1、场景
用nerdctl登录镜像仓库192.168.0.190（Harbor），报错
ERRO[0006] failed to call tryLoginWithRegHost error="failed to call rh.Client.Do: Get \"https://192.168.0.190/v2/\": dial tcp 192.168.0.190:443: connect: connection refused" i=0
FATA[0006] failed to call rh.Client.Do: Get "https://192.168.0.190/v2/": dial tcp 192.168.0.190:443: connect: connection refused
2、解决办法
由于机器装了docker和containerd
2.1 所有的Kubernetes节点的Docke，都需要添加insecure-registries配置：
master节点：
node节点：
systemctl daemon-reload
systemctl restart docker
2.2 如果Kubernetes集群采用的是Containerd作为的Runtime，配置insecure-registry只需要在
Containerd配置文件的mirrors下添加自己的镜像仓库地址即可
master节点：
vi /etc/containerd/config.toml
[plugins."io.containerd.grpc.v1.cri".registry.mirrors."192.168.0.190"]
endpoint= ["http://192.168.0.190"]
node节点：
systemctl restart containerd
3、创建hosts.toml文件
mkdir -p /etc/containerd/certs.d/192.168.0.190 (Harbor镜像仓库地址：192.168.0.190)
cd /etc/containerd/certs.d/192.168.0.190
vi hosts.toml
server = "http://192.168.0.190"
[host."http://192.168.0.190"]
capabilities = ["pull", "resolve","push"]
skip_verify = true
4、验证
nerdctl login 192.168.0.190
