Option --insecure-registry does not work with pull & push (`no route to host`)

[Teo90]

Hi,

I'm trying to use nerdctl with a private harbor without TLS, while the global flag --insecure-registry does not really ignore the HTTP responses.

Here is what i didi:
pull
nerdctl --insecure-registry pull 192.168.88.150/devops/kaniko-project-executor:debug

push
nerdctl -n k8s.io --insecure-registry push 192.168.88.150/k8s/coredns:v1.8.0

[AkihiroSuda]

The no route to host error does not seem to be related to nerdctl.
Can you ping 192.168.88.150?

[Teo90]

Sure, because crictl succeeded in pulling harbor http protocol

[Teo90]

nerdctl added port 80 to pulling successfully

But push still fails！

[AkihiroSuda]

cc @ktock @fahedouch

[fahedouch]

I agree with @AkihiroSuda . It looks like a network issue. Did you tried crictl from same network as nerdctl ?

[fahedouch]

@Teo90 your registry firewall rules should authorize port 443.
check if your registry firewall is blocking connection on port 443