|
|
b28b51 |
# /etc/sysconfig/docker
|
|
|
c4784f |
|
|
|
c4784f |
# Modify these options if you want to change the way the docker daemon runs
|
|
|
3ae847 |
OPTIONS='--selinux-enabled --log-driver=journald'
|
|
|
b215bf |
DOCKER_CERT_PATH=/etc/docker
|
|
|
b215bf |
|
|
|
f0cb50 |
# If you want to add your own registry to be used for docker search and docker
|
|
|
f0cb50 |
# pull use the ADD_REGISTRY option to list a set of registries, each prepended
|
|
|
f0cb50 |
# with --add-registry flag. The first registry added will be the first registry
|
|
|
f0cb50 |
# searched.
|
|
|
30b6aa |
#ADD_REGISTRY='--add-registry registry.access.redhat.com'
|
|
|
b215bf |
|
|
|
f0cb50 |
# If you want to block registries from being used, uncomment the BLOCK_REGISTRY
|
|
|
f0cb50 |
# option and give it a set of registries, each prepended with --block-registry
|
|
|
f0cb50 |
# flag. For example adding docker.io will stop users from downloading images
|
|
|
f0cb50 |
# from docker.io
|
|
|
f0cb50 |
# BLOCK_REGISTRY='--block-registry'
|
|
|
b215bf |
|
|
|
f0cb50 |
# If you have a registry secured with https but do not have proper certs
|
|
|
f0cb50 |
# distributed, you can tell docker to not look for full authorization by
|
|
|
f0cb50 |
# adding the registry to the INSECURE_REGISTRY line and uncommenting it.
|
|
|
b215bf |
# INSECURE_REGISTRY='--insecure-registry'
|
|
|
b215bf |
|
|
|
b215bf |
# On an SELinux system, if you remove the --selinux-enabled option, you
|
|
|
b215bf |
# also need to turn on the docker_transition_unconfined boolean.
|
|
|
b215bf |
# setsebool -P docker_transition_unconfined 1
|
|
|
a2b5ed |
|
|
|
a2b5ed |
# Location used for temporary files, such as those created by
|
|
|
a2b5ed |
# docker load and build operations. Default is /var/lib/docker/tmp
|
|
|
a2b5ed |
# Can be overriden by setting the following environment variable.
|
|
|
a2b5ed |
# DOCKER_TMPDIR=/var/tmp
|
|
|
b215bf |
|
|
|
b215bf |
# Controls the /etc/cron.daily/docker-logrotate cron job status.
|
|
|
b215bf |
# To disable, uncomment the line below.
|
|
|
b215bf |
# LOGROTATE=false
|
|
|
78f495 |
#
|
|
|
78f495 |
|
|
|
78f495 |
# docker-latest daemon can be used by starting the docker-latest unitfile.
|
|
|
78f495 |
# To use docker-latest client, uncomment below line
|
|
|
78f495 |
#DOCKERBINARY=/usr/bin/docker-latest
|