Docker：获取https://registry-1.docker.io/v2/:x509：由未知权限签名的证书

Question

当我尝试拉码头图像时出现错误。 我们已经设置了代理，并且在我们的组织中我们有明确的代理，因此访问外部服务器我们离不开设置。

[root@DX2821 city]# docker pull hellow-world

使用默认标签：最新

来自守护程序的错误响应：

  

获取https://registry-1.docker.io/v2/：x509：签署的证书   未知的权威

Answer 1

I had exactly the same problem in my company.

We have also a proxy. For monitoring our https connection to avoid malwares, our proxy creates a certificate on the fly for the secured connection between a station and the proxy. Then another secured connection is done between the proxy and the website. The message indicates that the certificate produced by the proxy was signed by an unknown authority: the "fake authority" which generates the certificates.

For solving the problem, I had to install the root certificate of this "fake authority" in /usr/share/ca-certificates (for a linux station) and then:

> update-ca-certificates