Skip to content
This repository has been archived by the owner on Feb 12, 2021. It is now read-only.

Clair: Update docker run and database sections #1180

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions quay-enterprise/clair.md
Original file line number Diff line number Diff line change
Expand Up @@ -132,9 +132,9 @@ clair:
options:
# A PostgreSQL Connection string pointing to the Clair Postgres database.
# Documentation on the format can be found at: http://www.postgresql.org/docs/9.4/static/libpq-connect.html
source: { POSTGRES_CONNECTION_STRING }
source: host={ DOCKER_HOST } port=5432 dbname={ DB_NAME } user={ CLAIR_USER } password={ PASSWORD } sslmode=disable statement_timeout=60000
cachesize: 16384
api:
api:
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think adding this indent is wrong

# The port at which Clair will report its health status. For example, if Clair is running at
# https://clair.mycompany.com, the health will be reported at
# http://clair.mycompany.com:6061/health.
Expand Down Expand Up @@ -225,7 +225,7 @@ Similar to the process for setting up Docker to [trust your self-signed certific
2. Make sure the `ca.crt` file is mounted inside the Clair container under `/usr/local/share/ca-certificates/` as in the example below:

```
docker run --restart=always -p 6060:6060 -p 6061:6061 -v /path/to/clair/config/directory:/config -v /path/to/quay/cert/ca.crt:/usr/local/share/ca-certificates/ca.crt quay.io/coreos/clair-jwt:v2.0.0
docker run --restart=always -p 6060:6060 -p 6061:6061 -v /path/to/clair/config/directory:/config -v /path/to/quay/cert/ca.crt:/usr/local/share/ca-certificates/ca.crt -d quay.io/coreos/clair-jwt:v2.0.0
```

Now Clair will be able to trust the source of your TLS certificates and use them to secure communication between Clair and Quay.
Expand Down