Certificate: x509: certificate signed by unknown authority

Rancher
1

Hi, We have a VM with RancherOS and rancher is running as a docker container in it. Now when I try to upgrade by pulling a new docker image I am getting following error.

docker pull busybox
Using default tag: latest
latest: Pulling from library/busybox
430378704d12: Pulling fs layerdocker: error pulling image configuration: Get https://production.cloudflare.docker.com/registry-v2/docker/registry/v2/blobs/sha256/63/63b790fccc9078ab8bb913d94a5d869e19fca9b77712b315da3fa45bb8f14636/data?verify=1733244432-7njzBQVEgWVHWMTh8YlOf6wRa1c%3D: x509: certificate signed by unknown authority.
See ‘docker run --help’.

The error repeats for any kind of image be it alpine or rancher:v2.9.x. Can anyone let me know how to resolve the issue?

Regards,
Arun

2

Hi Arun,

Not sure that this is a rancher issue. I would check your dns and network settings on your vm. It sounds like your host or firewall has blocked external registries.

I was able to pull v2.9.3 rancher image from docker hub just now.

% nerdctl images
REPOSITORY         TAG       IMAGE ID        CREATED          PLATFORM       SIZE      BLOB SIZE
rancher/rancher    v2.9.3    f35a252455aa    3 minutes ago    linux/arm64    2.37GB    852.3MB