Docker Server Configuration

External

• https://docs.docker.com/engine/reference/commandline/dockerd/

Internal

• Docker

Docker Server Startup Sequence

RedHat/Centos systemd

systemd Docker Unit File: /usr/lib/systemd/system/docker.service

Server Configuration Options

--insecure-registry

This option instructs the Docker daemon to trust any Docker registry on the indicated subnet, rather than requiring a certificate. The default value is []. For OpenShift-integrated Docker, the subnet where Docker expects this registry is the OpenShift SDN services subnet.

... --insecure-registry <list> ...

--insecure-registry 172.30.0.0/16

The same option can be configured in daemon.json with insecure-registries.

--net

Also see:

Docker Networking Concepts

--add-registry

When asked to search for or pull images, the docker runtime uses the Docker registry (docker.io) to complete those activities. Additional registries can be added to the list with --add-registry.

Also see

Docker Image Registry

--block-registry

To prevent users from pulling images from the Docker registry, after presumably other registry has been configured with --add-registry, use

--block-registry docker.io

daemon.json

daemon.json

Docker Container Configuration

Docker Container Configuration