docker 报错x509: certificate signed by unknown authority

1.未开启证书验证的仓库

# vim /etc/docker/daemon.json
{ 
  "insecure-registries": ["registry.svc.xxx.cn"]
}
#systemctl restart docker

2.开启证书验证的仓库

从私有仓库拉取镜像时报错：

docker pull x509:certificate signed by unknown authority

解决方案：

1、登陆私有仓库服务器，进入/etc/docker/certs.d/目录下，找到ca.crt证书

2、将该证书拷贝一份到目标主机（即使用docker pull主机）上，并放在/etc/docker/certs.d/下

3、重启docker服务，systemctl restart docker

4、登陆该私有仓库docker login *******，输入用户名密码后，登陆成功便可以使用docker pull拉取镜像