{"id":10845,"date":"2023-02-27T16:28:32","date_gmt":"2023-02-27T08:28:32","guid":{"rendered":"https:\/\/www.gbase8.cn\/?p=10845"},"modified":"2023-06-27T17:09:32","modified_gmt":"2023-06-27T09:09:32","slug":"gcdw%e6%8a%80%e6%9c%af%e6%a0%88-docker%e8%bf%90%e8%a1%8c%e7%8e%af%e5%a2%83","status":"publish","type":"post","link":"https:\/\/www.gbase8.cn\/en\/10845","title":{"rendered":"\u5357\u5927\u901a\u7528GCDW\u6280\u672f\u6808- docker\u8fd0\u884c\u73af\u5883\u642d\u5efa"},"content":{"rendered":"<p>GCDW\u8fd0\u884c\u5728k8s\u4e0a\uff0c\u672c\u6587\u4ecb\u7ecddocker\u8fd0\u884c\u73af\u5883\u7684\u5b89\u88c5\uff0c\u7279\u522b\u662fcontainerd\u670d\u52a1\u7684\u914d\u7f6e\uff0c\u4e0eharbor\u955c\u50cf\u96c6\u7fa4\u7684\u4ea4\u4e92\u8bc1\u4e66\u7684\u914d\u7f6e\u7b49\u3002<\/p>\n\n\n\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_84 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Directory Navigation<\/p>\n<label for=\"ez-toc-cssicon-toggle-item-6a2afd7523d74\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewbox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewbox=\"0 0 24 24\" version=\"1.2\" baseprofile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\"  id=\"ez-toc-cssicon-toggle-item-6a2afd7523d74\"  aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.gbase8.cn\/en\/10845\/#%E4%B8%8A%E4%B8%80%E6%AD%A5\" >\u4e0a\u4e00\u6b65<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.gbase8.cn\/en\/10845\/#%E5%AE%89%E8%A3%85docker\" >\u5b89\u88c5docker<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.gbase8.cn\/en\/10845\/#%E5%AE%89%E8%A3%85docker-compose\" >\u5b89\u88c5docker-compose<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.gbase8.cn\/en\/10845\/#%E4%BF%AE%E6%94%B9docker%E7%9A%84%E9%95%9C%E5%83%8F%E6%9C%8D%E5%8A%A1%E5%99%A8%E9%85%8D%E7%BD%AE\" >\u4fee\u6539docker\u7684\u955c\u50cf\u670d\u52a1\u5668\u914d\u7f6e<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.gbase8.cn\/en\/10845\/#%E4%BF%AE%E6%94%B9containerd%E7%9A%84%E9%85%8D%E7%BD%AE\" >\u4fee\u6539containerd\u7684\u914d\u7f6e<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.gbase8.cn\/en\/10845\/#%E7%94%9F%E6%88%90_CNI%E9%85%8D%E7%BD%AE%E6%96%87%E4%BB%B6etccninetd10-containerd-netconflist\" >\u751f\u6210 CNI\u914d\u7f6e\u6587\u4ef6\/etc\/cni\/net.d\/10-containerd-net.conflist<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/www.gbase8.cn\/en\/10845\/#%E9%85%8D%E7%BD%AE%E5%BC%80%E6%9C%BA%E8%87%AA%E5%90%AF%E5%8A%A8\" >\u914d\u7f6e\u5f00\u673a\u81ea\u542f\u52a8<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/www.gbase8.cn\/en\/10845\/#%E9%87%8D%E5%90%AF%E6%9C%8D%E5%8A%A1\" >\u91cd\u542f\u670d\u52a1<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/www.gbase8.cn\/en\/10845\/#%E6%9F%A5%E7%9C%8B%E6%9C%8D%E5%8A%A1%E6%97%A5%E5%BF%97\" >\u67e5\u770b\u670d\u52a1\u65e5\u5fd7<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/www.gbase8.cn\/en\/10845\/#%E4%B8%8B%E4%B8%80%E6%AD%A5\" >\u4e0b\u4e00\u6b65<\/a><\/li><\/ul><\/nav><\/div>\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"%E4%B8%8A%E4%B8%80%E6%AD%A5\"><\/span>\u4e0a\u4e00\u6b65<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p><a href=\"https:\/\/www.gbase8.cn\/en\/10814\/\">GCDW\u6280\u672f\u6808-kubernets\u64cd\u4f5c\u7cfb\u7edf\u73af\u5883\u51c6\u5907<\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"%E5%AE%89%E8%A3%85docker\"><\/span>\u5b89\u88c5docker<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>\u5982\u679c\u6ca1\u6709docker yum\u6e90\uff0c\u53ef\u4ee5\u53c2\u8003\u4e0a\u4e00\u6b65\u7684<a href=\"https:\/\/www.gbase8.cn\/en\/10814\/?hilite=docker-ce.repo#yum%E6%BA%90%E8%AE%BE%E7%BD%AE\">\u64cd\u4f5c\u7cfb\u7edf\u73af\u5883\u51c6\u5907\u6587\u7ae0<\/a>\u3002 <\/p>\n\n\n\n<pre class=\"wp-block-code has-small-font-size\"><code>yum