<p>I have installed k8s 1.24 version and containerd (containerd://1.5.9) is the CR for my setup (ubuntu 20.04).</p>
<p>I have also installed docker on my VM and have added my private repository under /etc/docker/daemon.json with the following changes:</p>
<pre><code>{   &quot;insecure-registries&quot; : [&quot;myPvtRepo.com:5028&quot;] }
</code></pre>
<p>When I am running <code>docker pull myPvtRepo:123/image</code> after login to my pvt repo by using <code>docker login myPvtRepo:123</code> command, I am able to pull the images while running the same command with <code>crictl pull myPvtRepo:123/image</code>, I am facing:</p>
<blockquote>
<p>E0819 06:49:01.200489  162610 remote_image.go:218] &quot;PullImage from
image service failed&quot; err=&quot;rpc error: code = Unknown desc = failed to
pull and unpack image &quot;myPvtRepo.com:5028/centos:latest&quot;: failed to
resolve reference &quot;myPvtRepo.com:5028/centos:latest&quot;: failed to do
request: Head <a href="https://myPvtRepo.com::5028/v2/centos/manifests/latest" rel="nofollow noreferrer">https://myPvtRepo.com::5028/v2/centos/manifests/latest</a>:
x509: certificate signed by unknown authority&quot;
image=&quot;myPvtRepo.com::5028/centos:latest&quot; FATA[0000] pulling image:
rpc error: code = Unknown desc = failed to pull and unpack image
&quot;myPvtRepo.com::5028/centos:latest&quot;: failed to resolve reference
&quot;myPvtRepo.com:5028/centos:latest&quot;: failed to do request: Head
<a href="https://myPvtRepo.com::5028/v2/centos/manifests/latest" rel="nofollow noreferrer">https://myPvtRepo.com::5028/v2/centos/manifests/latest</a>: x509:
certificate signed by unknown authority</p>
</blockquote>
<p>FYI, I have modified /etc/containerd/config.toml with below content.</p>
<pre><code>version = 2

[plugin.&quot;io.containerd.grpc.v1.cri&quot;.registry.configs.&quot;myPvtRepo.com:5028&quot;.tls]
    insecure_skip_verify = true

[plugins.&quot;io.containerd.grpc.v1.cri&quot;.registry.mirrors]

[plugins.&quot;io.containerd.grpc.v1.cri&quot;.registry.mirrors.&quot;docker.io&quot;]
     endpoint = [&quot;https://myPvtRepo.com:5028&quot;, &quot;https://myPvtRepo.com:5038&quot;, &quot;https://myPvtRepo.com:5037&quot;,
 &quot;https://myPvtRepo.com:5039&quot;]

[plugins.&quot;io.containerd.grpc.v1.cri&quot;.registry.mirrors.&quot;IP:5000&quot;]
     endpoint = [&quot;http://IP:5000&quot;]

[plugins.&quot;io.containerd.grpc.v1.cri&quot;.registry.mirrors.&quot;IP:5000&quot;]
     endpoint = [&quot;http://IP:5000&quot;]
</code></pre>
<p>I have also modified containerd's endpoint to point to containerd's sock.</p>
<p>Can you please help me out to understand and fix that even after setting <code>insecure_skip_verify = true</code> for my pvt repository and restarting the containerd service why I am getting this issue.</p>

<p>I got a solution:</p>
<pre><code>cd /usr/local/share/ca-certificates/
curl -L --remote-name http://your-artifacts.com/xyz-bundle.crt
/usr/sbin/update-ca-certificates
</code></pre>
<p>This one work for me.</p>
<p>Also make sure to update your endpoints under /etc/crictl.yaml</p>
<pre><code>runtime-endpoint: unix:///run/containerd/containerd.sock 
image-endpoint: &quot;&quot; 
timeout: 0 
debug: false 
pull-image-on-create: false 
disable-pull-on-run: false
</code></pre>
