how to enable local insecure docker registry on talos

[yingwana3]

Hi

We want to pull images (which are not open source) from our local insecure docker registry (10.67.x.x/5000) on talos but don't know how.

It seems controlplane.yaml has something with registry configuration as following

registries: {}
# # Specifies mirror configuration for each registry host namespace.
# mirrors:
# ghcr.io:
# # List of endpoints (URLs) for registry mirrors to use.
# endpoints:
# - https://registry.insecure
# - https://ghcr.io/v2/

# # Specifies TLS & auth configuration for HTTPS image registries.
# config:
#     registry.insecure:
#         # The TLS configuration for the registry.
#         tls:
#             insecureSkipVerify: true # Skip TLS server certificate verification (not recommended).
#
#             # # Enable mutual TLS authentication with the registry.
#             # clientIdentity:
#             #     crt: LS0tIEVYQU1QTEUgQ0VSVElGSUNBVEUgLS0t
#             #     key: LS0tIEVYQU1QTEUgS0VZIC0tLQ==
#
#         # # The auth configuration for this registry.
#         # auth:
#         #     username: username # Optional registry authentication.
#         #     password: password # Optional registry authentication.

But we don't know how to modify them to adapt to our local docker registry

[smira]

Please see examples in the docs:

• https://www.talos.dev/v1.4/talos-guides/configuration/pull-through-cache/
• https://www.talos.dev/v1.4/advanced/air-gapped/#closing-notes
• reference: https://www.talos.dev/v1.4/reference/configuration/#registriesconfig

[yingwana3]

Hi
I have followed this guide https://www.talos.dev/v1.4/advanced/air-gapped/#closing-notes to first setup internal registry.
curl http://127.0.0.1:6000/v2/_catalog
{"repositories":["coredns/coredns","etcd-development/etcd","flexran_vdu","kube-apiserver","kube-controller-manager","kube-proxy","kube-scheduler","pause","siderolabs/flannel","siderolabs/install-cni","siderolabs/installer","siderolabs/kubelet"]}
flexran_vdu is the needed image i push to the registry.

Our talos install config is like below:

I modify registry in controlplane.yaml like below：

Then I create a pod on talos to pull the flexran_vdu image but failed with folloing logs:

[yingwana3]

we install talos on baremetal platform with *.iso.

[yingwana3]

we have successfully configure the https registry, so please ignore the above question.

[smira]

Talos did the job above - the container request was redirected, but your registry is down.