wget -qO- 'https://pgp.mit.edu/pks/lookup?op=get&search=0xee6d536cf7dc86e2d7d56f59a178ac6c6238f52e' | sudo apt-key add --import
sudo apt-get update && sudo apt-get install apt-transport-https
sudo apt-get install -y linux-image-extra-virtual
sudo apt-get install -y linux-image-extra-$(uname -r)
sudo reboot
echo "deb https://packages.docker.com/1.9/apt/repo ubuntu-trusty main" | sudo tee /etc/apt/sources.list.d/docker.list
sudo apt-get update && sudo apt-get install docker-engine
sudo usermod -aG docker ubuntu
newgrp docker
docker info
Should see aufs
Containers: 0
Images: 0
Server Version: 1.9.1-cs3
Storage Driver: aufs
Root Dir: /var/lib/docker/aufs
Backing Filesystem: extfs
Dirs: 0
Dirperm1 Supported: false
Execution Driver: native-0.2
Logging Driver: json-file
Kernel Version: 3.13.0-74-generic
Operating System: Ubuntu 14.04.2 LTS
CPUs: 2
Total Memory: 3.859 GiB
Name: ip-172-31-57-92
ID: Z3QF:VEAS:KTU6:4EHI:TVU7:ZXGV:FWJT:6BAB:7Y6H:KE2S:TORB:VGQP
WARNING: No swap limit support
Installing DTR
sudo bash -c "$(sudo docker run docker/trusted-registry install)"
On clients, set up certs:
export DOMAIN_NAME=dtr.thedomain.com
openssl s_client -connect $DOMAIN_NAME:443 -showcerts </dev/null 2>/dev/null | openssl x509 -outform PEM | sudo tee /usr/local/share/ca-certificates/$DOMAIN_NAME.crt
sudo update-ca-certificates
sudo service docker restart
Play
docker login $DOMAIN_NAME
Username: devuser
Password:
Email:
WARNING: login credentials saved in /home/ubuntu/.docker/config.json
Login Succeeded
ubuntu@ip-172-31-57-92:~$ cat /home/ubuntu/.docker/config.json
{
"auths": {
"ec2-54-88-124-203.compute-1.amazonaws.com": {
"auth": "ZGV2dXNlcjpQYXNzd29yZDEyMw==",
"email": ""
}
}
}
With DOCKER_CONTENT_TRUST