添加文档
This commit is contained in:
@@ -1,87 +1,209 @@
|
|||||||
> 本文作者：丁辉
|
> 本文作者：丁辉
|
||||||
|
>
|
||||||
|
> 更新时间：2026-11-05
|
||||||
|
|
||||||
# 二进制安装Containerd
|
# 二进制安装Containerd
|
||||||
|
|
||||||
|
[官方文档](https://containerd.io/docs/main/getting-started/) [Github文档](https://github.com/containerd/containerd/blob/main/docs/getting-started.md)
|
||||||
|
|
||||||
## 安装 Containerd
|
## 安装 Containerd
|
||||||
|
|
||||||
[containerd软件包](https://github.com/containerd/containerd/releases)
|
|
||||||
|
|
||||||
[cni插件包](https://github.com/containernetworking/plugins/releases)
|
|
||||||
|
|
||||||
1. 下载二进制文件
|
1. 下载二进制文件
|
||||||
|
|
||||||
|
[Containerd](https://github.com/containerd/containerd/releases) [Containerd.Service](https://raw.githubusercontent.com/containerd/containerd/main/containerd.service)
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
wget https://github.com/containerd/containerd/releases/download/v1.6.33/cri-containerd-cni-1.6.33-linux-amd64.tar.gz
|
wget https://github.com/containerd/containerd/releases/download/v2.4.2/containerd-2.4.2-linux-amd64.tar.gz
|
||||||
|
|
||||||
|
wget https://raw.githubusercontent.com/containerd/containerd/main/containerd.service
|
||||||
```
|
```
|
||||||
|
|
||||||
2. 解压
|
2. 解压
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
mkdir containerd
|
tar Cxzvf /usr/local containerd-*-linux-amd64.tar.gz
|
||||||
tar -zxvf cri-containerd-cni-*-linux-amd64.tar.gz -C containerd
|
|
||||||
cd containerd
|
|
||||||
```
|
```
|
||||||
|
|
||||||
3. 移动文件至安装目录
|
3. 配置 Systemd
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
\cp usr/local/bin/* /usr/local/bin/
|
cp containerd.service /usr/lib/systemd/system/containerd.service
|
||||||
\cp etc/systemd/system/containerd.service /usr/lib/systemd/system/containerd.service
|
|
||||||
mkdir /opt/cni/bin -p
|
|
||||||
\cp /root/containerd/opt/cni/bin/* /opt/cni/bin/
|
|
||||||
```
|
```
|
||||||
|
|
||||||
4. 备份配置文件
|
4. 启动 Containerd
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
mkdir /etc/containerd
|
systemctl daemon-reload
|
||||||
containerd config default > /etc/containerd/config.toml
|
systemctl enable --now containerd
|
||||||
```
|
```
|
||||||
|
|
||||||
5. 修改驱动和镜像地址
|
## 安装 Runc
|
||||||
|
|
||||||
```bash
|
[Runc](https://github.com/opencontainers/runc/releases)
|
||||||
vi /etc/containerd/config.toml
|
|
||||||
```
|
|
||||||
|
|
||||||
内容如下
|
|
||||||
|
|
||||||
```toml
|
|
||||||
[plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc]
|
|
||||||
...
|
|
||||||
[plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc.options]
|
|
||||||
SystemdCgroup = true #修改这里
|
|
||||||
|
|
||||||
[plugins."io.containerd.grpc.v1.cri"]
|
|
||||||
sandbox_image = "registry.aliyuncs.com/google_containers/pause:3.9"
|
|
||||||
```
|
|
||||||
|
|
||||||
6. 配置 crictl 配置文件
|
|
||||||
|
|
||||||
```bash
|
|
||||||
curl -so /etc/crictl.yaml https://gitee.com/offends/Kubernetes/raw/main/Containerd/Files/crictl.yaml
|
|
||||||
```
|
|
||||||
|
|
||||||
7. 启动
|
|
||||||
|
|
||||||
```bash
|
|
||||||
systemctl enable containerd
|
|
||||||
systemctl start containerd
|
|
||||||
systemctl status containerd
|
|
||||||
```
|
|
||||||
|
|
||||||
## 安装 RunC
|
|
||||||
|
|
||||||
[Github软件包下载](https://github.com/opencontainers/runc/releases)
|
|
||||||
|
|
||||||
1. 下载
|
1. 下载
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
