网站开发的客户群体,深圳市宝安区教育局官网,广州做网站的企业,设计的好看的网站1 containerd快速安装指南#x1f680;
本指南旨在提供一个简洁有效的方法来安装containerd。我们将通过一份易于理解的脚本步骤#xff0c;指导您完成安装#x1f527;。请根据您的实际需求#xff0c;适当调整containerd版本及其相关依赖。
注意事项#xff1a; 本安装…1 containerd快速安装指南
本指南旨在提供一个简洁有效的方法来安装containerd。我们将通过一份易于理解的脚本步骤指导您完成安装。请根据您的实际需求适当调整containerd版本及其相关依赖。
注意事项 本安装脚本已在containerd 1.7.2版本上测试验证️。请注意尽管本脚本主要面向该版本不同版本的安装步骤可能存在差异。建议您在实施前对脚本进行必要的调整以适应特定版本。
加速技巧 考虑到在国内直接访问GitHub可能面临速度缓慢的问题我们采用了GitHub代理来加速下载过程。需要提醒的是代理服务的可用性可能会变化因此建议定期检查并更新代理设置以保持下载速度。
为了提升国内用户下载Docker镜像的速度本指南特别引入了网易镜像代理的配置️。通过这一配置用户可以显著加快从Docker Hub下载镜像的速度有效缓解等待时间。
CONTAINERD_VERSION1.7.2
wget https://hub.gitmirror.com/https://github.com/containerd/containerd/releases/download/v${CONTAINERD_VERSION}/cri-containerd-cni-${CONTAINERD_VERSION}-linux-amd64.tar.gz
tar -xvzf cri-containerd-cni-*-linux-amd64.tar.gz -C /
rm -f cri-containerd-cni-*-linux-amd64.tar.gzNERDCTL_VERSION1.4.0
wget https://hub.gitmirror.com/https://github.com/containerd/nerdctl/releases/download/v${NERDCTL_VERSION}/nerdctl-${NERDCTL_VERSION}-linux-amd64.tar.gz
mkdir nerdctl
tar -xf nerdctl-${NERDCTL_VERSION}-linux-amd64.tar.gz -C nerdctl/
mv nerdctl/nerdctl /usr/local/bin/
rm -rf nerdctl# 覆盖containerd的runc工具
RUNC_VERSION1.1.7
wget https://hub.gitmirror.com/https://github.com/opencontainers/runc/releases/download/v${RUNC_VERSION}/runc.amd64
mv runc.amd64 runc chmod x runc mv -f runc /usr/local/sbin/# 创建默认配置文件
mkdir -p /etc/containerd
# 创建containerd默认配置文件
containerd config default | tee /etc/containerd/config.toml# 修改Containerd的配置文件
sed -i s#SystemdCgroup\ \\ false#SystemdCgroup\ \\ true#g /etc/containerd/config.toml
cat /etc/containerd/config.toml | grep SystemdCgroupsed -i s#registry.k8s.io#m.daocloud.io/registry.k8s.io#g /etc/containerd/config.toml
cat /etc/containerd/config.toml | grep sandbox_imagesed -i s#config_path\ \\ \\#config_path\ \\ \/etc/containerd/certs.d\#g /etc/containerd/config.toml
cat /etc/containerd/config.toml | grep certs.dmkdir /etc/containerd/certs.d/docker.io -pv# 配置加速器
cat /etc/containerd/certs.d/docker.io/hosts.toml EOF
server https://docker.io
[host.https://hub-mirror.c.163.com]capabilities [pull, resolve]
EOF#生成配置文件
cat /etc/crictl.yaml EOF
runtime-endpoint: unix:///run/containerd/containerd.sock
image-endpoint: unix:///run/containerd/containerd.sock
timeout: 10
debug: false
EOFsystemctl daemon-reload
systemctl enable --now containerd.service
systemctl restart containerd.service# 验证containerd是否安装成功
crictl info# 验证是否可以下载镜像
ctr images pull docker.io/library/redis:alpine
2 安装日志
rootcontainerd:~# CONTAINERD_VERSION1.7.2
wget https://hub.gitmirror.com/https://github.com/containerd/containerd/releases/download/v${CONTAINERD_VERSION}/cri-containerd-cni-${CONTAINERD_VERSION}-linux-amd64.tar.gz
tar -xvzf cri-containerd-cni-*-linux-amd64.tar.gz -C /
rm -f cri-containerd-cni-*-linux-amd64.tar.gz
--2024-03-29 20:32:36-- https://hub.gitmirror.com/https://github.com/containerd/containerd/releases/download/v1.7.2/cri-containerd-cni-1.7.2-linux-amd64.tar.gz
Resolving hub.gitmirror.com (hub.gitmirror.com)... 172.64.198.77
