Docker error DON T BIND ON ANY IP ADDRESS WITHOUT setting --tlsverify IF YOU DON T KNOW WHAT YOU RE DOING

Question

I am trying to run docker on an ec2 instance but I end up with the following error:

[ec2-user@ip-172-31-45-55 .docker]$ ls

ca-key.pem  ca.pem  ca.srl  key.csr  openssl.cnf  secret.yaml

[ec2-user@ip-172-31-45-55 .docker]$ pwd

/home/ec2-user/.docker

[ec2-user@ip-172-31-45-55 .docker]$ sudo dockerd -D --tls --tlscert ~/.docker/ca.pem --tlskey ~/.docker/ca-key.pem -H tcp://172.17.8.101:2376

WARN[2019-07-24T21:02:05.584942967Z] [!] DON'T BIND ON ANY IP ADDRESS WITHOUT setting --tlsverify IF YOU DON'T KNOW WHAT YOU'RE DOING [!] 

Failed to load listeners: listen tcp 172.17.8.101:2376: bind: cannot assign requested address

Answer 1

Did you generate/create a certificate?? If not then you will have to first create a self-signed certificate and then add it to docker. Also, you can use any IP(it can be the host IP just change the last digit). Please find the below link for the steps to generate a certificate and setup tls security for docker. 

$ sudo mkdir -p /etc/docker/ssl
$ mkdir -p ~/.docker
$ openssl genrsa -out ~/.docker/serverkey.pem 2048
$ openssl req -new -x509 -days 365 \
  -key serverkey.pem \
  -sha256 \
  -out server.crt

Comments

with full quallified folders:

openssl req -new -x509 -days 365 -key ~/.docker/serverkey.pem -sha256 -out /etc/docker/ssl/server.crt

---

Hey @DaRolla! I hope you are doing good. Thank you for your contribution.

You could register at Edureka community and get credits for contributing. The contribution could be anything, asking a question, answering, commenting or even upvoting.

Thanks!