Jun Wang

> default certs that are auto generated has one year life. long-term VIC users would be hit with renewal issues. > > BTW, if you use CA signed certs, as...

If traefik will communicate with docker daemon as https://medium.com/lucjuggery/about-var-run-docker-sock-3bfd276e12fd pointed, the direct use of VCH is not feasible because VCH is a docker daemon listening to tcp but not unix...

@meeximum There are a few types of networks in VCH and its container VMs: https://vmware.github.io/vic-product/assets/files/html/1.5/vic_vsphere_admin/vch_networking.html In your case, if you want to access the VCH's 2376 port from each container...

@meeximum It looks this is a good example where we can migrate the dependency from /var/run/docker.sock to VCH's docker tcp port!

@desolat VIC currently only support Docker registry v2 protocols as Yang posted above: https://docs.docker.com/registry/spec/auth/token/ We will test locally and see if there is a way to talk to this registry...

@desolat I set up a nexus docker registry locally, and after I tick "Allow anonymous docker pull ( Docker Bearer Token Realm required )", I can login through VCH. This...

For the first warning, it is at line https://github.com/vmware/vic/blob/0d51b7ecd420916c0ede5cd2b475298eccd4894a/lib/install/management/appliance.go#L937 it will try to load system root CAs first. For the second warning, it is at line https://github.com/vmware/vic/blob/0d51b7ecd420916c0ede5cd2b475298eccd4894a/lib/install/management/appliance.go#L983 the codes will...

@mohammadrezalk Before VCH can limit the volstore capacity, the admin may create some smaller datastores as the volstores.

VIC relies on reading VM sample from vCenter performance apis(https://github.com/vmware/vic/blob/b5678adc2eca1a640f46c686f4378a4b3ec81679/pkg/vsphere/performance/vm_collector.go#L241) and change it to container stats(https://github.com/vmware/vic/blob/20edfa460a72e8edcb313fee777d2adbd66ce411/lib/apiservers/engine/backends/convert/stats.go#L45) . This design is correct since each container is a VM. @ading007 you may...

@zjs I wonder the trade off between performance and failure/reset memory?