Connecting to hub.gitmirror.com (hub.gitmirror.com)|172.64.198.77|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 146515835 (140M) [application/octet-stream]
Saving to: ‘cri-containerd-cni-1.7.2-linux-amd64.tar.gz’cri-containerd-cni-1.7.2-linux-amd64.t 100%[] 139.73M 11.5MB/s in 10s2024-03-29 20:32:49 (13.4 MB/s) - ‘cri-containerd-cni-1.7.2-linux-amd64.tar.gz’ saved [146515835/146515835]cri-containerd.DEPRECATED.txt
etc/
etc/systemd/
etc/systemd/system/
etc/systemd/system/containerd.service
etc/crictl.yaml
etc/cni/
etc/cni/net.d/
etc/cni/net.d/10-containerd-net.conflist
usr/
usr/local/
usr/local/sbin/
usr/local/sbin/runc
usr/local/bin/
usr/local/bin/containerd-shim-runc-v1
usr/local/bin/containerd-shim-runc-v2
usr/local/bin/containerd-stress
usr/local/bin/containerd
usr/local/bin/ctd-decoder
usr/local/bin/containerd-shim
usr/local/bin/critest
usr/local/bin/ctr
usr/local/bin/crictl
opt/
opt/containerd/
opt/containerd/cluster/
opt/containerd/cluster/gce/
opt/containerd/cluster/gce/env
opt/containerd/cluster/gce/cni.template
opt/containerd/cluster/gce/configure.sh
opt/containerd/cluster/gce/cloud-init/
opt/containerd/cluster/gce/cloud-init/master.yaml
opt/containerd/cluster/gce/cloud-init/node.yaml
opt/containerd/cluster/version
opt/cni/
opt/cni/bin/
opt/cni/bin/ipvlan
opt/cni/bin/loopback
opt/cni/bin/dummy
opt/cni/bin/portmap
opt/cni/bin/vrf
opt/cni/bin/bridge
opt/cni/bin/dhcp
opt/cni/bin/bandwidth
opt/cni/bin/host-device
opt/cni/bin/firewall
opt/cni/bin/sbr
opt/cni/bin/static
opt/cni/bin/vlan
opt/cni/bin/ptp
opt/cni/bin/macvlan
opt/cni/bin/tuning
opt/cni/bin/host-local
rootcontainerd:~#
rootcontainerd:~# NERDCTL_VERSION1.4.0
wget https://hub.gitmirror.com/https://github.com/containerd/nerdctl/releases/download/v${NERDCTL_VERSION}/nerdctl-${NERDCTL_VERSION}-linux-amd64.tar.gz
mkdir nerdctl
tar -xf nerdctl-${NERDCTL_VERSION}-linux-amd64.tar.gz -C nerdctl/
mv nerdctl/nerdctl /usr/local/bin/
rm -rf nerdctl
--2024-03-29 20:33:23-- https://hub.gitmirror.com/https://github.com/containerd/nerdctl/releases/download/v1.4.0/nerdctl-1.4.0-linux-amd64.tar.gz
Resolving hub.gitmirror.com (hub.gitmirror.com)... 172.64.160.163
Connecting to hub.gitmirror.com (hub.gitmirror.com)|172.64.160.163|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 9187164 (8.8M) [application/octet-stream]
Saving to: ‘nerdctl-1.4.0-linux-amd64.tar.gz’nerdctl-1.4.0-linux-amd64.tar.gz 100%[] 8.76M 5.06MB/s in 1.7s2024-03-29 20:33:27 (5.06 MB/s) - ‘nerdctl-1.4.0-linux-amd64.tar.gz’ saved [9187164/9187164]rootcontainerd:~#
rootcontainerd:~# # 覆盖containerd的runc工具
RUNC_VERSION1.1.7
wget https://hub.gitmirror.com/https://github.com/opencontainers/runc/releases/download/v${RUNC_VERSION}/runc.amd64
mv runc.amd64 runc chmod x runc mv -f runc /usr/local/sbin/
--2024-03-29 20:33:49-- https://hub.gitmirror.com/https://github.com/opencontainers/runc/releases/download/v1.1.7/runc.amd64
Resolving hub.gitmirror.com (hub.gitmirror.com)... 172.64.141.252
Connecting to hub.gitmirror.com (hub.gitmirror.com)|172.64.141.252|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 9644288 (9.2M) [application/octet-stream]
Saving to: ‘runc.amd64’runc.amd64 100%[] 9.20M 4.25MB/s in 2.2s2024-03-29 20:33:53 (4.25 MB/s) - ‘runc.amd64’ saved [9644288/9644288]rootcontainerd:~#
