Support user-defined container registry config in image-rs

[Xynnn007]

https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md provides a standard of container registry configuration. It allows users to control including but not limited to the following settings

• Registry remapping
• Registry level blocking
• Registry level insecure HTTP support

This feature could help to deal with the following user cases

• registries that is not running in HTTPS, like [image-rs] How to pull an image from local registries #861
• pulling images with special network situations, like connecting to a mirrored registry. like Discuss the problem of confidential container pull mirror #601

[fffmonkeyking-new]

I want to run a confidential container with runtimeClass kata-qemu-tdx based on CoCo-v0.11.0.

If my docker image is located in a local private http registry:
http://myhub.local/test/nginx:1.21

I modified the containerd configuration /etc/containerd/config.toml:
[plugins."io.containerd.grpc.v1.cri".registry.mirrors]
[plugins."io.containerd.grpc.v1.cri".registry.mirrors."myhub.local"]
endpoint = ["http://myhub.local"]

and then deploy my confidential container.
From the pod log, we can see that containerd can pull the image data; but the kata-agent in cvm failed to pull the image? ：
kubelet Successfully pulled image "myhub.local/test/nginx:1.21" in 190ms (190ms including waiting). Image size: xxx bytes.
kubelet Successfully pulled image "myhub.local/test/nginx:1.21" in 90ms (90ms including waiting). Image size: xxx bytes.
kubelet Successfully pulled image "myhub.local/test/nginx:1.21" in 74ms (74ms including waiting). Image size: xxx bytes.
kubelet Successfully pulled image "myhub.local/test/nginx:1.21" in 73ms (73ms including waiting). Image size: xxx bytes.
kubelet Error: failed to create containerd task: failed to create shim task: failed to pull manifest error sending request for url (https://myhub.local/test/nginx:1.21)

How should I configure kata-agent to let it know that myhub.local/test/nginx:1.21 is a local private http registry?

[Xynnn007]

@fffmonkeyking-new Now it does not support. This issue will cover this.

[fffmonkeyking-new]

@fffmonkeyking-new Now it does not support. This issue will cover this.

Thanks for your reply.