You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
15 lines
1.0 KiB
Markdown
15 lines
1.0 KiB
Markdown
6 years ago
|
Watchtower is also capable of connecting to Docker endpoints which are protected by SSL/TLS. If you've used _docker-machine_ to provision your remote Docker host, you simply need to volume mount the certificates generated by _docker-machine_ into the watchtower container and optionally specify `--tlsverify` flag.
|
||
|
|
|
||
|
|
The _docker-machine_ certificates for a particular host can be located by executing the `docker-machine env` command for the desired host (note the values for the `DOCKER_HOST` and `DOCKER_CERT_PATH` environment variables that are returned from this command). The directory containing the certificates for the remote host needs to be mounted into the watchtower container at _/etc/ssl/docker_.
|
||
|
|
|
||
|
|
With the certificates mounted into the watchtower container you need to specify the `--tlsverify` flag to enable verification of the certificate:
|
||
|
|
|
||
|
|
```bash
|
||
|
|
docker run -d \
|
||
|
|
--name watchtower \
|
||
|
|
-e DOCKER_HOST=$DOCKER_HOST \
|
||
|
|
-e DOCKER_CERT_PATH=/etc/ssl/docker \
|
||
|
|
-v $DOCKER_CERT_PATH:/etc/ssl/docker \
|
||
|
|
containrrr/watchtower --tlsverify
|
||
|
|
```
|