rootcontainerd:~# # 创建默认配置文件
mkdir -p /etc/containerd
# 创建containerd默认配置文件
containerd config default | tee /etc/containerd/config.toml# 修改Containerd的配置文件
sed -i s#SystemdCgroup\ \\ false#SystemdCgroup\ \\ true#g /etc/containerd/config.toml
cat /etc/containerd/config.toml | grep SystemdCgroupsed -i s#registry.k8s.io#m.daocloud.io/registry.k8s.io#g /etc/containerd/config.toml
cat /etc/containerd/config.toml | grep sandbox_imagesed -i s#config_path\ \\ \\#config_path\ \\ \/etc/containerd/certs.d\#g /etc/containerd/config.toml
cat /etc/containerd/config.toml | grep certs.dmkdir /etc/containerd/certs.d/docker.io -pv# 配置加速器
cat /etc/containerd/certs.d/docker.io/hosts.toml EOF
server https://docker.io
[host.https://hub-mirror.c.163.com]capabilities [pull, resolve]
EOF#生成配置文件
cat /etc/crictl.yaml EOF
runtime-endpoint: unix:///run/containerd/containerd.sock
image-endpoint: unix:///run/containerd/containerd.sock
timeout: 10
debug: false
EOFsystemctl daemon-reload
systemctl enable --now containerd.service
systemctl restart containerd.servicectr images pull docker.io/library/redis:alpine
disabled_plugins []
imports []
oom_score 0
plugin_dir
required_plugins []
root /var/lib/containerd
state /run/containerd
temp
version 2[cgroup]path [debug]address format gid 0level uid 0[grpc]address /run/containerd/containerd.sockgid 0max_recv_message_size 16777216max_send_message_size 16777216tcp_address tcp_tls_ca tcp_tls_cert tcp_tls_key uid 0[metrics]address grpc_histogram false[plugins][plugins.io.containerd.gc.v1.scheduler]deletion_threshold 0mutation_threshold 100pause_threshold 0.02schedule_delay 0sstartup_delay 100ms[plugins.io.containerd.grpc.v1.cri]cdi_spec_dirs [/etc/cdi, /var/run/cdi]device_ownership_from_security_context falsedisable_apparmor falsedisable_cgroup falsedisable_hugetlb_controller truedisable_proc_mount falsedisable_tcp_service truedrain_exec_sync_io_timeout 0senable_cdi falseenable_selinux falseenable_tls_streaming falseenable_unprivileged_icmp falseenable_unprivileged_ports falseignore_image_defined_volumes falseimage_pull_progress_timeout 1m0smax_concurrent_downloads 3max_container_log_line_size 16384netns_mounts_under_state_dir falserestrict_oom_score_adj falsesandbox_image registry.k8s.io/pause:3.8selinux_category_range 1024stats_collect_period 10stream_idle_timeout 4h0m0sstream_server_address 127.0.0.1stream_server_port 0systemd_cgroup falsetolerate_missing_hugetlb_controller trueunset_seccomp_profile [plugins.io.containerd.grpc.v1.cri.cni]bin_dir /opt/cni/binconf_dir /etc/cni/net.dconf_template ip_pref max_conf_num 1setup_serially false[plugins.io.containerd.grpc.v1.cri.containerd]default_runtime_name runcdisable_snapshot_annotations truediscard_unpacked_layers falseignore_blockio_not_enabled_errors falseignore_rdt_not_enabled_errors falseno_pivot falsesnapshotter overlayfs[plugins.io.containerd.grpc.v1.cri.containerd.default_runtime]base_runtime_spec cni_conf_dir cni_max_conf_num 0container_annotations []pod_annotations []privileged_without_host_devices falseprivileged_without_host_devices_all_devices_allowed