install docker-ce docker-ce-cli containerd.io docker-compose-plugin\n\n&#91;root@vm246 172.16.3.246]# yum install docker-ce docker-ce-cli containerd.io docker-compose-plugin\nLoaded plugins: fastestmirror, langpacks\nRepository base is listed more than once in the configuration\nRepository updates is listed more than once in the configuration\nRepository extras is listed more than once in the configuration\nRepository centosplus is listed more than once in the configuration\nLoading mirror speeds from cached hostfile\n * base: mirrors.bfsu.edu.cn\n * extras: mirrors.bfsu.edu.cn\n * updates: mirrors.aliyun.com\nResolving Dependencies\n--&gt; Running transaction check\n---&gt; Package containerd.io.x86_64 0:1.6.21-3.1.el7 will be installed\n--&gt; Processing Dependency: container-selinux &gt;= 2:2.74 for package: containerd.io-1.6.21-3.1.el7.x86_64\n---&gt; Package docker-ce.x86_64 3:24.0.2-1.el7 will be installed\n--&gt; Processing Dependency: docker-ce-rootless-extras for package: 3:docker-ce-24.0.2-1.el7.x86_64\n---&gt; Package docker-ce-cli.x86_64 1:24.0.2-1.el7 will be installed\n--&gt; Processing Dependency: docker-buildx-plugin for package: 1:docker-ce-cli-24.0.2-1.el7.x86_64\n---&gt; Package docker-compose-plugin.x86_64 0:2.18.1-1.el7 will be installed\n--&gt; Running transaction check\n---&gt; Package container-selinux.noarch 2:2.119.2-1.911c772.el7_8 will be installed\n---&gt; Package docker-buildx-plugin.x86_64 0:0.10.5-1.el7 will be installed\n---&gt; Package docker-ce-rootless-extras.x86_64 0:24.0.2-1.el7 will be installed\n--&gt; Processing Dependency: fuse-overlayfs &gt;= 0.7 for package: docker-ce-rootless-extras-24.0.2-1.el7.x86_64\n--&gt; Processing Dependency: slirp4netns &gt;= 0.4 for package: docker-ce-rootless-extras-24.0.2-1.el7.x86_64\n--&gt; Running transaction check\n---&gt; Package fuse-overlayfs.x86_64 0:0.7.2-6.el7_8 will be installed\n--&gt; Processing Dependency: libfuse3.so.3(FUSE_3.2)(64bit) for package: fuse-overlayfs-0.7.2-6.el7_8.x86_64\n--&gt; Processing Dependency: libfuse3.so.3(FUSE_3.0)(64bit) for package: fuse-overlayfs-0.7.2-6.el7_8.x86_64\n--&gt; Processing Dependency: libfuse3.so.3()(64bit) for package: fuse-overlayfs-0.7.2-6.el7_8.x86_64\n---&gt; Package slirp4netns.x86_64 0:0.4.3-4.el7_8 will be installed\n--&gt; Running transaction check\n---&gt; Package fuse3-libs.x86_64 0:3.6.1-4.el7 will be installed\n--&gt; Finished Dependency Resolution\n\nDependencies Resolved\n\n=====================================================================================================================================================================\n Package                                       Arch                       Version                                         Repository                            Size\n=====================================================================================================================================================================\nInstalling:\n containerd.io                                 x86_64                     1.6.21-3.1.el7                                  docker-ce-stable                      34 M\n docker-ce                                     x86_64                     3:24.0.2-1.el7                                  docker-ce-stable                      24 M\n docker-ce-cli                                 x86_64                     1:24.0.2-1.el7                                  docker-ce-stable                      13 M\n docker-compose-plugin                         x86_64                     2.18.1-1.el7                                    docker-ce-stable                      12 M\nInstalling for dependencies:\n container-selinux                             noarch                     2:2.119.2-1.911c772.el7_8                       