wget https://github.com/opencontainers/runc/releases/download/v1.1.12/runc.amd64
|
wget https://github.com/opencontainers/runc/releases/download/v1.5.2/runc.amd64
|
||||||
```
|
```
|
||||||
|
|
||||||
2. 安装
|
2. 安装
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
install -m 755 runc.amd64 /usr/local/bin/runc
|
install -m 755 runc.amd64 /usr/local/sbin/runc
|
||||||
```
|
```
|
||||||
|
|
||||||
|
## 安装 CNI 插件
|
||||||
|
|
||||||
|
[Cni-Plugins](https://github.com/containernetworking/plugins/releases)
|
||||||
|
|
||||||
|
1. 下载
|
||||||
|
|
||||||
|
```bash
|
||||||
|
wget https://github.com/containernetworking/plugins/releases/download/v1.9.1/cni-plugins-linux-amd64-v1.9.1.tgz
|
||||||
|
```
|
||||||
|
|
||||||
|
2. 解压
|
||||||
|
|
||||||
|
```bash
|
||||||
|
mkdir -p /opt/cni/bin &&
|
||||||
|
tar Cxzvf /opt/cni/bin cni-plugins-linux-amd64-v*.tgz
|
||||||
|
```
|
||||||
|
|
||||||
|
## 安装 CLI
|
||||||
|
|
||||||
|
### Nerdctl
|
||||||
|
|
||||||
|
[Nerdctl](https://github.com/containerd/nerdctl/releases)
|
||||||
|
|
||||||
|
1. 下载
|
||||||
|
|
||||||
|
```bash
|
||||||
|
wget https://github.com/containerd/nerdctl/releases/download/v2.4.2/nerdctl-2.4.2-linux-amd64.tar.gz
|
||||||
|
```
|
||||||
|
|
||||||
|
2. 解压
|
||||||
|
|
||||||
|
```bash
|
||||||
|
tar zxvf nerdctl-*-linux-amd64.tar.gz
|
||||||
|
```
|
||||||
|
|
||||||
|
3. 安装
|
||||||
|
|
||||||
|
```bash
|
||||||
|
install -m 755 nerdctl /usr/local/bin/nerdctl
|
||||||
|
```
|
||||||
|
|
||||||
|
### Crictl
|
||||||
|
|
||||||
|
[Crictl](https://github.com/kubernetes-sigs/cri-tools/releases)
|
||||||
|
|
||||||
|
1. 下载
|
||||||
|
|
||||||
|
```bash
|
||||||
|
wget https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.37.0/crictl-v1.37.0-linux-amd64.tar.gz
|
||||||
|
```
|
||||||
|
|
||||||
|
2. 解压
|
||||||
|
|
||||||
|
```bash
|
||||||
|
tar zxvf crictl-v*-linux-amd64.tar.gz
|
||||||
|
```
|
||||||
|
|
||||||
|
3. 安装
|
||||||
|
|
||||||
|
```bash
|
||||||
|
install -m 755 crictl /usr/local/bin/crictl
|
||||||
|
```
|
||||||
|
|
||||||
|
4. 添加配置文件
|
||||||
|
|
||||||
|
```bash
|
||||||
|
curl -so /etc/crictl.yaml https://raw.giteeusercontent.com/offends/Kubernetes/raw/main/Containerd/Files/crictl.yaml
|
||||||
|
```
|
||||||
|
|
||||||
|
## 配置 Containerd
|
||||||
|
|
||||||
|
[官方文档](https://kubernetes.io/zh-cn/docs/setup/production-environment/container-runtimes/#containerd-systemd)
|
||||||
|
|
||||||
|
1. 创建配置文件
|
||||||
|
|
||||||
|
```bash
|
||||||
|
mkdir /etc/containerd &&
|
||||||
|
containerd config default > /etc/containerd/config.toml
|
||||||
|
```
|
||||||
|
|
||||||
|
**参数解释**
|
||||||
|
|
||||||
|
- **`containerd config default`**：用于**全新安装**，生成一份干净的、当前版本的默认配置。
|
||||||
|
- **`containerd config migrate`**：用于**从旧版本升级**，它会读取你现有的旧配置文件，并将其转换为新格式，同时保留你的自定义设置。
|
||||||
|
|
||||||
|
2. 修改驱动和镜像地址
|
||||||
|
|
||||||
|
```bash
|
||||||
|
sed -i "/SystemdCgroup/s/=.*/= true/" /etc/containerd/config.toml &&
|
||||||
|
|
||||||
|
sed -i "/^[[:space:]]*\[plugins\.'io\.containerd\.cri\.v1\.images'\.pinned_images\][[:space:]]*$/,/^[[:space:]]*\[/ s|^\([[:space:]]*sandbox[[:space:]]*=[[:space:]]*\).*|\1'registry.aliyuncs.com/google_containers/pause:3.10.2'|" /etc/containerd/config.toml &&
|
||||||
|
|
||||||
|
