https://blog.imcaoxuan.cn/en/tags/docker/Recent content in Docker on CX's BlogHugoen-USimcaoxuan.cnFri, 23 Oct 2026 00:00:00 +0000https://blog.imcaoxuan.cn/en/posts/2026-10-23-docker-trust-custom-ca/Fri, 23 Oct 2026 00:00:00 +0000https://blog.imcaoxuan.cn/en/posts/2026-10-23-docker-trust-custom-ca/<p>When Docker uses HTTPS certificates issued by a private CA (such as step-ca), it is important to distinguish between <strong>Docker Engine pulling images</strong> and <strong>an application inside a container accessing HTTPS</strong>. Their certificate trust stores may not be the same.</p> <h2 id="i-docker-engine-trusting-a-private-ca">I. Docker Engine Trusting a Private CA</h2> <p>This applies to <code>docker login</code>, <code>docker pull</code>, and <code>docker push</code> when accessing a private image registry.</p> <h3 id="trust-only-the-specified-registry-recommended">Trust Only the Specified Registry (Recommended)</h3> <p>Assume the registry address is <code>registry.example.com:5000</code>:</p>