x509: certificate signed by unknown authority (k3s)

echo -n | openssl s_client -showcerts -connect registry-1.docker.io:443 2>/dev/null | \
sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > \
/usr/local/share/ca-certificates/docker.crt

• 使用以上命令，獲取網站證書。
• 然後拷貝至/etc/ssl/certs/目錄之下.

 

最近在搞k3s,pull 鏡像的時候失敗,利用以上操作可以解決此問題.