运行以下的命令，启动registry镜像，以及Nginx代理镜像

docker run -d --name registry  -v /root/my_registry:/tmp/registry -p 5000:5000 registry
docker run -d --hostname dokk.co --name nginx --link registry:registry -p 443:443 larrycai/nginx-auth-proxy

1. 将以下的内容加入到/etc/hosts文件里
   192.168.40.71 dokk.co
2. 下载ca.pem文件到客户机(https://github.com/Eric-aihua/nginx-auth-proxy/blob/master/ca.pem)
3. 将ca.pem加入到信任列表
   

   $ sudo cat ca.pem >> /etc/ssl/certs/ca-certificates.crt
   $ sudo /etc/init.d/docker restart

   在改动
   /etc/ssl/certs/ca-certificates.crt文件时。会由于该文件是仅仅读的而不能改动，后来通过查询资料。发如今CoreOS中该文件是链接到

   /usr/share/ca-certificates/ca-certificates.crt文件，而/usr整个路径被挂载到仅仅读分区上。具体情况可查询（
   https://coreos.com/blog/new-filesystem-btrfs-cloud-config/
   ）。能够通过以下方法解决上面问题

   localhost ~ # cp /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt.bak
   

   localhost ~ # mv /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt.ln
   

   localhost ~ # cp /etc/ssl/certs/ca-certificates.crt.bak /etc/ssl/certs/ca-certificates.crt
   

   localhost ~ # cat ca.pem >> /etc/ssl/certs/ca-certificates.crt