extras                                40 k\n docker-buildx-plugin                          x86_64                     0.10.5-1.el7                                    docker-ce-stable                      12 M\n docker-ce-rootless-extras                     x86_64                     24.0.2-1.el7                                    docker-ce-stable                     9.1 M\n fuse-overlayfs                                x86_64                     0.7.2-6.el7_8                                   extras                                54 k\n fuse3-libs                                    x86_64                     3.6.1-4.el7                                     extras                                82 k\n slirp4netns                                   x86_64                     0.4.3-4.el7_8                                   extras                                81 k\n\nTransaction Summary\n=====================================================================================================================================================================\nInstall  4 Packages (+6 Dependent packages)\n\nTotal download size: 105 M\nInstalled size: 372 M\nIs this ok &#91;y\/d\/N]: y\nDownloading packages:\n(1\/10): container-selinux-2.119.2-1.911c772.el7_8.noarch.rpm                                                                                  |  40 kB  00:00:00\nwarning: \/var\/cache\/yum\/x86_64\/7\/docker-ce-stable\/packages\/docker-buildx-plugin-0.10.5-1.el7.x86_64.rpm: Header V4 RSA\/SHA512 Signature, key ID 621e9f35: NOKEY6 ETA\nPublic key for docker-buildx-plugin-0.10.5-1.el7.x86_64.rpm is not installed\n(2\/10): docker-buildx-plugin-0.10.5-1.el7.x86_64.rpm                                                                                          |  12 MB  00:00:07\n(3\/10): containerd.io-1.6.21-3.1.el7.x86_64.rpm                                                                                               |  34 MB  00:00:18\n(4\/10): docker-ce-24.0.2-1.el7.x86_64.rpm                                                                                                     |  24 MB  00:00:13\n(5\/10): docker-ce-rootless-extras-24.0.2-1.el7.x86_64.rpm                                                                                     | 9.1 MB  00:00:04\n(6\/10): fuse3-libs-3.6.1-4.el7.x86_64.rpm                                                                                                     |  82 kB  00:00:00\n(7\/10): fuse-overlayfs-0.7.2-6.el7_8.x86_64.rpm                                                                                               |  54 kB  00:00:00\n(8\/10): slirp4netns-0.4.3-4.el7_8.x86_64.rpm                                                                                                  |  81 kB  00:00:00\n(9\/10): docker-ce-cli-24.0.2-1.el7.x86_64.rpm                                                                                                 |  13 MB  00:00:07\n(10\/10): docker-compose-plugin-2.18.1-1.el7.x86_64.rpm                                                                                        |  12 MB  00:00:05\n---------------------------------------------------------------------------------------------------------------------------------------------------------------------\nTotal                                                                                                                                3.4 MB\/s | 105 MB  00:00:31\nRetrieving key from https:\/\/mirrors.aliyun.com\/docker-ce\/linux\/centos\/gpg\nImporting GPG key 0x621E9F35:\n Userid     : \"Docker Release (CE rpm) &lt;docker@docker.com&gt;\"\n Fingerprint: 060a 61c5 1b55 8a7f 742b 77aa c52f eb6b 621e 9f35\n From       : https:\/\/mirrors.aliyun.com\/docker-ce\/linux\/centos\/gpg\nIs this ok &#91;y\/N]: y\nRunning transaction