#!/usr/bin/env bash
# 文件: containerd-with-auth.sh

export insecure_hub_addr=hub.gitee.local
export insecure_hub_user=gitee
export insecure_hub_pass=gitee

mkdir -p /etc/containerd/certs.d/${insecure_hub_addr}

cat >/etc/containerd/certs.d/${insecure_hub_addr}/hosts.toml <<EOF
server = "http://${insecure_hub_addr}"

[host."http://${insecure_hub_addr}"]
  capabilities = ["pull", "resolve", "push"]

[host."http://${insecure_hub_addr}".header]
  authorization = "Basic $(echo -n ${insecure_hub_user}:${insecure_hub_pass} | base64)"
EOF

systemctl restart containerd