Add a little info on how to talk to the TLS encrypted Docker Socket

Docker-DCO-1.1-Signed-off-by: Sven Dowideit <SvenDowideit@docker.com> (github: SvenDowideit)
This commit is contained in:
Sven Dowideit 2014-10-15 17:24:53 +10:00
parent dc243c812b
commit 1c68de798f
2 changed files with 11 additions and 1 deletions

View file

@ -178,3 +178,10 @@ location using the environment variable `DOCKER_CERT_PATH`.
$ export DOCKER_CERT_PATH=${HOME}/.docker/zone1/
$ sudo docker --tlsverify ps
### Connecting to the Secure Docker port using `curl`
To use `curl` to make test API requests, you need to use three extra command line
flags:
$ curl --insecure --cert ~/.docker/cert.pem --key ~/.docker/key.pem https://boot2docker:2376/images/json`

View file

@ -4,9 +4,12 @@ page_keywords: API, Docker, rcli, REST, documentation
# Docker Remote API
- The Remote API is replacing `rcli`.
- By default the Docker daemon listens on `unix:///var/run/docker.sock`
and the client must have `root` access to interact with the daemon.
- If the Docker daemon is set to use an encrypted TCP socket (`--tls`,
or `--tlsverify`) as with Boot2Docker 1.3.0, then you need to add extra
parameters to `curl` when making test API requests:
`curl --insecure --cert ~/.docker/cert.pem --key ~/.docker/key.pem https://boot2docker:2376/images/json`
- If a group named `docker` exists on your system, docker will apply
ownership of the socket to the group.
- The API tends to be REST, but for some complex commands, like attach