check\nRunning transaction test\nTransaction test succeeded\nRunning transaction\n  Installing : 2:container-selinux-2.119.2-1.911c772.el7_8.noarch                                                                                               1\/10\n  Installing : containerd.io-1.6.21-3.1.el7.x86_64                                                                                                              2\/10\n  Installing : docker-buildx-plugin-0.10.5-1.el7.x86_64                                                                                                         3\/10\n  Installing : slirp4netns-0.4.3-4.el7_8.x86_64                                                                                                                 4\/10\n  Installing : fuse3-libs-3.6.1-4.el7.x86_64                                                                                                                    5\/10\n  Installing : fuse-overlayfs-0.7.2-6.el7_8.x86_64                                                                                                              6\/10\n  Installing : docker-compose-plugin-2.18.1-1.el7.x86_64                                                                                                        7\/10\n  Installing : 1:docker-ce-cli-24.0.2-1.el7.x86_64                                                                                                              8\/10\n  Installing : docker-ce-rootless-extras-24.0.2-1.el7.x86_64                                                                                                    9\/10\n  Installing : 3:docker-ce-24.0.2-1.el7.x86_64                                                                                                                 10\/10\n  Verifying  : 3:docker-ce-24.0.2-1.el7.x86_64                                                                                                                  1\/10\n  Verifying  : docker-compose-plugin-2.18.1-1.el7.x86_64                                                                                                        2\/10\n  Verifying  : fuse3-libs-3.6.1-4.el7.x86_64                                                                                                                    3\/10\n  Verifying  : fuse-overlayfs-0.7.2-6.el7_8.x86_64                                                                                                              4\/10\n  Verifying  : containerd.io-1.6.21-3.1.el7.x86_64                                                                                                              5\/10\n  Verifying  : slirp4netns-0.4.3-4.el7_8.x86_64                                                                                                                 6\/10\n  Verifying  : 2:container-selinux-2.119.2-1.911c772.el7_8.noarch                                                                                               7\/10\n  Verifying  : 1:docker-ce-cli-24.0.2-1.el7.x86_64                                                                                                              8\/10\n  Verifying  : docker-ce-rootless-extras-24.0.2-1.el7.x86_64                                                                                                    9\/10\n  Verifying  : docker-buildx-plugin-0.10.5-1.el7.x86_64                                                                                                        10\/10\n\nInstalled:\n  containerd.io.x86_64 0:1.6.21-3.1.el7    docker-ce.x86_64 3:24.0.2-1.el7    docker-ce-cli.x86_64 1:24.0.2-1.el7    docker-compose-plugin.x86_64 0:2.18.1-1.el7\n\nDependency Installed:\n  container-selinux.noarch 2:2.119.2-1.911c772.el7_8        docker-buildx-plugin.x86_64 0:0.10.5-1.el7        docker-ce-rootless-extras.x86_64 0:24.0.2-1.el7\n  fuse-overlayfs.x86_64 0:0.7.2-6.el7_8                     fuse3-libs.x86_64 0:3.6.1-4.el7                   slirp4netns.x86_64 0:0.4.3-4.el7_8\n\nComplete!