Sebastiaan van Stijn fa42933fd5 daemon/pkg/registry: require all resolved addresses to be insecure ...

Only consider a registry insecure through CIDR matching when all of its
resolved IP addresses match a configured insecure subnet.

This prevents a registry that resolves to both loopback and non-loopback
addresses from falling back to insecure requests.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
(cherry picked from commit db9f143dae)
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>

2026-09-30 21:11:51 +02:00

..

oci

daemon/pkg/oci/caps: clean up NormalizeLegacyCapabilities

2026-08-29 12:58:54 +02:00

opts

daemon/pkg/opts: fix recursive NRI JSON decoding on go1.27 (JSON v2)

2026-08-02 15:41:08 +02:00

plugin

daemon/plugins: Confine plugin mount paths to scoped roots

2026-08-26 22:55:46 +02:00

registry

daemon/pkg/registry: require all resolved addresses to be insecure

2026-09-30 21:11:51 +02:00