-
Notifications
You must be signed in to change notification settings - Fork 94
Mac OS X
By default Docker runs with TLS enabled. It auto-generates certificates and copies them to ~/.docker/machine/certs. To allow Docker UI to connect to Docker Remote API, first you need to install and allow Chrome to use those credentials.
-
First, make Chrome trust in the auto-generated CA. Execute this command to add the new CA to your Certificate Trust Settings in your Keychain:
security add-trusted-cert -k ~/Library/Keychains/login.keychain ~/.docker/machine/certs/ca.pem
-
Also, you need to add the auto-generated certificate to your Keychain:
security import ~/.docker/machine/certs/key.pem -k ~/Library/Keychains/login.keychain
security import ~/.docker/machine/certs/cert.pem -k ~/Library/Keychains/login.keychain
-
Figure out the assigned ip and port by executing
docker-machine env default
. Open your browser and verify Chrome can connect to theDOCKER_HOST
, example: https://192.168.99.100:2376/_ping (this will ask for your certificate the first time, and you may need to restart chrome)
By default Boot2Docker runs Docker with TLS enabled. It auto-generates certificates and copies them to ~/.boot2docker/certs. To allow Docker UI to connect to Docker Remote API, first we need to install and allow Chrome to use those credentials.
-
First, to make Chrome trust in the auto-generated CA. Execute this command to add the new CA to your Certificate Trust Settings in your Keychain:
security add-trusted-cert -k ~/Library/Keychains/login.keychain ~/.boot2docker/certs/boot2docker-vm/ca.pem
-
Also, you need to add the auto-generated certificate to your Keychain:
security import ~/.boot2docker/certs/boot2docker-vm/key.pem -k ~/Library/Keychains/login.keychain
security import ~/.boot2docker/certs/boot2docker-vm/cert.pem -k ~/Library/Keychains/login.keychain
-
Figure out the boot2docker ip using boot2docker ip Open your browser and verify you can connect to https://192.168.59.103:2376/_ping (this will ask for your certificate the first time) Try to reconnect!