Issue with insecure-registries Configuration in OrbStack

[joeljhou]

English

I am using OrbStack and want to configure insecure-registries to skip TLS certificate verification for my private Harbor registry.

My approach:

I have added the following configuration in both ~/.orbstack/config/docker.json and /etc/docker/daemon.json:

{
  "registry-mirrors": [
    "https://registry.docker-cn.com"
  ],
  "insecure-registries": [
    "proxy.harbor.orb.local"
  ]
}

After restarting OrbStack, I run docker info | grep -i insecure to check the config:

$ docker info | grep -i insecure
WARNING: DOCKER_INSECURE_NO_IPTABLES_RAW is set
 Insecure Registries:

Questions:

• Is there a different config file or method in OrbStack to enable insecure registries?
• How can I properly configure OrbStack to recognize and trust my private Harbor registry without TLS verification?
• Any recommended steps or workarounds?

Thanks in advance!

---

中文

我在使用 OrbStack 过程中，想配置 insecure-registries 跳过私有 Harbor 仓库的 TLS 证书校验。

具体做法：

在 ~/.orbstack/config/docker.json 和 /etc/docker/daemon.json 两个位置都添加了如下配置：

{
  "registry-mirrors": [
    "https://registry.docker-cn.com"
  ],
  "insecure-registries": [
    "proxy.harbor.orb.local"
  ]
}

重启 OrbStack 后，用 docker info | grep -i insecure 查看配置：

$ docker info | grep -i insecure
WARNING: DOCKER_INSECURE_NO_IPTABLES_RAW is set
 Insecure Registries:

请教：

• OrbStack 是否有其他配置文件或方式来生效 insecure-registries？
• 如何正确配置 OrbStack 使其信任私有 Harbor 仓库，跳过 TLS 校验？
• 有没有推荐的步骤或替代方案？

谢谢！