Can't pull images with Docker cli install through homebrew

Docker Hub
1

Hello all,

I have been fighting with this for a few months, looking at documentation from multiple sources. I haven’t been able to pull a docker image from my company network what is behind a netskope proxy.

S-849821:dev-template 31034$ docker build .
DEPRECATED: The legacy builder is deprecated and will be removed in a future release.
            Install the buildx component to build images with BuildKit:
            https://docs.docker.com/go/buildx/

Sending build context to Docker daemon    235kB
Step 1/5 : FROM public.ecr.aws/docker/library/ubuntu:22.04
failed to resolve reference "public.ecr.aws/docker/library/ubuntu:22.04": failed to do request: Head "https://public.ecr.aws/v2/docker/library/ubuntu/manifests/22.04": tls: failed to verify certificate: x509: certificate signed by unknown authority

When downloaded with curl, the OS certs are properly used. (I can download with no problems and install with the download-frozen-image.sh script.). Is there a trick to getting docker cli to use the OS certs for pulling an image? I’m seeing the same issue for pulling images from docker hub.

I’m on macOS 26.4（25E24) with Docker version 29.6.2, build dfc4efb1e2.

Thank you!

2

When you use curl, you are doing it on macOS, but Docker is always running in a virtual machine, so whatever help sou make it work on the host, that might not be available in the VM.

Sicne I still never had this issue, because I never was in an environment where TLS interception was used, I can only share some idea until someone speaks from experience.

You can try if changing settings in the Docker Desktop settings » Resources » Proxies helps.

But there is a documentation that I don’t know if you have found already:

https://docs.docker.com/desktop/troubleshoot-and-support/faqs/macfaqs/#how-do-i-add-tls-certificates

It is for Docker Desktop on macOS specifically for setting TLS CA certs. You would also need to know what certs the company requires you to add if not added yet.

3

I worked through that that without any real luck. I have a single self signed cert I need to add.

The information on the engine helps. Maybe I can add in columa using Colima in macOS - DEV Community

4

You mean you could switch to Colima or you are already using it? I have no experience with Colima.