title: How to skip TLS cert check for crictl (containerd CR) while pulling the images from private repository
body: <p>I have installed k8s 1.24 version and containerd (containerd://1.5.9) is the CR for my setup (ubuntu 20.04).</p>
  <p>I have also installed docker on my VM and have added my private repository under /etc/docker/daemon.json with the following changes:</p>
  <pre><code>{   &quot;insecure-registries&quot; : [&quot;myPvtRepo.com:5028&quot;] }
  </code></pre>
  <p>When I am running <code>docker pull myPvtRepo:123/image</code> after login to my pvt repo by using <code>docker login myPvtRepo:123</code> command, I am able to pull the images while running the same command with <code>crictl pull myPvtRepo:123/image</code>, I am facing:</p>
  <blockquote>
  <p>E0819 06:49:01.200489  162610 remote_image.go:218] &quot;PullImage from
  image service failed&quot; err=&quot;rpc error: code = Unknown desc = failed to
  pull and unpack image &quot;myPvtRepo.com:5028/centos:latest&quot;: failed to
  resolve reference &quot;myPvtRepo.com:5028/centos:latest&quot;: failed to do
  request: Head <a href="https://myPvtRepo.com::5028/v2/centos/manifests/latest" rel="nofollow noreferrer">https://myPvtRepo.com::5028/v2/centos/manifests/latest</a>:
  x509: certificate signed by unknown authority&quot;
  image=&quot;myPvtRepo.com::5028/centos:latest&quot; FATA[0000] pulling image:
  rpc error: code = Unknown desc = failed to pull and unpack image
  &quot;myPvtRepo.com::5028/centos:latest&quot;: failed to resolve reference
  &quot;myPvtRepo.com:5028/centos:latest&quot;: failed to do request: Head
  <a href="https://myPvtRepo.com::5028/v2/centos/manifests/latest" rel="nofollow noreferrer">https://myPvtRepo.com::5028/v2/centos/manifests/latest</a>: x509:
  certificate signed by unknown authority</p>
  </blockquote>
  <p>FYI, I have modified /etc/containerd/config.toml with below content.</p>
  <pre><code>version = 2
  
  [plugin.&quot;io.containerd.grpc.v1.cri&quot;.registry.configs.&quot;myPvtRepo.com:5028&quot;.tls]
      insecure_skip_verify = true
  
  [plugins.&quot;io.containerd.grpc.v1.cri&quot;.registry.mirrors]
  
  [plugins.&quot;io.containerd.grpc.v1.cri&quot;.registry.mirrors.&quot;docker.io&quot;]
       endpoint = [&quot;https://myPvtRepo.com:5028&quot;, &quot;https://myPvtRepo.com:5038&quot;, &quot;https://myPvtRepo.com:5037&quot;,
   &quot;https://myPvtRepo.com:5039&quot;]
  
  [plugins.&quot;io.containerd.grpc.v1.cri&quot;.registry.mirrors.&quot;IP:5000&quot;]
       endpoint = [&quot;http://IP:5000&quot;]
  
  [plugins.&quot;io.containerd.grpc.v1.cri&quot;.registry.mirrors.&quot;IP:5000&quot;]
       endpoint = [&quot;http://IP:5000&quot;]
  </code></pre>
  <p>I have also modified containerd's endpoint to point to containerd's sock.</p>
  <p>Can you please help me out to understand and fix that even after setting <code>insecure_skip_verify = true</code> for my pvt repository and restarting the containerd service why I am getting this issue.</p>