# containerd-guide

**Repository Path**: devops-workspace/containerd-guide

## Basic Information

- **Project Name**: containerd-guide
- **Description**: https://github.com/devops-ws/containerd-guide/
- **Primary Language**: Unknown
- **License**: Not specified
- **Default Branch**: master
- **Homepage**: None
- **GVP Project**: No

## Statistics

- **Stars**: 0
- **Forks**: 0
- **Created**: 2023-02-08
- **Last Updated**: 2023-02-08

## Categories & Tags

**Categories**: Uncategorized

**Tags**: None

## README

# containerd-guide

## 安装
```shell
hd i containerd
hd i containernetworking/plugins
```

[配置文件](https://github.com/containerd/containerd/blob/main/docs/man/containerd-config.toml.5.md)：`/etc/containerd/config.tom`

## 启动
```shell
containerd
```

## 拉取镜像
```shell
crictl pull alpine 
```

## 设置镜像
下面的配置文件将多个 Registry 映射到了本地部署的 Harbor 上：

* docker.io -> harbor/cache
* quay.io -> habor/quay.io
* ghcr.io -> harbor/ghcr.io

```toml
# vim /etc/containerd/config.toml
version = 2

[plugins."io.containerd.grpc.v1.cri".registry]
  [plugins."io.containerd.grpc.v1.cri".registry.mirrors]
    [plugins."io.containerd.grpc.v1.cri".registry.mirrors."10.121.218.184:30002"]
      endpoint = ["http://10.121.218.184:30002"]
    [plugins."io.containerd.grpc.v1.cri".registry.mirrors."docker.io"]
      endpoint = ["http://10.121.218.184:30002/v2/cache", "https://qtzsrp4m.mirror.aliyuncs.com/v2"]
    [plugins."io.containerd.grpc.v1.cri".registry.mirrors."quay.io"]
      endpoint = ["http://10.121.218.184:30002/v2/quay.io"]
    [plugins."io.containerd.grpc.v1.cri".registry.mirrors."ghcr.io"]
      endpoint = ["http://10.121.218.184:30002/v2/ghcr.io"]
    [plugins."io.containerd.grpc.v1.cri".registry.mirrors."k8s.gcr.io"]
      endpoint = ["https://registry.k8s.io/v2"]

[plugins."io.containerd.grpc.v1.cri".registry.configs."10.121.218.184:30002".tls]
  insecure_skip_verify = true

[plugins."io.containerd.grpc.v1.cri".registry.configs]
  [plugins."io.containerd.grpc.v1.cri".registry.configs."10.121.218.184:30002".auth]
    username = "robot_readonly"
    password = 'npcCnfZicoeZTupZnX39ew9cfIvldyZV'
```

## 镜像推送
```shell
ctr image pull registry.cn-hangzhou.aliyuncs.com/google_containers/coredns:v1.8.0 --all-platforms
ctr image tag registry.cn-hangzhou.aliyuncs.com/google_containers/coredns:v1.8.0 10.121.218.184:30002/registry.k8s.io/coredns:v1.8.0
ctr image push 10.121.218.184:30002/registry.k8s.io/coredns:v1.8.0 --plain-http --user user:pass
```

## Troubleshotting
```
cat <<EOF >/etc/crictl.yaml
runtime-endpoint: unix:///run/containerd/containerd.sock
image-endpoint: unix:///run/containerd/containerd.sock
timeout: 2
debug: true
pull-image-on-create: false
EOF
```

## 树莓派
```shell
hd install runc --arch armhf
hd i containernetworking/plugins
hd i k9s
```