[root@Template images]# docker pull tomcat Using default tag: latest Trying to pull repository docker.io/library/tomcat ... latest: Pulling from docker.io/library/tomcat c73ab1c6897b: Pulling fs layer 1ab373b3deae: Pulling fs layer 0bcc3741ab14: Waiting 421d624d778d: Waiting 26ad58237506: Waiting 8dbabc90b2b8: Waiting 982930be204d: Waiting 80869be51738: Waiting ebc6831d2466: Waiting e1d0586dfcce: Waiting f84378b2ff18: Waiting error pulling image configuration: Get https://dseasb33srnrn.cloudfront.net/registry-v2/docker/registry/v2/blobs/sha256/51/516082cd94faee5ebf7b1bae4086249cbaf73638bd607827e59a963303fc8fa9/data?Expires=1521730958&Signature=dEaJP0029wf7lGrIE6AIRJeww2XHl52TK~ty2R2xtjAS1t1tea4Q4RyaalL--Kf7jE6ch5CCdJXi4Nvr43GFSULOlwbbZOrDnByx1iFblSt0bDMNKkkI8-TqEK0hjOEdhbPRPWcbnE~9OkEzuLx4tgth9lOhvU95eSzPamGa2d4_&Key-Pair-Id=APKAJECH5M7VWIS5YZ6Q: net/http: TLS handshake timeout
解决方法：
1、修改 配置文件：
/etc/sysconfig/docker
[root@Template images]# cat /etc/sysconfig/docker # /etc/sysconfig/docker # Modify these options if you want to change the way the docker daemon runs OPTIONS='--selinux-enabled --log-driver=journald --signature-verification=false --registry-mirror=http://f2d6cb40.m.daocloud.io' if [ -z "${DOCKER_CERT_PATH}" ]; then DOCKER_CERT_PATH=/etc/docker fi # Do not add registries in this file anymore. Use /etc/containers/registries.conf # from the atomic-registries package. # # docker-latest daemon can be used by starting the docker-latest unitfile. # To use docker-latest client, uncomment below lines #DOCKERBINARY=/usr/bin/docker-latest #DOCKERDBINARY=/usr/bin/dockerd-latest #DOCKER_CONTAINERD_BINARY=/usr/bin/docker-containerd-latest #DOCKER_CONTAINERD_SHIM_BINARY=/usr/bin/docker-containerd-shim-latest [root@Template images]#
2、重启：
[root@Template images]# systemctl restart docker