安装 containerd 容器运行时

修改内核参数，启用 IPv4 数据包转发

cat > /etc/sysctl.d/k8s.conf << EOF
net.ipv4.ip_forward = 1
EOF

sysctl --system

安装 containerd 容器运行时

yum install containerd lvm2 -y
systemctl enable --now containerd.service

初始化 containerd 配置文件

containerd config default > /etc/containerd/config.toml

修改配置文件

crictl config runtime-endpoint unix:///var/run/containerd/containerd.sock

修改第61行sandbox_image为当前K8S对应版本的镜像

61     sandbox_image = "registry.zcloudedu.com/k8s.io/kubernetes/pause:3.9"

修改 cgroup 驱动

sed -i 's#SystemdCgroup = false#SystemdCgroup = true#' /etc/containerd/config.toml

修改 containerd 配置

# cat/etc/containerd/config.toml
[plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc]
  [plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc.options]
    SystemdCgroup = true

# /etc/containerd/config.toml
sed -i 's/^disabled_plugins/#disabled_plugins/g' /etc/containerd/config.toml
systemctl restart containerd.service

# /etc/containerd/config.toml
[plugins]
  [plugins.cri]
    sandbox_image = "registry.k8s.io/pause:3.9"
    [plugins.cri.registry.mirrors]
    [plugins.cri.registry.mirrors."registry.k8s.io"]
      endpoint = ["https://registry-k8s-io.mirrors.sjtug.sjtu.edu.cn"]

    [plugins.cri.containerd.runtimes.runc]
      [plugins.cri.containerd.runtimes.runc.options]
        SystemdCgroup = true

[plugins]
  [plugins."io.containerd.grpc.v1.cri"]
    sandbox_image = "registry.k8s.io/pause:3.9"

      [plugins."io.containerd.grpc.v1.cri".registry]
        config_path = "/etc/containerd/certs.d"
        [plugins."io.containerd.grpc.v1.cri".registry.mirrors]
          [plugins."io.containerd.grpc.v1.cri".registry.mirrors."registry.k8s.io"]
            endpoint = ["https://registry-k8s-io.mirrors.sjtug.sjtu.edu.cn"]

    [plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc]
      [plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc.options]
        SystemdCgroup = true



[root@master ~]# tree /etc/containerd/
/etc/containerd/
├── certs.d
│   └── registry.k8s.io
│       └── hosts.toml

[root@master ~]# cat /etc/containerd/certs.d/registry.k8s.io/hosts.toml
server = "https://registry.k8s.io"

[host."https://registry-k8s-io.mirrors.sjtug.sjtu.edu.cn"]
  capabilities = ["pull", "resolve"]
  skip_verify = true