falseruntime_engine runtime_path runtime_root runtime_type sandbox_mode snapshotter [plugins.io.containerd.grpc.v1.cri.containerd.default_runtime.options][plugins.io.containerd.grpc.v1.cri.containerd.runtimes][plugins.io.containerd.grpc.v1.cri.containerd.runtimes.runc]base_runtime_spec cni_conf_dir cni_max_conf_num 0container_annotations []pod_annotations []privileged_without_host_devices falseprivileged_without_host_devices_all_devices_allowed falseruntime_engine runtime_path runtime_root runtime_type io.containerd.runc.v2sandbox_mode podsandboxsnapshotter [plugins.io.containerd.grpc.v1.cri.containerd.runtimes.runc.options]BinaryName CriuImagePath CriuPath CriuWorkPath IoGid 0IoUid 0NoNewKeyring falseNoPivotRoot falseRoot ShimCgroup SystemdCgroup false[plugins.io.containerd.grpc.v1.cri.containerd.untrusted_workload_runtime]base_runtime_spec cni_conf_dir cni_max_conf_num 0container_annotations []pod_annotations []privileged_without_host_devices falseprivileged_without_host_devices_all_devices_allowed falseruntime_engine runtime_path runtime_root runtime_type sandbox_mode snapshotter [plugins.io.containerd.grpc.v1.cri.containerd.untrusted_workload_runtime.options][plugins.io.containerd.grpc.v1.cri.image_decryption]key_model node[plugins.io.containerd.grpc.v1.cri.registry]config_path [plugins.io.containerd.grpc.v1.cri.registry.auths][plugins.io.containerd.grpc.v1.cri.registry.configs][plugins.io.containerd.grpc.v1.cri.registry.headers][plugins.io.containerd.grpc.v1.cri.registry.mirrors][plugins.io.containerd.grpc.v1.cri.x509_key_pair_streaming]tls_cert_file tls_key_file [plugins.io.containerd.internal.v1.opt]path /opt/containerd[plugins.io.containerd.internal.v1.restart]interval 10s[plugins.io.containerd.internal.v1.tracing]sampling_ratio 1.0service_name containerd[plugins.io.containerd.metadata.v1.bolt]content_sharing_policy shared[plugins.io.containerd.monitor.v1.cgroups]no_prometheus false[plugins.io.containerd.nri.v1.nri]disable truedisable_connections falseplugin_config_path /etc/nri/conf.dplugin_path /opt/nri/pluginsplugin_registration_timeout 5splugin_request_timeout 2ssocket_path /var/run/nri/nri.sock[plugins.io.containerd.runtime.v1.linux]no_shim falseruntime runcruntime_root shim containerd-shimshim_debug false[plugins.io.containerd.runtime.v2.task]platforms [linux/amd64]sched_core false[plugins.io.containerd.service.v1.diff-service]default [walking][plugins.io.containerd.service.v1.tasks-service]blockio_config_file rdt_config_file [plugins.io.containerd.snapshotter.v1.aufs]root_path [plugins.io.containerd.snapshotter.v1.btrfs]root_path [plugins.io.containerd.snapshotter.v1.devmapper]async_remove falsebase_image_size discard_blocks falsefs_options fs_type pool_name root_path [plugins.io.containerd.snapshotter.v1.native]root_path [plugins.io.containerd.snapshotter.v1.overlayfs]root_path upperdir_label false[plugins.io.containerd.snapshotter.v1.zfs]root_path [plugins.io.containerd.tracing.processor.v1.otlp]endpoint insecure falseprotocol [plugins.io.containerd.transfer.v1.local]config_path max_concurrent_downloads 3max_concurrent_uploaded_layers 