880ac7d
# /etc/sysconfig/docker
880ac7d
880ac7d
# Modify these options if you want to change the way the docker daemon runs
bb8e898
OPTIONS='--selinux-enabled --log-driver=journald'
880ac7d
DOCKER_CERT_PATH=/etc/docker
880ac7d
Antonio Murdaca 502ab7e
# If you want to add your own registry to be used for docker search and docker
Antonio Murdaca 502ab7e
# pull use the ADD_REGISTRY option to list a set of registries, each prepended
Antonio Murdaca 502ab7e
# with --add-registry flag. The first registry added will be the first registry
Antonio Murdaca 502ab7e
# searched.
Antonio Murdaca 502ab7e
# ADD_REGISTRY='--add-registry'
880ac7d
Antonio Murdaca 502ab7e
# If you want to block registries from being used, uncomment the BLOCK_REGISTRY
Antonio Murdaca 502ab7e
# option and give it a set of registries, each prepended with --block-registry
Antonio Murdaca 502ab7e
# flag. For example adding docker.io will stop users from downloading images
Antonio Murdaca 502ab7e
# from docker.io
Antonio Murdaca 502ab7e
# BLOCK_REGISTRY='--block-registry'
Antonio Murdaca 502ab7e
Antonio Murdaca 502ab7e
# If you have a registry secured with https but do not have proper certs
Antonio Murdaca 502ab7e
# distributed, you can tell docker to not look for full authorization by
Antonio Murdaca 502ab7e
# adding the registry to the INSECURE_REGISTRY line and uncommenting it.
Antonio Murdaca 502ab7e
# INSECURE_REGISTRY='--insecure-registry'
Antonio Murdaca 502ab7e
Antonio Murdaca 502ab7e
# On an SELinux system, if you remove the --selinux-enabled option, you
880ac7d
# also need to turn on the docker_transition_unconfined boolean.
Antonio Murdaca 502ab7e
# setsebool -P docker_transition_unconfined 1
880ac7d
880ac7d
# Location used for temporary files, such as those created by
880ac7d
# docker load and build operations. Default is /var/lib/docker/tmp
880ac7d
# Can be overriden by setting the following environment variable.
880ac7d
# DOCKER_TMPDIR=/var/tmp
880ac7d
880ac7d
# Controls the /etc/cron.daily/docker-logrotate cron job status.
880ac7d
# To disable, uncomment the line below.
880ac7d
# LOGROTATE=false
Antonio Murdaca 502ab7e
#
Antonio Murdaca 502ab7e
Antonio Murdaca 502ab7e
# docker-latest daemon can be used by starting the docker-latest unitfile.
Antonio Murdaca 502ab7e
# To use docker-latest client, uncomment below line
Antonio Murdaca 502ab7e
#DOCKERBINARY=/usr/bin/docker-latest