\n&#91;root@vm246 172.16.3.246]#\n<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"%E5%AE%89%E8%A3%85docker-compose\"><\/span>\u5b89\u88c5docker-compose<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>\u4e0b\u8f7ddocker-compose-linux-x86_64 \u5e76\u6539\u540dmv\u5230\/usr\/local\/bin\/docker-compose<\/p>\n\n\n\n<p>\u6ce8\u610f\u4e0b\u7248\u672c\u3002\u6211\u8fd9\u91cc\u90fd\u662fv2.18.1\uff0c\u548cdocker\u7684\u7248\u672c\u4e00\u81f4<\/p>\n\n\n\n<p>\u6587\u4ef650M,\u7f51\u901f\u4e0d\u884c\u7684\uff0c\u53ef\u4ee5\u53ea\u57281\u4e2a\u8282\u70b9\u4e0b\u8f7d\uff0c\u7136\u540e\u5206\u53d1\u5230\u522b\u7684\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code has-small-font-size\"><code>&#91;root@vm246 172.16.3.246]# wget https:\/\/github.com\/docker\/compose\/releases\/download\/v2.18.1\/docker-compose-linux-x86_64\n--2023-06-15 18:26:54--  https:\/\/github.com\/docker\/compose\/releases\/download\/v2.18.1\/docker-compose-linux-x86_64\nResolving github.com (github.com)... 20.205.243.166\nConnecting to github.com (github.com)|20.205.243.166|:443... connected.\nHTTP request sent, awaiting response... 302 Found\nLocation: https:\/\/objects.githubusercontent.com\/github-production-release-asset-2e65be\/15045751\/ebe621cd-2d6b-4306-b81c-eedc1b74e4da?X-Amz-Algorithm=AWS4-HMAC-SHA256&amp;X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20230616%2Fus-east-1%2Fs3%2Faws4_request&amp;X-Amz-Date=20230616T012655Z&amp;X-Amz-Expires=300&amp;X-Amz-Signature=bbb81932fba33ad38be588df03770e70da5aff4ea444931750dd8320c591717d&amp;X-Amz-SignedHeaders=host&amp;actor_id=0&amp;key_id=0&amp;repo_id=15045751&amp;response-content-disposition=attachment%3B%20filename%3Ddocker-compose-linux-x86_64&amp;response-content-type=application%2Foctet-stream &#91;following]\n--2023-06-15 18:26:55--  https:\/\/objects.githubusercontent.com\/github-production-release-asset-2e65be\/15045751\/ebe621cd-2d6b-4306-b81c-eedc1b74e4da?X-Amz-Algorithm=AWS4-HMAC-SHA256&amp;X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20230616%2Fus-east-1%2Fs3%2Faws4_request&amp;X-Amz-Date=20230616T012655Z&amp;X-Amz-Expires=300&amp;X-Amz-Signature=bbb81932fba33ad38be588df03770e70da5aff4ea444931750dd8320c591717d&amp;X-Amz-SignedHeaders=host&amp;actor_id=0&amp;key_id=0&amp;repo_id=15045751&amp;response-content-disposition=attachment%3B%20filename%3Ddocker-compose-linux-x86_64&amp;response-content-type=application%2Foctet-stream\nResolving objects.githubusercontent.com (objects.githubusercontent.com)... 185.199.108.133, 185.199.110.133, 185.199.109.133, ...\nConnecting to objects.githubusercontent.com (objects.githubusercontent.com)|185.199.108.133|:443... connected.\nHTTP request sent, awaiting response... 200 OK\nLength: 54537935 (52M) &#91;application\/octet-stream]\nSaving to: \u2018docker-compose-linux-x86_64\u2019\n\n100%&#91;===========================================================================================================================&gt;] 54,537,935  13.0KB\/s   in 35m 22s\n\n2023-06-15 19:02:18 (25.1 KB\/s) - \u2018docker-compose-linux-x86_64\u2019 saved &#91;54537935\/54537935]\n\n&#91;root@vm246 172.16.3.246]#\n\n&#91;root@vm246 172.16.3.246]# chmod a+x docker-compose-linux-x86_64\n&#91;root@vm246 172.16.3.246]# .