3[[plugins.io.containerd.transfer.v1.local.unpack_config]]differ platform linux/amd64snapshotter overlayfs[proxy_plugins][stream_processors][stream_processors.io.containerd.ocicrypt.decoder.v1.tar]accepts [application/vnd.oci.image.layer.v1.tarencrypted]args [--decryption-keys-path, /etc/containerd/ocicrypt/keys]env [OCICRYPT_KEYPROVIDER_CONFIG/etc/containerd/ocicrypt/ocicrypt_keyprovider.conf]path ctd-decoderreturns application/vnd.oci.image.layer.v1.tar[stream_processors.io.containerd.ocicrypt.decoder.v1.tar.gzip]accepts [application/vnd.oci.image.layer.v1.targzipencrypted]args [--decryption-keys-path, /etc/containerd/ocicrypt/keys]env [OCICRYPT_KEYPROVIDER_CONFIG/etc/containerd/ocicrypt/ocicrypt_keyprovider.conf]path ctd-decoderreturns application/vnd.oci.image.layer.v1.targzip[timeouts]io.containerd.timeout.bolt.open 0sio.containerd.timeout.metrics.shimstats 2sio.containerd.timeout.shim.cleanup 5sio.containerd.timeout.shim.load 5sio.containerd.timeout.shim.shutdown 3sio.containerd.timeout.task.state 2s[ttrpc]address gid 0uid 0SystemdCgroup truesandbox_image m.daocloud.io/registry.k8s.io/pause:3.8config_path /etc/containerd/certs.dconfig_path /etc/containerd/certs.d
mkdir: created directory /etc/containerd/certs.d
mkdir: created directory /etc/containerd/certs.d/docker.io
Created symlink /etc/systemd/system/multi-user.target.wants/containerd.service → /etc/systemd/system/containerd.service.
{status: {conditions: [{type: RuntimeReady,status: true,reason: ,message: },{type: NetworkReady,status: true,reason: ,message: }]},cniconfig: {PluginDirs: [/opt/cni/bin],PluginConfDir: /etc/cni/net.d,PluginMaxConfNum: 1,Prefix: eth,Networks: [{Config: {Name: cni-loopback,CNIVersion: 0.3.1,Plugins: [{Network: {type: loopback,ipam: {},dns: {}},Source: {\type\:\loopback\}}],Source: {\n\cniVersion\: \0.3.1\,\n\name\: \cni-loopback\,\n\plugins\: [{\n \type\: \loopback\\n}]\n}},IFName: lo},{Config: {Name: containerd-net,CNIVersion: 1.0.0,Plugins: [{Network: {type: bridge,ipam: {type: host-local},dns: {}},Source: {\bridge\:\cni0\,\ipMasq\:true,\ipam\:{\ranges\:[[{\subnet\:\10.88.0.0/16\}],[{\subnet\:\2001:4860:4860::/64\}]],\routes\:[{\dst\:\0.0.0.0/0\},{\dst\:\::/0\}],\type\:\host-local\},\isGateway\:true,\promiscMode\:true,\type\:\bridge\}},{Network: {type: portmap,capabilities: {portMappings: true},ipam: {},dns: {}},Source: {\capabilities\:{\portMappings\:true},\type\:\portmap\}}],Source: {\n \cniVersion\: \1.0.0\,\n \name\: \containerd-net\,\n \plugins\: [\n {\n \type\: \bridge\,\n \bridge\: \cni0\,\n \isGateway\: true,\n \ipMasq\: true,\n \promiscMode\: true,\n \ipam\: {\n \type\: \host-local\,\n \ranges\: [\n [{\n \subnet\: \10.88.0.0/16\\n }],\n [{\n \subnet\: \2001:4860:4860::/64\\n }]\n ],\n \routes\: [\n { \dst\: \0.0.0.0/0\ },\n { \dst\: \::/0\ }\n ]\n }\n },\n {\n \type\: \portmap\,\n \capabilities\: {\portMappings\: true}\n }\n ]\n}\n},IFName: eth0}]},config: {containerd: {snapshotter: overlayfs,defaultRuntimeName: runc,defaultRuntime: {runtimeType: ,runtimePath: ,runtimeEngine: ,PodAnnotations: [],ContainerAnnotations: [],runtimeRoot: ,options: {},privileged_without_host_devices: