Centos 7 Docker configuration secure remote API

Log view:

sudo journalctl-fu docker.service

Certificate Generation Reference:

https://docs.docker.com/engine/security/https/

Vi/lib/systemd/system/docker.service:

[Unit]
Description=docker Application Container Engine
Documentation=https://docs.docker.com
After=network.target Docker.socket
Requires=docker.socket

[Service]
type=notify
# The default is ' not ' systemd for cgroups because the delegate issues still
# Exis TS and SYSTEMD currently does not support the Cgroup feature set required
# for containers run by docker
#ExecStart = /usr/bin/docker Daemon--registry-mirror=http://3cda3ca9.m.daocloud.io-h fd://
#ExecStart =/usr/bin/docker Daemon--registry-mirror=http://3cda3ca9.m.daocloud.io--insecure-registry 42.62.101.83:5000-h fd://
# $OPTIONS $ Docker_storage_options
#ExecStart =/usr/bin/docker daemon--registry-mirror=http://3cda3ca9.m.daocloud.io-h FD :/h tcp://0.0.0.0:2375
Execstart=/usr/bin/docker daemon--tlsverify--tlscacert=/root/openssl/ca.pem--tlscert =/root/openssl/server-cert.pem--tlskey=/root/openssl/server-key.pem--registry-mirror=http:// 3cda3ca9.m.daocloud.io-h tcp://0.0.0.0:2376

Mountflags=slave
limitnofile=1048576
limitnproc=1048576
Limitcore=infinity
Timeoutstartsec=0
# Set delegate yes so, SYSTEMD does not reset the cgroups of Docker containers
Delegate=yes

[Install]
Wantedby=multi-user.target

To restart Docker by running the command:

Systemctl Daemon-reload

Service Docker restart

Centos 7 Docker configuration secure remote API