Comment 3 for bug 1794941

From Cantemir:

"I can’t share the testbed right now because it’s no longer in the broken state.
However, I did try to repro this a few times today and think I’ve found the issue:

No issue seen with these steps (as per our official procedure):
# yum -y install ansible-2.4.2.0 ntp yum-utils device-mapper-persistent-data lvm2
# yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo
# yum install -y docker-ce
# systemctl start docker
# docker login hub.juniper.net --username <user> --password <pass>
# docker pull hub.juniper.net/contrail/contrail-command-deployer:5.0.1-0.214
(create /root/command_servers.yml)
# docker run -t --net host -v /root/command_servers.yml:/command_servers.yml -d --privileged --name contrail_command_deployer hub.juniper.net/contrail/contrail-command-deployer:5.0.1-0.214

Issue seen with these when running the container:
# yum -y update
# yum -y install ansible-2.4.2.0 ntp yum-utils device-mapper-persistent-data lvm2
# yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo
# yum install -y docker-ce
# systemctl start docker
# docker login hub.juniper.net --username <user> --password <pass>
# docker pull hub.juniper.net/contrail/contrail-command-deployer:5.0.1-0.214
(create /root/command_servers.yml)
# docker run -t --net host -v /root/command_servers.yml:/command_servers.yml -d --privileged --name contrail_command_deployer hub.juniper.net/contrail/contrail-command-deployer:5.0.1-0.214

I think I’m the only one that saw this because I always do a ‘yum -y update’ before installing anything on CentOS (trying to avoid obsolete packages and missing dependencies).

If you do a yum update at the very beginning you will likely see the same certificate issue. If you don’t you won’t.
Our install guide just asks to use CentOS7.5 but doesn’t warn against doing an update before the Command build… "