Free Preparation Discussions
MENU
Docker DCA Exam - Topic 5 Question 98 Discussion
Topic #: 5
In the context of a swarm mode cluster, does this describe a node?
Solution: an instance of the Docker engine participating in the swarm
To trust a self-signed certificate from a Docker Trusted Registry (DTR), you need to place the certificate in the appropriate location on all cluster nodes and restart the Docker daemon. There are two possible locations for the certificate, depending on your OS and Docker version1:
* /etc/docker/certs.d/dtr.example.com/ca.crt: This is the preferred location for Linux systems and Docker versions 1.13 and higher. This directory is scanned by Docker for certificates and keys for each registry domain2.
* Your OS certificate path: This is the fallback location for other OSes and Docker versions. You need to find the certificate store for your OS and copy the certificate there. You also need to trust the certificate system-wide, which may require additional steps depending on your OS3.
The other options are not correct because:
* Passing '-trust-certificate ca.crt to the Docker client is not a valid option. There is no such flag for the Docker client4.
* Placing the certificate in '/etc/docker/dtr/dtr.example.com.crt' is not a valid location. The certificate should be in the /etc/docker/certs.d directory, not the /etc/docker/dtr directory1.
* Passing -- insecure-registry to the Docker client is not a recommended option. This flag disables the TLS verification for the registry, which makes the communication insecure and vulnerable to attacks.
* Use self-signed certificates | Docker Docs
* Test an insecure registry | Docker Docs
* Add TLS certificates as a trusted root authority to the host OS | Docker Docs
* docker | Docker Docs
* [Deploy a registry server | Docker Docs]
Jamal
4 months agoShenika
5 months agoRolande
5 months agoIvette
5 months agoCory
5 months agoEstrella
6 months agoJolanda
6 months agoCristen
6 months agoCasandra
6 months agoTracey
6 months agoAdolph
6 months agoHoward
6 months agoTerry
6 months agoJacob
11 months agoNohemi
10 months agoNicolette
10 months agoMignon
11 months agoVilma
11 months agoDanica
10 months agoBenedict
10 months agoLeah
11 months agoHoa
12 months agoGracia
10 months agoCarma
10 months agoTracie
10 months agoRolande
11 months agoShanice
12 months agoJill
12 months agoVivienne
1 year agoLynsey
1 year agoVivienne
1 year ago