{"action":"created","issue":{"url":"https://api.github.com/repos/docker/machine/issues/1532","repository_url":"https://api.github.com/repos/docker/machine","labels_url":"https://api.github.com/repos/docker/machine/issues/1532/labels{/name}","comments_url":"https://api.github.com/repos/docker/machine/issues/1532/comments","events_url":"https://api.github.com/repos/docker/machine/issues/1532/events","html_url":"https://github.com/docker/machine/issues/1532","id":95315282,"number":1532,"title":"Cannot specify --tlsverify=false","user":{"login":"mikedougherty","id":1046019,"avatar_url":"https://avatars.githubusercontent.com/u/1046019?v=3","gravatar_id":"","url":"https://api.github.com/users/mikedougherty","html_url":"https://github.com/mikedougherty","followers_url":"https://api.github.com/users/mikedougherty/followers","following_url":"https://api.github.com/users/mikedougherty/following{/other_user}","gists_url":"https://api.github.com/users/mikedougherty/gists{/gist_id}","starred_url":"https://api.github.com/users/mikedougherty/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mikedougherty/subscriptions","organizations_url":"https://api.github.com/users/mikedougherty/orgs","repos_url":"https://api.github.com/users/mikedougherty/repos","events_url":"https://api.github.com/users/mikedougherty/events{/privacy}","received_events_url":"https://api.github.com/users/mikedougherty/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/docker/machine/labels/driver/none","name":"driver/none","color":"006b75"},{"url":"https://api.github.com/repos/docker/machine/labels/kind/enhancement","name":"kind/enhancement","color":"84b6eb"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":13,"created_at":"2015-07-15T23:59:56Z","updated_at":"2016-02-16T18:47:58Z","closed_at":null,"body":"I have some hosts that are swarmed together, and I'm trying to add the master to machine with `-d none`. Everything has worked as expected so far, but the last bit I'm stuck on is that there's no way to specify the equivalent of `--tlsverify=false` or `DOCKER_TLS_VERIFY=`. This is my current workaround:\r\n\r\n```bash\r\n$ eval $( docker-machine env --swarm aws-stage | sed 's/\"1\"//g' )\r\n```\r\n\r\nBeing able to specify this option during creation would be great; just having a field in the machine's config.json that I can manually edit is fine too.\r\n\r\n* * * \r\nrationale:\r\nThe server cert is generated by our infra team and is for a particular domain, but the hosts do not have DNS names assigned. So, I get the following outcome when TLS verification is enabled:\r\n```bash\r\n$ docker ps\r\nFATA[0000] An error occurred trying to connect: Get https://10.128.47.21:3376/v1.18/containers/json: x509: cannot validate certificate for 10.128.47.21 because it doesn't contain any IP SANs\r\n```\r\n"},"comment":{"url":"https://api.github.com/repos/docker/machine/issues/comments/184823033","html_url":"https://github.com/docker/machine/issues/1532#issuecomment-184823033","issue_url":"https://api.github.com/repos/docker/machine/issues/1532","id":184823033,"user":{"login":"bacongobbler","id":1360539,"avatar_url":"https://avatars.githubusercontent.com/u/1360539?v=3","gravatar_id":"","url":"https://api.github.com/users/bacongobbler","html_url":"https://github.com/bacongobbler","followers_url":"https://api.github.com/users/bacongobbler/followers","following_url":"https://api.github.com/users/bacongobbler/following{/other_user}","gists_url":"https://api.github.com/users/bacongobbler/gists{/gist_id}","starred_url":"https://api.github.com/users/bacongobbler/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bacongobbler/subscriptions","organizations_url":"https://api.github.com/users/bacongobbler/orgs","repos_url":"https://api.github.com/users/bacongobbler/repos","events_url":"https://api.github.com/users/bacongobbler/events{/privacy}","received_events_url":"https://api.github.com/users/bacongobbler/received_events","type":"User","site_admin":false},"created_at":"2016-02-16T18:47:58Z","updated_at":"2016-02-16T18:47:58Z","body":"Sorry! I missed that requirement in the OP. I was just looking for a way to shut off TLS altogether since I just want plain tcp connections from my laptop to my vbox machine. This wasn't configurable so I opted for the above.\r\n\r\nJudging by @nathanleclaire's comment it seems clear that this probably won't be something that can be configured through machine any time soon. You'll be better off with a DIY config management solution (as you've been doing, I'd assume) for the time being, IMO."}}