Containerd v1.6.4安装

Containerd 安装
版本：1.6.4

移除docker，用下面的命令进行卸载
yum remove docker docker-client docker-client-latest docker-common docker-latest docker-latest-logrotate docker-logrotate docker-engine

在安装Containerd前，我们需要优先升级libseccomp,在centos7中yum下载libseccomp的版本是2.3的，版本不满足我们最新containerd的需求，需要下载2.4以上的

#卸载原来的
[root@aliyuan-ops-01 ~]# rpm -qa | grep libseccomp
libseccomp-devel-2.3.1-4.el7.x86_64
libseccomp-2.3.1-4.el7.x86_64
[root@aliyuan-ops-01 ~]# rpm -e libseccomp-devel-2.3.1-4.el7.x86_64 --nodeps
[root@aliyuan-ops-01 ~]# rpm -e libseccomp-2.3.1-4.el7.x86_64 --nodeps
#下载高于2.4以上的包
[root@aliyuan-ops-01 ~]# wget http://rpmfind.net/linux/centos/8-stream/BaseOS/x86_64/os/Packages/libseccomp-2.5.1-1.el8.x86_64.rpm
#安装
[root@aliyuan-ops-01 ~]# rpm -ivh libseccomp-2.5.1-1.el8.x86_64.rpm
warning: libseccomp-2.5.1-1.el8.x86_64.rpm: Header V3 RSA/SHA256 Signature, key ID 8483c65d: NOKEY
Preparing… ################################# [100%]
Updating / installing…
1:libseccomp-2.5.1-1.el8 ################################# [100%]
#查看当前版本
[root@web01 ~]# rpm -qa | grep libseccomp
libseccomp-2.5.1-1.el8.x86_64
下载安装containerd
github地址:https://containerd.io/downloads/

#下载tar.gz包
#containerd工具包，包含cri runc等
wget https://github.com/containerd/containerd/releases/download/v1.6.4/cri-containerd-cni-1.6.4-linux-amd64.tar.gz
#备用下载地址
wget https://d.frps.cn/file/kubernetes/containerd/cri-containerd-cni-1.6.4-linux-amd64.tar.gz
工具包文件如下
#cri-containerd-cni会将我们整个containerd相关的依赖都进行下载下来
[root@k8s-01 containerd]# tar zxvf cri-containerd-cni-1.6.4-linux-amd64.tar.gz -C / #我们直接让它给我们对应的目录给替换掉
etc/
etc/systemd/
etc/systemd/system/
etc/systemd/system/containerd.service
etc/crictl.yaml
etc/cni/
etc/cni/net.d/
etc/cni/net.d/10-containerd-net.conflist
usr/
usr/local/
usr/local/sbin/
usr/local/sbin/runc
usr/local/bin/
usr/local/bin/crictl
usr/local/bin/ctd-decoder
usr/local/bin/ctr
usr/local/bin/containerd-shim
usr/local/bin/containerd
usr/local/bin/containerd-shim-runc-v1
usr/local/bin/critest
usr/local/bin/containerd-shim-runc-v2
usr/local/bin/containerd-stress
opt/
opt/containerd/
opt/containerd/cluster/
opt/containerd/cluster/version
opt/containerd/cluster/gce/
opt/containerd/cluster/gce/cni.template
opt/containerd/cluster/gce/env
opt/containerd/cluster/gce/configure.sh
opt/containerd/cluster/gce/cloud-init/
opt/containerd/cluster/gce/cloud-init/node.yaml
opt/containerd/cluster/gce/cloud-init/master.yaml
opt/cni/
opt/cni/bin/
opt/cni/bin/firewall
opt/cni/bin/portmap
opt/cni/bin/host-local
opt/cni/bin/ipvlan
opt/cni/bin/host-device
opt/cni/bin/sbr
opt/cni/bin/vrf
opt/cni/bin/static
opt/cni/bin/tuning
opt/cni/bin/bridge
opt/cni/bin/macvlan
opt/cni/bin/bandwidth
opt/cni/bin/vlan
opt/cni/bin/dhcp
opt/cni/bin/loopback
opt/cni/bin/ptp
上面的文件都是二进制文件，直接移动到对应的目录并配置好环境变量就可以进行使用了。