false,privileged_without_host_devices_all_devices_allowed: false,baseRuntimeSpec: ,cniConfDir: ,cniMaxConfNum: 0,snapshotter: ,sandboxMode: },untrustedWorkloadRuntime: {runtimeType: ,runtimePath: ,runtimeEngine: ,PodAnnotations: [],ContainerAnnotations: [],runtimeRoot: ,options: {},privileged_without_host_devices: false,privileged_without_host_devices_all_devices_allowed: false,baseRuntimeSpec: ,cniConfDir: ,cniMaxConfNum: 0,snapshotter: ,sandboxMode: },runtimes: {runc: {runtimeType: io.containerd.runc.v2,runtimePath: ,runtimeEngine: ,PodAnnotations: [],ContainerAnnotations: [],runtimeRoot: ,options: {BinaryName: ,CriuImagePath: ,CriuPath: ,CriuWorkPath: ,IoGid: 0,IoUid: 0,NoNewKeyring: false,NoPivotRoot: false,Root: ,ShimCgroup: ,SystemdCgroup: true},privileged_without_host_devices: false,privileged_without_host_devices_all_devices_allowed: false,baseRuntimeSpec: ,cniConfDir: ,cniMaxConfNum: 0,snapshotter: ,sandboxMode: podsandbox}},noPivot: false,disableSnapshotAnnotations: true,discardUnpackedLayers: false,ignoreBlockIONotEnabledErrors: false,ignoreRdtNotEnabledErrors: false},cni: {binDir: /opt/cni/bin,confDir: /etc/cni/net.d,maxConfNum: 1,setupSerially: false,confTemplate: ,ipPref: },registry: {configPath: /etc/containerd/certs.d,mirrors: {},configs: {},auths: {},headers: {}},imageDecryption: {keyModel: node},disableTCPService: true,streamServerAddress: 127.0.0.1,streamServerPort: 0,streamIdleTimeout: 4h0m0s,enableSelinux: false,selinuxCategoryRange: 1024,sandboxImage: m.daocloud.io/registry.k8s.io/pause:3.8,statsCollectPeriod: 10,systemdCgroup: false,enableTLSStreaming: false,x509KeyPairStreaming: {tlsCertFile: ,tlsKeyFile: },maxContainerLogSize: 16384,disableCgroup: false,disableApparmor: false,restrictOOMScoreAdj: false,maxConcurrentDownloads: 3,disableProcMount: false,unsetSeccompProfile: ,tolerateMissingHugetlbController: true,disableHugetlbController: true,device_ownership_from_security_context: false,
docker.io/library/redis:alpine: resolved ||
index-sha256:7635b0bfdd7dd8552b4b31d6541fef07b734614045b45a52fd5cc27c9dada9e2: done ||
manifest-sha256:3487aa5cf06dceb38202b06bba45b6e6d8a92288848698a6518eee5f63a293a3: done ||
config-sha256:435993df2c8d3a1508114cea2dd12ef4d6cbab5c7238bb8e587f20b18982c834: done ||
layer-sha256:cc6fccbbefa3f40f40b56bb79e12ea0d1712b5b2421e04b1e0086c222e43da52: done ||
layer-sha256:034c076ba1e793bb3f31ae4f06a1737a362a34ce9e843c6c15022cfbec955bb9: done ||
layer-sha256:dffcad17539bc6497d8dd4bd24f6628013eb413b988050010925cb2ce4382291: done ||
layer-sha256:5913474e0f39b23ca3d952a08c0008364c774a07984efaf8ad3a5ba8e04d31f6: done ||
layer-sha256:4abcf20661432fb2d719aaf90656f55c287f8ca915dc1c92ec14ff61e67fbaf8: done ||
layer-sha256:5c3180d102093de53ebc54b965de6754cbbb344a30e2bf2f5d17cbc3ac1d50b5: done ||
layer-sha256:f76326fd8e6b93c5ddd86c0795b0a04c186faf08ce032c102aa9b3671276019a: done ||
layer-sha256:4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1: done ||
elapsed: 13.8s total: 14.7 M (1.1 MiB/s)
unpacking linux/amd64 sha256:7635b0bfdd7dd8552b4b31d6541fef07b734614045b45a52fd5cc27c9dada9e2...
done: 272.507979ms
rootcontainerd:~#
