ctr image pull from private repository,http: server gave HTTP response to HTTPS client.

[wangchao732]

containerd v2.0.5-k3s2

conf:

cat /var/lib/rancher/rke2/agent/etc/containerd/certs.d/xxx.xxx.13.73:30990/hosts.toml
server = "http://xxx.xxx.13.73:30990"

[host."http://xxx.xxx.13.73:30990"]
capabilities = ["pull", "resolve", "push"]
skip_verify = true

Aug 21 11:28:03 BJ11-Rancher-test01.bcld.com containerd[4069289]: time="2025-08-21T11:28:03.303096397+08:00" level=info msg="trying next host" error="failed to do request: Head "https://xxx.xxx.13.73:30990/v2/dapr/dapr-service-dotnet-openapi:v2.1.15
http: server gave HTTP response to HTTPS client" host="xxx.xxx.13.73:30990"

ctr -n k8s.io images pull --hosts-dir /etc/containerd/certs.d/xxx.xxx.13.73:30990/hosts.toml xxx.xxx.13.73:30990/dapr/dapr-service-dotnet-openapi:v2.1.15

why configure not effective?