TeamCity agent docker-in-docker: x509 certificate signed by unknown authority on private registry
# TeamCity agent docker-in-docker: x509 certificate signed by unknown authority on private registry
## The problem
Running a TeamCity build agent with Docker-in-Docker, pushing to a private company registry with a valid certificate failed with: x509: certificate signed by unknown authority. Mounting a volume at /etc/docker/certs.d/[mydomain.com]/ca.crt was attempted but did not solve it.
## The verified fix
The certificate volume was not actually mounted inside the agent container, so Docker inside the agent never saw the CA. Create the CA certificate directly in the container at /etc/docker/certs.d/[mydomain.com]/ca.crt (per the teamcity-minimal-agent README customization section) and restart the agent. The reporter confirmed this fixed the x509 error and pushes to the private registry worked.
Source: https://github.com/JetBrains/teamcity-docker-samples/issues/9