Containerd镜像配置

配置 Containerd 镜像加速域名，提高镜像拉取速度

1、配置 crictl

vim /etc/containerd/config.toml

在 [plugins."io.containerd.grpc.v1.cri".registry.mirrors] 后面添加镜像，注意前面的缩进（空格）

配置 docker.io 的示例

      [plugins."io.containerd.grpc.v1.cri".registry.mirrors]
        [plugins."io.containerd.grpc.v1.cri".registry.mirrors."docker.io"]
          endpoint = ["https://hnkfbj7x.mirror.aliyuncs.com"]

配置k8s.gcr.io的示例

	  [plugins."io.containerd.grpc.v1.cri".registry.mirrors]
		[plugins."io.containerd.grpc.v1.cri".registry.mirrors."k8s.gcr.io"]
          endpoint = ["https://registry.aliyuncs.com/k8sxio"]

配置私有harbor镜像仓库示例

     [plugins."io.containerd.grpc.v1.cri".registry.mirrors]
     	[plugins."io.containerd.grpc.v1.cri".registry.mirrors."local.harbor.top"]
          endpoint = ["https://local.harbor.top"]

（不配置可以忽略）如果配置了harbor镜像仓库，还需要在[plugins."io.containerd.grpc.v1.cri".registry.configs]后面配置登录信息

 	[plugins."io.containerd.grpc.v1.cri".registry.configs]
        [plugins."io.containerd.grpc.v1.cri".registry.configs."local.harbor.top".tls]
          insecure_skip_verify = true
          ca_file = "/etc/docker/certs.d/local.harbor.top/ca.crt"
        [plugins."io.containerd.grpc.v1.cri".registry.configs."local.harbor.top".auth]
          username = "admin"
          password = "Harbor12345"

2、重启服务

systemctl restart containerd

3、检查 crictl 配置

# 查看是否配置 crictl
cat /etc/crictl.yaml
# 如果没有配置，则执行命令进行配置
cat <<EOF > /etc/crictl.yaml
runtime-endpoint: unix:///run/containerd/containerd.sock
image-endpoint: unix:///run/containerd/containerd.sock
timeout: 10
debug: true

EOF

# 查看生成的配置文件
cat /etc/crictl.yaml

# 查看配置是否生效
crictl info

4、测试拉取镜像

# 拉取镜像测试
crictl pull docker.io/library/maven:3.6.3-openjdk-17

# 查看拉取的结果
crictl image