#创建配置文件目录
[root@aliyuan-ops-01 ~]# mkdir /etc/containerd -p
#生成默认配置文件
[root@aliyuan-ops-01 ~]# containerd config default > /etc/containerd/config.toml
#–config,-c可以在启动守护程序时更改此路径
#配置文件的默认路径位于/etc/containerd/config.toml
替换默认pause镜像地址

默认情况下k8s.gcr.io无法访问，所以使用我提供的阿里云镜像仓库地址即可

sed -i ‘s/k8s.gcr.io/registry.cn-beijing.aliyuncs.com/abcdocker/’ /etc/containerd/config.toml
#所有节点更换默认镜像地址
#我这里使用阿里云地址
配置systemd作为容器的cgroup driver

sed -i ‘s/SystemdCgroup = false/SystemdCgroup = true/’ /etc/containerd/config.toml
Containerd官方操作手册

默认cri-containerd-cni包中会有containerd启动脚本，我们已经解压到对应的目录，可以直接调用启动

[root@aliyuan-ops-01 ~]# systemctl enable containerd --now   
Created symlink from /etc/systemd/system/multi-user.target.wants/containerd.service to /etc/systemd/system/containerd.service.
[root@aliyuan-ops-01 ~]# systemctl status containerd

● containerd.service - containerd container runtime
Loaded: loaded (/etc/systemd/system/containerd.service; enabled; vendor preset: disabled)
Active: active (running) since Tue 2022-06-07 09:00:02 CST; 12min ago
Docs: https://containerd.io
Process: 12310 ExecStartPre=/sbin/modprobe overlay (code=exited, status=0/SUCCESS)
Main PID: 12312 (containerd)
Tasks: 9
Memory: 21.1M
CGroup: /system.slice/containerd.service
└─12312 /usr/local/bin/containerd

Jun 07 09:00:02 aliyuan-ops-01 systemd[1]: Started containerd container runtime.
Jun 07 09:00:02 aliyuan-ops-01 containerd[12312]: time=“2022-06-07T09:00:02.139049425+08:00” level=info msg=serving… address=/run/containerd/containerd.sock.ttrpc
Jun 07 09:00:02 aliyuan-ops-01 containerd[12312]: time=“2022-06-07T09:00:02.139164868+08:00” level=info msg=serving… address=/run/containerd/containerd.sock
Jun 07 09:00:02 aliyuan-ops-01 containerd[12312]: time=“2022-06-07T09:00:02.139251322+08:00” level=info msg=“containerd successfully booted in 0.031661s”
Jun 07 09:00:02 aliyuan-ops-01 containerd[12312]: time=“2022-06-07T09:00:02.150307399+08:00” level=info msg=“Start subscribing containerd event”
Jun 07 09:00:02 aliyuan-ops-01 containerd[12312]: time=“2022-06-07T09:00:02.150372592+08:00” level=info msg=“Start recovering state”
Jun 07 09:00:02 aliyuan-ops-01 containerd[12312]: time=“2022-06-07T09:00:02.150465391+08:00” level=info msg=“Start event monitor”
Jun 07 09:00:02 aliyuan-ops-01 containerd[12312]: time=“2022-06-07T09:00:02.150485982+08:00” level=info msg=“Start snapshots syncer”
Jun 07 09:00:02 aliyuan-ops-01 containerd[12312]: time=“2022-06-07T09:00:02.150502620+08:00” level=info msg=“Start cni network conf syncer for default”
Jun 07 09:00:02 aliyuan-ops-01 containerd[12312]: time=“2022-06-07T09:00:02.150513592+08:00” level=info msg=“Start streaming server”
Hint: Some lines were ellipsized, use -l to show in full.

ctr在我们解压包中已经附带了，直接可以使用

[root@aliyuan-ops-01 ~]# ctr version
Client:
Version: v1.6.4
Revision: 212e8b6fa2f44b9c21b2798135fc6fb7c53efc16
Go version: go1.17.9

Server:
Version: v1.6.4
Revision: 212e8b6fa2f44b9c21b2798135fc6fb7c53efc16
UUID: 35d275f9-417e-441d-9ddc-3553f28b657a

可以使用下面命令查看containerd版本号
[root@aliyuan-ops-01 ~]# containerd --version
containerd github.com/containerd/containerd v1.6.4 212e8b6fa2f44b9c21b2798135fc6fb7c53efc16