# Modify these options if you want to change the way the docker daemon runs
OPTIONS='--selinux-enabled --log-driver=journald --signature-verification=false'
if [ -z "${DOCKER_CERT_PATH}" ]; then
DOCKER_CERT_PATH=/etc/docker
fi
# If you want to add your own registry to be used for docker search and docker
# pull use the ADD_REGISTRY option to list a set of registries, each prepended
# with --add-registry flag. The first registry added will be the first registry
# searched.
#ADD_REGISTRY='--add-registry registry.access.redhat.com'
# If you want to block registries from being used, uncomment the BLOCK_REGISTRY
# option and give it a set of registries, each prepended with --block-registry
# flag. For example adding docker.io will stop users from downloading images
# from docker.io
# BLOCK_REGISTRY='--block-registry'
# If you have a registry secured with https but do not have proper certs
# distributed, you can tell docker to not look for full authorization by
# adding the registry to the INSECURE_REGISTRY line and uncommenting it.
# INSECURE_REGISTRY='--insecure-registry'
# On an SELinux system, if you remove the --selinux-enabled option, you
# also need to turn on the docker_transition_unconfined boolean.
# setsebool -P docker_transition_unconfined 1
# Location used for temporary files, such as those created by
# docker load and build operations. Default is /var/lib/docker/tmp
# Can be overriden by setting the following environment variable.
# DOCKER_TMPDIR=/var/tmp
# Controls the /etc/cron.daily/docker-logrotate cron job status.
# To disable, uncomment the line below.
# LOGROTATE=false
#
# docker-latest daemon can be used by starting the docker-latest unitfile.
# To use docker-latest client, uncomment below lines
#DOCKERBINARY=/usr/bin/docker-latest
#DOCKERDBINARY=/usr/bin/dockerd-latest
#DOCKER_CONTAINERD_BINARY=/usr/bin/docker-containerd-latest
#DOCKER_CONTAINERD_SHIM_BINARY=/usr/bin/docker-containerd-shim-latest
After starting the docker service upgrade fails with errors like:
2017-06-20 18:03:29,330 DEBUG: Trying to pull repository 192.168. 0.1:8787/ tripleoupstream /centos- binary- memcached ...
2017-06-20 18:03:29,330 DEBUG: Get https:/ /192.168. 0.1:8787/ v1/_ping: http: server gave HTTP response to HTTPS client
It looks /etc/sysconfig/ docker is not configured:
[root@overcloud -controller- 0 heat-admin]# cat /etc/sysconfig/ docker docker
# /etc/sysconfig/
# Modify these options if you want to change the way the docker daemon runs '--selinux- enabled --log-driver= journald --signature- verification= false' CERT_PATH} " ]; then CERT_PATH= /etc/docker
OPTIONS=
if [ -z "${DOCKER_
DOCKER_
fi
# If you want to add your own registry to be used for docker search and docker '--add- registry registry. access. redhat. com'
# pull use the ADD_REGISTRY option to list a set of registries, each prepended
# with --add-registry flag. The first registry added will be the first registry
# searched.
#ADD_REGISTRY=
# If you want to block registries from being used, uncomment the BLOCK_REGISTRY '--block- registry'
# option and give it a set of registries, each prepended with --block-registry
# flag. For example adding docker.io will stop users from downloading images
# from docker.io
# BLOCK_REGISTRY=
# If you have a registry secured with https but do not have proper certs REGISTRY= '--insecure- registry'
# distributed, you can tell docker to not look for full authorization by
# adding the registry to the INSECURE_REGISTRY line and uncommenting it.
# INSECURE_
# On an SELinux system, if you remove the --selinux-enabled option, you transition_ unconfined boolean. transition_ unconfined 1
# also need to turn on the docker_
# setsebool -P docker_
# Location used for temporary files, such as those created by TMPDIR= /var/tmp
# docker load and build operations. Default is /var/lib/docker/tmp
# Can be overriden by setting the following environment variable.
# DOCKER_
# Controls the /etc/cron. daily/docker- logrotate cron job status.
# To disable, uncomment the line below.
# LOGROTATE=false
#
# docker-latest daemon can be used by starting the docker-latest unitfile. /usr/bin/ docker- latest /usr/bin/ dockerd- latest CONTAINERD_ BINARY= /usr/bin/ docker- containerd- latest CONTAINERD_ SHIM_BINARY= /usr/bin/ docker- containerd- shim-latest
# To use docker-latest client, uncomment below lines
#DOCKERBINARY=
#DOCKERDBINARY=
#DOCKER_
#DOCKER_