[MESOS-9449] Support HTTP when pull UCR image using docker registry v2 API

• Type: Improvement
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Component/s: agent, containerization
• Assignee: Unassigned
• Reporter: haoyuan ge
• Created: 03/Dec/18 14:46
• Updated: 03/Dec/18 15:16

Description

Many customers use Harbor as docker registries in their private cloud. And most of them use HTTP instead of HTTPS to expose registry API. However, currently SSL is automatically handled when fetching images/layers for Mesos container. And mesos agent will report error when the registry is using HTTP: 

Failed to launch container: Failed to perform 'curl': curl: (60) SSL certificate problem: unable to get local issuer certificate

 In the contrary, pulling docker images is OK when we set --insecure-registry=  for dockerd