containers-certs.d man page

containers-certs.d — Directory for storing custom container-registry TLS configurations


A custom TLS configuration for a container registry can be configured by creating a directory under /etc/containers/certs.d. The name of the directory must correspond to the host:port of the registry (e.g.,

Directory Structure

A certs directory can contain one or more files with the following extensions:

Note that the client certificate-key pair will be selected by the file name (e.g., client.{cert,key}). An examplary setup for a registry running at may look as follows:

/etc/containers/certs.d/    <- Certificate directory
└──    <- Hostname:port
   ├── client.cert          <- Client certificate
   ├── client.key           <- Client key
   └── ca.crt               <- Certificate authority that signed the registry certificate


Feb 2019, Originally compiled by Valentin Rothberg ⟨⟩