Docker pull的时候报错

[root@Template images]# docker pull tomcat
Using default tag: latest
Trying to pull repository docker.io/library/tomcat ... 
latest: Pulling from docker.io/library/tomcat

c73ab1c6897b: Pulling fs layer 
1ab373b3deae: Pulling fs layer 
0bcc3741ab14: Waiting 
421d624d778d: Waiting 
26ad58237506: Waiting 
8dbabc90b2b8: Waiting 
982930be204d: Waiting 
80869be51738: Waiting 
ebc6831d2466: Waiting 
e1d0586dfcce: Waiting 
f84378b2ff18: Waiting 
error pulling image configuration: Get https://dseasb33srnrn.cloudfront.net/registry-v2/docker/registry/v2/blobs/sha256/51/516082cd94faee5ebf7b1bae4086249cbaf73638bd607827e59a963303fc8fa9/data?Expires=1521730958&Signature=dEaJP0029wf7lGrIE6AIRJeww2XHl52TK~ty2R2xtjAS1t1tea4Q4RyaalL--Kf7jE6ch5CCdJXi4Nvr43GFSULOlwbbZOrDnByx1iFblSt0bDMNKkkI8-TqEK0hjOEdhbPRPWcbnE~9OkEzuLx4tgth9lOhvU95eSzPamGa2d4_&Key-Pair-Id=APKAJECH5M7VWIS5YZ6Q: net/http: TLS handshake timeout

解决方法：

 1、修改 配置文件：

/etc/sysconfig/docker

[root@Template images]# cat /etc/sysconfig/docker
# /etc/sysconfig/docker

# Modify these options if you want to change the way the docker daemon runs
OPTIONS='--selinux-enabled --log-driver=journald --signature-verification=false --registry-mirror=http://f2d6cb40.m.daocloud.io'
if [ -z "${DOCKER_CERT_PATH}" ]; then
    DOCKER_CERT_PATH=/etc/docker
fi

# Do not add registries in this file anymore. Use /etc/containers/registries.conf
# from the atomic-registries package.
#

# docker-latest daemon can be used by starting the docker-latest unitfile.
# To use docker-latest client, uncomment below lines
#DOCKERBINARY=/usr/bin/docker-latest
#DOCKERDBINARY=/usr/bin/dockerd-latest
#DOCKER_CONTAINERD_BINARY=/usr/bin/docker-containerd-latest
#DOCKER_CONTAINERD_SHIM_BINARY=/usr/bin/docker-containerd-shim-latest
[root@Template images]# 

2、重启：

[root@Template images]# systemctl  restart   docker