sed -i "/^[[:space:]]*\[plugins\.'io\.containerd\.cri\.v1\.images'\.registry\][[:space:]]*$/,/^[[:space:]]*\[/ s|config_path = ''|config_path = \'/etc/containerd/certs.d\'|" /etc/containerd/config.toml
|
||||||
|
```
|
||||||
|
|
||||||
|
**参数解释**
|
||||||
|
|
||||||
|
| 参数 | 值 | 说明 | 适用版本 |
|
||||||
|
| --------------- | ------------------------------------------------------ | ------------------------------- | -------------- |
|
||||||
|
| `SystemdCgroup` | `true` | 启用 systemd cgroup 驱动 | containerd 2.x |
|
||||||
|
| `sandbox` | `registry.aliyuncs.com/google_containers/pause:3.10.2` | 指定 pause 沙箱镜像为阿里云地址 | containerd 2.x |
|
||||||
|
| `config_path` | `/etc/containerd/certs.d` | 指定 registry 证书配置目录 | containerd 2.x |
|
||||||
|
|
||||||
|
3. 重新启动并查看状态
|
||||||
|
|
||||||
|
```bash
|
||||||
|
systemctl restart containerd &&
|
||||||
|
systemctl status containerd
|
||||||
|
```
|
||||||
|
|
||||||
|
4. 查看已加载的配置文件是否有错误
|
||||||
|
|
||||||
|
```bash
|
||||||
|
containerd config dump | grep WARN
|
||||||
|
```
|
||||||
|
|
||||||
|
## 配置镜像加速
|
||||||
|
|
||||||
|
1. 创建目录
|
||||||
|
|
||||||
|
```bash
|
||||||
|
mkdir -p /etc/containerd/certs.d/docker.io
|
||||||
|
```
|
||||||
|
|
||||||
|
2. 写入加速器地址
|
||||||
|
|
||||||
|
```bash
|
||||||
|
cat > /etc/containerd/certs.d/docker.io/hosts.toml << EOF
|
||||||
|
server = "https://docker.io"
|
||||||
|
|
||||||
|
[host."https://docker.m.daocloud.io"]
|
||||||
|
capabilities = ["pull", "resolve"]
|
||||||
|
EOF
|
||||||
|
```
|
||||||
|
|
||||||
|
3. 重启 containerd 使配置生效
|
||||||
|
|
||||||
|
```bash
|
||||||
|
systemctl restart containerd
|
||||||
|
```
|
||||||
|
|
||||||
|
## 配置允许不安全的仓库
|
||||||
|
|
||||||
|
```bash
|
||||||
|
cat > /etc/containerd/certs.d/docker.io/hosts.toml << EOF
|
||||||
|
[host."https://docker.io"]
|
||||||
|
capabilities = ["pull", "resolve","push"]
|
||||||
|
skip_verify = true
|
||||||
|
[host."https://docker.io".auth]
|
||||||
|
username = "username"
|
||||||
|
password = "password"
|
||||||
|
EOF
|
||||||
|
```
|
||||||
|
|
||||||
|
|||||||
@@ -1,6 +1,27 @@
|
|||||||
|
# runtime-endpoint：crictl 连接的运行时服务地址
|
||||||
|
# unix:///run/containerd/containerd.sock 表示通过本机 socket 连接 containerd 的 CRI 服务
|
||||||
runtime-endpoint: unix:///run/containerd/containerd.sock
|
runtime-endpoint: unix:///run/containerd/containerd.sock
|
||||||
|
|
||||||
|
# image-endpoint：crictl 连接的镜像服务地址
|
||||||
|
# 通常与 runtime-endpoint 相同，因为 containerd 的 CRI 服务同时提供运行时和镜像服务
|
||||||
image-endpoint: unix:///run/containerd/containerd.sock
|
image-endpoint: unix:///run/containerd/containerd.sock
|
||||||
|
|
||||||
|
# timeout：crictl 请求超时时间，单位是秒
|
||||||
|
# 10 表示最多等 10 秒，超时就报错；不是布尔值，按需改数字
|
||||||
timeout: 10
|
timeout: 10
|
||||||
|
|
||||||
|
# debug：是否输出调试日志
|
||||||
|
# debug: true = 输出更多调试信息，适合排错
|
||||||
|
# debug: false = 正常输出，不打印调试日志
|
||||||
debug: false
|
debug: false
|
||||||
pull-image-on-create: false
|
|
||||||
|
# pull-image-on-create：crictl create 创建容器时，本地缺镜像是否自动拉取
|
||||||
|
# pull-image-on-create: true = 缺镜像时自动拉取，再创建容器
|
||||||
|
# pull-image-on-create: false = 缺镜像时不自动拉取，直接报错
|
||||||
|
pull-image-on-create: true
|
||||||
|
|
||||||
|
# disable-pull-on-run：crictl run 运行容器时，是否禁止自动拉取缺失镜像
|
||||||
|
# 注意这个参数名字是“禁止拉取”，方向与上面相反
|
||||||
|
# disable-pull-on-run: true = 禁止自动拉取，缺镜像直接报错
|
||||||
|
# disable-pull-on-run: false = 不禁止自动拉取，缺镜像时允许自动拉取
|
||||||
disable-pull-on-run: false
|
disable-pull-on-run: false
|
||||||
Reference in New Issue
Block a user