Kubernetes/Containerd/Docs/二进制安装Containerd.md

本文作者：丁辉

更新时间：2026-11-05

二进制安装Containerd

官方文档 Github文档

安装 Containerd

1. 下载二进制文件

   Containerd Containerd.Service

   wget https://github.com/containerd/containerd/releases/download/v2.4.2/containerd-2.4.2-linux-amd64.tar.gz
   
   wget https://raw.githubusercontent.com/containerd/containerd/main/containerd.service
   

2. 解压

   tar Cxzvf /usr/local containerd-*-linux-amd64.tar.gz
   

3. 配置 Systemd

   cp containerd.service /usr/lib/systemd/system/containerd.service
   

4. 启动 Containerd

   systemctl daemon-reload
   systemctl enable --now containerd
   

安装 Runc

Runc

1. 下载

   wget https://github.com/opencontainers/runc/releases/download/v1.5.2/runc.amd64
   

2. 安装

   install -m 755 runc.amd64 /usr/local/sbin/runc
   

安装 CNI 插件

Cni-Plugins

1. 下载

   wget https://github.com/containernetworking/plugins/releases/download/v1.9.1/cni-plugins-linux-amd64-v1.9.1.tgz
   

2. 解压

   mkdir -p /opt/cni/bin &&
   tar Cxzvf /opt/cni/bin cni-plugins-linux-amd64-v*.tgz
   

安装 CLI

Nerdctl

Nerdctl

1. 下载

   wget https://github.com/containerd/nerdctl/releases/download/v2.4.2/nerdctl-2.4.2-linux-amd64.tar.gz
   

2. 解压

   tar zxvf nerdctl-*-linux-amd64.tar.gz
   

3. 安装

   install -m 755 nerdctl /usr/local/bin/nerdctl
   

Crictl

Crictl

1. 下载

   wget https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.37.0/crictl-v1.37.0-linux-amd64.tar.gz
   

2. 解压

   tar zxvf crictl-v*-linux-amd64.tar.gz
   

3. 安装

   install -m 755 crictl /usr/local/bin/crictl
   

4. 添加配置文件

   curl -so /etc/crictl.yaml https://raw.giteeusercontent.com/offends/Kubernetes/raw/main/Containerd/Files/crictl.yaml
   

配置 Containerd

官方文档

1. 创建配置文件

   mkdir /etc/containerd &&
   containerd config default > /etc/containerd/config.toml
   

   参数解释

   • containerd config default：用于全新安装，生成一份干净的、当前版本的默认配置。
   • containerd config migrate：用于从旧版本升级，它会读取你现有的旧配置文件，并将其转换为新格式，同时保留你的自定义设置。

2. 修改驱动和镜像地址

   sed -i "/SystemdCgroup/s/=.*/= true/" /etc/containerd/config.toml &&
   
   sed -i "/^[[:space:]]*\[plugins\.'io\.containerd\.cri\.v1\.images'\.pinned_images\][[:space:]]*$/,/^[[:space:]]*\[/ s|^\([[:space:]]*sandbox[[:space:]]*=[[:space:]]*\).*|\1'registry.aliyuncs.com/google_containers/pause:3.10.2'|" /etc/containerd/config.toml &&
   
   sed -i "/^[[:space:]]*\[plugins\.'io\.containerd\.cri\.v1\.images'\.registry\][[:space:]]*$/,/^[[:space:]]*\[/ s|config_path = ''|config_path = \'/etc/containerd/certs.d\'|" /etc/containerd/config.toml
   

   参数解释

   参数	值	说明	适用版本
   SystemdCgroup	true	启用 systemd cgroup 驱动	containerd 2.x
   sandbox	registry.aliyuncs.com/google_containers/pause:3.10.2	指定 pause 沙箱镜像为阿里云地址	containerd 2.x
   config_path	/etc/containerd/certs.d	指定 registry 证书配置目录	containerd 2.x

3. 重新启动并查看状态

   systemctl restart containerd &&
   systemctl status containerd
   

4. 查看已加载的配置文件是否有错误

   containerd config dump | grep WARN
   

配置镜像加速

1. 创建目录

   mkdir -p /etc/containerd/certs.d/docker.io
   

2. 写入加速器地址

   cat > /etc/containerd/certs.d/docker.io/hosts.toml << EOF
   server = "https://docker.io"
   
   [host."https://docker.m.daocloud.io"]
     capabilities = ["pull", "resolve"]
   EOF
   

3. 重启 containerd 使配置生效

   systemctl restart containerd
   

配置允许不安全的仓库

cat > /etc/containerd/certs.d/docker.io/hosts.toml << EOF
[host."https://docker.io"]
  capabilities = ["pull", "resolve","push"]
  skip_verify = true
  [host."https://docker.io".auth]
    username = "username"
    password = "password"
EOF