summaryrefslogtreecommitdiff
path: root/doc/container_registry
diff options
context:
space:
mode:
authorStan Hu <stanhu@gmail.com>2016-08-02 15:20:36 -0700
committerStan Hu <stanhu@gmail.com>2016-08-02 15:20:46 -0700
commit46385e4e5a88a4ac614f680094b9226778cee64a (patch)
tree0c81448f8486d0672ac87c0d78f013c48d46b706 /doc/container_registry
parentd707c91f706a26ff30b9d4862bb2c50b45a35fff (diff)
downloadgitlab-ce-46385e4e5a88a4ac614f680094b9226778cee64a.tar.gz
Add a note about setting up an insecure registry
[ci skip]
Diffstat (limited to 'doc/container_registry')
-rw-r--r--doc/container_registry/troubleshooting.md13
1 files changed, 9 insertions, 4 deletions
diff --git a/doc/container_registry/troubleshooting.md b/doc/container_registry/troubleshooting.md
index e21fc9a2c61..c24c80518dd 100644
--- a/doc/container_registry/troubleshooting.md
+++ b/doc/container_registry/troubleshooting.md
@@ -55,12 +55,17 @@ wrong. However, since all communication between Docker clients and servers
are done over HTTPS, it's a bit difficult to decrypt the traffic quickly even
if you know the private key. What can we do instead?
+One way would be to disable HTTPS by setting up an [insecure
+registry](https://docs.docker.com/registry/insecure/). This could introduce a
+security hole and is only recommended for local testing. If you have a
+production system and can't or don't want to do this, there is another way:
+use mitmproxy, which stands for Man-in-the-Middle Proxy.
+
## mitmproxy
-Enter [mitmproxy](https://mitmproxy.org/). This tool allows you to place a
-proxy between your client and server to inspect all traffic. One wrinkle is
-that your system needs to trust the mitmproxy SSL certificates for this
-to work.
+[mitmproxy](https://mitmproxy.org/) allows you to place a proxy between your
+client and server to inspect all traffic. One wrinkle is that your system
+needs to trust the mitmproxy SSL certificates for this to work.
The following installation instructions assume you are running Ubuntu: