2019-05-05 11:24:38 +00:00
% containers-certs.d(5)
# NAME
containers-certs.d - Directory for storing custom container-registry TLS configurations
# DESCRIPTION
2020-04-07 13:37:17 +00:00
A custom TLS configuration for a container registry can be configured by creating a directory under `$HOME/.config/containers/certs.d` or `/etc/containers/certs.d` .
2019-05-05 11:24:38 +00:00
The name of the directory must correspond to the `host:port` of the registry (e.g., `my-registry.com:5000` ).
## Directory Structure
A certs directory can contain one or more files with the following extensions:
* `*.crt` files with this extensions will be interpreted as CA certificates
* `*.cert` files with this extensions will be interpreted as client certificates
* `*.key` files with this extensions will be interpreted as client keys
Note that the client certificate-key pair will be selected by the file name (e.g., `client.{cert,key}` ).
An examplary setup for a registry running at `my-registry.com:5000` may look as follows:
```
/etc/containers/certs.d/ < - Certificate directory
└── my-registry.com:5000 < - Hostname:port
├── client.cert < - Client certificate
├── client.key < - Client key
└── ca.crt < - Certificate authority that signed the registry certificate
```
# HISTORY
Feb 2019, Originally compiled by Valentin Rothberg < rothberg @ redhat . com >