local mirror for docker.io

k8s/files/containerd-config.toml

@@ -17,4 +17,9 @@ version = 2
     	[plugins."io.containerd.grpc.v1.cri".registry.configs]
     		[plugins."io.containerd.grpc.v1.cri".registry.configs."cr.lan".tls]
       			insecure_skip_verify = true
-
+    [plugins."io.containerd.grpc.v1.cri".registry.mirrors]
+      [plugins."io.containerd.grpc.v1.cri".registry.mirrors."docker.io"]
+        endpoint = [ "http://dr-mirror.lan", "https://registry-1.docker.io"]
+      [plugins."io.containerd.grpc.v1.cri".registry.configs]
+        		[plugins."io.containerd.grpc.v1.cri".registry.configs."docker.io".tls]
+          			insecure_skip_verify = true

k8s/files/etc_containers_registries.conf

@@ -18,7 +18,7 @@
 # of these registries, it should be added at the end of the list.
 #
 # # An array of host[:port] registries to try when pulling an unqualified image, in order.
-unqualified-search-registries = ["dr-mirror.lan"]
+unqualified-search-registries = ["docker.io"]
 #
 [[registry]]
 # # The "prefix" field is used to choose the relevant [[registry]] TOML table;
@@ -69,5 +69,12 @@ location = "cr.lan"
 # # 2. example-mirror-1.local/mirrors/foo/image:latest
 # # 3. internal-registry-for-example.net/bar/image:latest
 # # in order, and use the first one that exists.
-#[[registry.mirror]]
-#location = dr-mirror.lan
+#[[registry]]
+#prefix="quay.io"
+#location="qi-mirror.lan"
+#insecure = true
+
+[[registry]]
+prefix="docker.io"
+location="dr-mirror.lan"
+insecure = true