNxw> .

[ChaosEternal]

Also, Verifying an SSL certificate against a customer generated CA and disable verification of certs are two different stories.

…

On Mon, May 28, 2018 at 10:54 AM Jun Sheng ***@***.***> wrote: Pull command does not has that flag. I agree with your point, but docker has /etc/docker/certs.d/some-domain/ca.cert On Sun, May 27, 2018 at 9:51 PM Jess Frazelle ***@***.***> wrote: > I would love to do what docker does and not actually have flags for > those.... > > On Sun, May 27, 2018 at 9:50 AM Jess Frazelle ***@***.***> > wrote: > > > is this flag not sufficient for you? #85 > > <#85> > > > > — > > You are receiving this because you are subscribed to this thread. > > Reply to this email directly, view it on GitHub > > <#103 (comment) > >, > > or mute the thread > > < > https://github.com/notifications/unsubscribe-auth/ABYNbK51lJFFcwGvLkhU8sq7XvYJqBK2ks5t2q8SgaJpZM4UPNxw > > > > . > > > > > -- > > > Jessie Frazelle > 4096R / D4C4 DD60 0D66 F65A 8EFC 511E 18F3 685C 0022 BFF3 > pgp.mit.edu < > http://pgp.mit.edu/pks/lookup?op=get&search=0x18F3685C0022BFF3> > > — > You are receiving this because you authored the thread. > Reply to this email directly, view it on GitHub > <#103 (comment)>, > or mute the thread > <https://github.com/notifications/unsubscribe-auth/ABbCm43u9MhtjUoTitmeWs97wmAZmyr2ks5t2q9UgaJpZM4UPNxw> > . >

[jessfraz]

Yes well in Linux you can add a ca-cert to your ca certs so why should we even have to do anything :)

[ChaosEternal]

thanks , I tried again and that really works. On Mon, May 28, 2018 at 1:18 PM Jess Frazelle <[email protected]> wrote:

…

Yes well in Linux you can add a ca-cert to your ca certs so why should we even have to do anything :) On Sun, May 27, 2018 at 23:07 ChaosEternal ***@***.***> wrote: > Also, Verifying an SSL certificate against a customer generated CA and > disable verification of certs are two different stories. > > > On Mon, May 28, 2018 at 10:54 AM Jun Sheng ***@***.***> wrote: > > > Pull command does not has that flag. > > I agree with your point, but docker has > > /etc/docker/certs.d/some-domain/ca.cert > > > > > > On Sun, May 27, 2018 at 9:51 PM Jess Frazelle < ***@***.***> > > wrote: > > > >> I would love to do what docker does and not actually have flags for > >> those.... > >> > >> On Sun, May 27, 2018 at 9:50 AM Jess Frazelle < ***@***.*** > > > >> wrote: > >> > >> > is this flag not sufficient for you? #85 > >> > <#85> > >> > > >> > — > >> > You are receiving this because you are subscribed to this thread. > >> > Reply to this email directly, view it on GitHub > >> > < > #103 (comment) > >> >, > >> > or mute the thread > >> > < > >> > https://github.com/notifications/unsubscribe-auth/ABYNbK51lJFFcwGvLkhU8sq7XvYJqBK2ks5t2q8SgaJpZM4UPNxw > >> > > >> > . > >> > > >> > >> > >> -- > >> > >> > >> Jessie Frazelle > >> 4096R / D4C4 DD60 0D66 F65A 8EFC 511E 18F3 685C 0022 BFF3 > >> pgp.mit.edu < > >> http://pgp.mit.edu/pks/lookup?op=get&search=0x18F3685C0022BFF3> > >> > >> — > >> You are receiving this because you authored the thread. > >> Reply to this email directly, view it on GitHub > >> < #103 (comment) > >, > >> or mute the thread > >> < > https://github.com/notifications/unsubscribe-auth/ABbCm43u9MhtjUoTitmeWs97wmAZmyr2ks5t2q9UgaJpZM4UPNxw > > > >> . > >> > > > > — > You are receiving this because you commented. > > > Reply to this email directly, view it on GitHub > <#103 (comment)>, > or mute the thread > < https://github.com/notifications/unsubscribe-auth/ABYNbI-6w7MNgDM3KDMQya4NmsBm8Ybgks5t22oHgaJpZM4UPNxw > > . > -- Jessie Frazelle 4096R / D4C4 DD60 0D66 F65A 8EFC 511E 18F3 685C 0022 BFF3 pgp.mit.edu < http://pgp.mit.edu/pks/lookup?op=get&search=0x18F3685C0022BFF3> — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#103 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/ABbCm4qKQtZPcfA60VTaInPkPR0wFhx9ks5t24jAgaJpZM4UPNxw> .

[jessfraz]

Oh cool ok good to know...

I'll add something like that to the docs, do you think that is sufficient