\/docker-compose-linux-x86_64  -v\nDocker Compose version v2.18.1\n&#91;root@vm246 172.16.3.246]#\n\n&#91;root@vm246 172.16.3.246]# mv docker-compose-linux-x86_64  \/usr\/local\/bin\/docker-compose\n&#91;root@vm246 172.16.3.246]# docker-compose  -v\nDocker Compose version v2.18.1\n&#91;root@vm246 172.16.3.246]#\n<\/code><\/pre>\n\n\n\n<p>\u67e5\u770b\u7248\u672c<\/p>\n\n\n\n<pre class=\"wp-block-code has-small-font-size\"><code>&#91;root@vm246 ~]# docker compose version\nDocker Compose version v2.18.1\n&#91;root@vm246 ~]#<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"%E4%BF%AE%E6%94%B9docker%E7%9A%84%E9%95%9C%E5%83%8F%E6%9C%8D%E5%8A%A1%E5%99%A8%E9%85%8D%E7%BD%AE\"><\/span>\u4fee\u6539docker\u7684\u955c\u50cf\u670d\u52a1\u5668\u914d\u7f6e<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>\u5176\u4e2dhttps:\/\/172.16.3.249:8443\u662fharbor\u955c\u50cf\u670d\u52a1\u5668\u7684\u5730\u5740\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code has-small-font-size\"><code>&#91;root@k8s-81 ~]# cat \/etc\/docker\/daemon.json\n{\n \"registry-mirrors\": &#91;\n    \"https:\/\/registry.docker-cn.com\",\n    \"http:\/\/hub-mirror.c.163.com\",\n    \"https:\/\/docker.mirrors.ustc.edu.cn\",\n    \"https:\/\/172.16.3.249:8443\"\n  ],\n  \"insecure-registries\": &#91;\n  ],\n\n  \"log-opts\": {\n              \"max-size\": \"10m\"\n            }\n}\n<\/code><\/pre>\n\n\n\n<p>\u5c06harbor\u7684\u8bc1\u4e66\u590d\u5236\u8fc7\u6765<\/p>\n\n\n\n<pre class=\"wp-block-code has-small-font-size\"><code>mkdir -p \/etc\/docker\/certs.d\nscp -r 172.16.3.249:\/etc\/docker\/certs.d\/172.16.3.249\\:8443 \/etc\/docker\/certs.d\/\n\n\n\n&#91;root@vm246 172.16.3.246]# vi \/etc\/docker\/daemon.json\n&#91;root@vm246 172.16.3.246]# mkdir -p \/etc\/docker\/certs.d\n&#91;root@vm246 172.16.3.246]# scp -r 172.16.3.249:\/etc\/docker\/certs.d\/172.16.3.249\\:8443 \/etc\/docker\/certs.d\/\nThe authenticity of host '172.16.3.249 (172.16.3.249)' can't be established.\nECDSA key fingerprint is SHA256:Xs1gi6NKPEsAxLRIL2NHIv7jG1vt68oBlWZ0YUe\/Swk.\nECDSA key fingerprint is MD5:b4:9c:dd:e1:3c:42:28:8d:db:c5:a0:73:30:2f:60:78.\nAre you sure you want to continue connecting (yes\/no)? yes\nWarning: Permanently added '172.16.3.249' (ECDSA) to the list of known hosts.\nroot@172.16.3.249's password:\n172.16.3.249.cert                                                                                                                  100% 2053     1.4MB\/s   00:00\n172.16.3.249.crt                                                                                                                   100% 2053     2.1MB\/s   00:00\n172.16.3.249.key                                                                                                                   100% 3247     3.8MB\/s   00:00\nca.crt                                                                                                                             100% 2029     2.2MB\/s   00:00\n&#91;root@vm246 172.16.3.246]\n\n&#91;root@vm246 ~]# ll \/etc\/docker\/\ntotal 4\ndrwxr-xr-x. 3 root root  31 Jun 15 19:09 certs.d\n-rw-r--r--. 1 root root 274 Jun 15 19:07 daemon.json\n&#91;root@vm246 ~]# ll \/etc\/docker\/certs.d\/\ntotal 0\ndrwxr-xr-x. 2 root root 93 Jun 15 19:09 172.16.3.249:8443\n&#91;root@vm246 ~]# ll \/etc\/docker\/certs.d\/172.16.3.249\\:8443\/\ntotal 16\n-rw-r--r--. 1 root root 2053 Jun 15 19:09 172.16.3.249.cert\n-rw-r--r--. 1 root root 2053 Jun 15 19:09 172.16.3.249.crt\n-rw-r--r--. 1 root root 3247 Jun 15 19:09 172.16.3.249.key\n-rw-r--r--. 1 root root 2029 Jun 15 19:09 ca.crt\n&#91;root@vm246 ~]#\n\n\n<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"%E4%BF%AE%E6%94%B9containerd%E7%9A%84%E9%85%8D%E7%BD%AE\"><\/span>\u4fee\u6539containerd\u7684\u914d\u7f6e<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>\u5c06docker\u8bbf\u95eeharbor\u7684\u8bc1\u4e66\u590d\u5236\u4e00\u4efd<\/p>\n\n\n\n<pre class=\"wp-block-code has-small-font-size\"><code>cp -r \/etc\/docker\/certs.d\/172.16.3.249\\:8443\/ \/etc\/containerd\/\n\n\n&#91;root@vm246 ~]# ll \/etc\/containerd\/\ntotal 4\n-rw-r--r--. 