Discuss Docker DCA Exam Topic 5 Question 99

Is this a way to configure the Docker engine to use a registry without a trusted TLS certificate?

Solution: Set IGNORE_TLS in the 'daemon.json' configuration file.

AYes

BNo

Suggested Answer: B

= This is not a way to configure the Docker engine to use a registry without a trusted TLS certificate. There is no such option as IGNORE_TLS in the daemon.json configuration file.The daemon.json file is used to configure various aspects of the Docker engine, such as logging, storage, networking, and security1.To use a registry without a trusted TLS certificate, you need to either add the certificate to the trusted root certificates of the system, or configure the Docker engine to allow insecure registries2.To add the certificate to the trusted root certificates, you need to copy the certificate file to the /etc/docker/certs.d/<registry-hostname>/ directory on every Docker host2.To configure the Docker engine to allow insecure registries, you need to add the registry hostname or IP address to the ''insecure-registries'' array in the daemon.json file3. For example:

{ ''insecure-registries'' : [''myregistry.example.com:5000''] }

Note that using insecure registries is not recommended, as it exposes you to potential man-in-the-middle attacks and data corruption3.You should always use a registry with a trusted TLS certificate, or use Docker Content Trust to sign and verify your images4.Reference:

Daemon configuration file | Docker Docs

Verify repository client with certificates | Docker Docs

Test an insecure registry | Docker Docs

Content trust in Docker | Docker Docs

Get Premium DCA Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

33 comments · newest first

Deane 10 months ago

I had no idea you could do that!

Annice 11 months ago

I disagree, using TLS is important for security.

Gerald 11 months ago

Yup, just edit the 'daemon.json' file!

Nobuko 11 months ago

Wait, is that really safe though?

Maynard 11 months ago

That's correct, IGNORE_TLS is the way to go!

Oretha 12 months ago

I remember discussing this in class, and I think the answer is "Yes" because we talked about using insecure registries without trusted certificates.

Ollie 12 months ago

I'm pretty certain that you can bypass TLS checks for registries, but I don't know if it's done with IGNORE_TLS or another setting.

Erick 12 months ago

I feel like I've seen a question like this before, and I think the answer was to modify the daemon.json file, but I can't recall the exact details.

Annette 1 year ago

I think I remember something about configuring Docker with insecure registries, but I'm not entirely sure if it's specifically about the IGNORE_TLS setting.

Hershel 1 year ago

I'm a bit confused. Doesn't disabling TLS checks open up security risks? I'll need to double-check the documentation on this.

Marilynn 1 year ago

Ah, I remember learning about this in class. Setting IGNORE_TLS is the solution to configure Docker to use a registry without a trusted certificate.

Lashaunda 1 year ago

Wait, I'm not sure about this one. Disabling TLS checks doesn't sound like a good idea. I'll have to think this through more carefully.

Niesha 1 year ago

Hmm, this seems straightforward. I think setting IGNORE_TLS in the 'daemon.json' file is the way to go.

Han 1 year ago

Okay, I got this. The question is asking if setting IGNORE_TLS is the way to configure Docker to use a registry without a trusted certificate, and the answer is yes.

Theron 2 years ago

I prefer to keep my TLS certificates in order, thank you very much. Wouldn't want any security breaches on my watch!

Tyra 2 years ago

↳ replying to Theron

I prefer to keep my TLS certificates in order, thank you very much. Wouldn't want any security breaches on my watch!

Francesco 2 years ago

↳ replying to Theron

B) No

Nickie 2 years ago

↳ replying to Theron

A) Yes

Lashunda 2 years ago

Wait, so we're just ignoring security best practices now? Sounds like a recipe for disaster to me.

Eleonore 2 years ago

Yep, that's the way to do it. No need for fancy certificates when you're just playing around with Docker, amirite?

Julian 2 years ago

↳ replying to Eleonore

I agree, it's a simple solution for development environments.

Emmanuel 2 years ago

↳ replying to Eleonore

A) Yes

Tamar 2 years ago

↳ replying to Eleonore

Exactly, no need for all that extra security when you're just testing things out.

Oretha 2 years ago

↳ replying to Eleonore

A) Yes

Vilma 2 years ago

Setting 'IGNORE_TLS' is the perfect solution for those of us who just can't be bothered with all that encryption nonsense. Ain't nobody got time for that!

Eleonora 2 years ago

Haha, this is like the IT version of 'I'm not a cat!' Just ignore the security, what could go wrong?

Maynard 2 years ago

Definitely the way to go! Who needs those pesky TLS certificates anyway? I'm all about that 'IGNORE_TLS' life!

Bethanie 2 years ago

↳ replying to Maynard

A) Definitely the way to go! Who needs those pesky TLS certificates anyway? I'm all about that 'IGNORE_TLS' life!

Tegan 2 years ago

↳ replying to Maynard

B) No

Kasandra 2 years ago

↳ replying to Maynard

A) Yes

Denna 2 years ago

That makes sense. It's a way to bypass the TLS certificate check.

Salina 2 years ago

Yes, we can set IGNORE_TLS in the 'daemon.json' configuration file.

Denna 2 years ago

Do you think we can configure Docker engine to use a registry without a trusted TLS certificate?

Docker DCA Exam - Topic 5 Question 99 Discussion