1 root root 886 May  5 13:20 config.toml\n&#91;root@vm246 ~]# cp -r \/etc\/docker\/certs.d\/172.16.3.249\\:8443\/ \/etc\/containerd\/\n&#91;root@vm246 ~]# ll \/etc\/containerd\/\ntotal 4\ndrwxr-xr-x. 2 root root  93 Jun 15 19:11 172.16.3.249:8443\n-rw-r--r--. 1 root root 886 May  5 13:20 config.toml\n&#91;root@vm246 ~]# ll \/etc\/containerd\/172.16.3.249\\:8443\/\ntotal 16\n-rw-r--r--. 1 root root 2053 Jun 15 19:11 172.16.3.249.cert\n-rw-r--r--. 1 root root 2053 Jun 15 19:11 172.16.3.249.crt\n-rw-r--r--. 1 root root 3247 Jun 15 19:11 172.16.3.249.key\n-rw-r--r--. 1 root root 2029 Jun 15 19:11 ca.crt\n&#91;root@vm246 ~]#\n<\/code><\/pre>\n\n\n\n<p>\u751f\u6210\u9ed8\u8ba4\u914d\u7f6e\u6587\u4ef6<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>containerd config default &gt; \/etc\/containerd\/config.toml<\/code><\/pre>\n\n\n\n<p>\u4fee\u6539\u914d\u7f6e\u6587\u4ef6<\/p>\n\n\n\n<p>\u5c06containerd\u914d\u7f6e\u6587\u4ef6\u91cc\u9762\u7684pause:2.6\u7684\u955c\u50cf\uff0c\u6539\u6210\u80fd\u7528\u7684\uff0c\u6bd4\u5982. \u6ce8\u610f\u9879\u76ee\u540d\u79f0(\u5982\u4e0b\u4f8b\u5b50\u662flibrary\uff09\u3002\u955c\u50cf\u670d\u52a1\u5668\u8bc1\u4e66\u914d\u7f6e\u770b\u540e\u9762\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code has-small-font-size\"><code>\u4ee5\u524d\u7684 \nsandbox_image = \"registry.k8s.io\/pause:3.6\"\n\u66ff\u6362\u6210\nsandbox_image = \"172.16.3.249:8443\/library\/pause:3.6\"<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.gbase8.cn\/wp-content\/uploads\/2023\/06\/image-7.png\" alt=\"\" class=\"wp-image-12100\" width=\"454\" height=\"403\"\/><\/figure>\n\n\n\n<p>\u5982\u4e0a\u7684pause:3.6\u5982\u679c\u4e0d\u60f3\u81ea\u5df1\u4e0a\u4f20\u5230harbor,\u4e5f\u53ef\u4ee5\u4ece\u5176\u5b83\u4ed3\u5e93\u4e0b\u8f7d\uff0c\u6bd4\u5982<\/p>\n\n\n\n<pre class=\"wp-block-code has-small-font-size\"><code>&#91;root@vm248 ~]# ctr -n k8s.io i pull registry.aliyuncs.com\/google_containers\/pause:3.6\r\nregistry.aliyuncs.com\/google_containers\/pause:3.6:                                resolved       |++++++++++++++++++++++++++++++++++++++|\r\nindex-sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db:    done           |++++++++++++++++++++++++++++++++++++++|\r\nmanifest-sha256:c2280d2f5f56cf9c9a01bb64b2db4651e35efd6d62a54dcfc12049fe6449c5e4: done           |++++++++++++++++++++++++++++++++++++++|\r\nlayer-sha256:fbe1a72f5dcd08ba4ca3ce3468c742786c1f6578c1f6bb401be1c4620d6ff705:    done           |++++++++++++++++++++++++++++++++++++++|\r\nconfig-sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee:   done           |++++++++++++++++++++++++++++++++++++++|\r\nelapsed: 1.6 s                                                                    total:  5.1 Ki (3.2 KiB\/s)\r\nunpacking linux\/amd64 sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db...\r\ndone: 61.92735ms\r\n&#91;root@vm248 ~]# ctr -n k8s.io i tag registry.aliyuncs.com\/google_containers\/pause:3.6 registry.k8s.io\/pause:3.6\r\nregistry.k8s.io\/pause:3.6<\/code><\/pre>\n\n\n\n<p><\/p>\n\n\n\n<p>\u4fee\u6539\u670d\u52a1IP<\/p>\n\n\n\n<pre class=\"wp-block-code has-small-font-size\"><code>\u4ee5\u524d\u7684\nstream_server_address = \"127.0.0.1\"\n\u6539\u6210\uff0c \u5177\u4f53IP\u5df2\u6bcf\u4e2a\u8282\u70b9\u7684\u5b9e\u9645IP\u4e3a\u51c6\nstream_server_address = \"10.0.2.81\"<\/code><\/pre>\n\n\n\n<p>\u4e0b\u56fe\u4e2d\u4e3a\u4fee\u6539\u540e\u793a\u610f\uff0c\u5177\u4f53\u4ee5\u5b9e\u9645IP\u4e3a\u51c6<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"549\" height=\"192\" src=\"https:\/\/www.gbase8.cn\/wp-content\/uploads\/2023\/06\/image-9.png\" alt=\"\" class=\"wp-image-12103\"\/><\/figure>\n\n\n\n<p>\u914d\u7f6e\u955c\u50cf\u670d\u52a1\u5668\u8bc1\u4e66\uff0c\u5305\u62ec\u5982\u4e0b2\u4e2a\u90e8\u5206\uff0c\u5206\u522b\u662f\u955c\u50cf\u5730\u5740\u548c\u8bc1\u4e66\u6587\u4ef6\u4f4d\u7f6e<\/p>\n\n\n\n<pre class=\"wp-block-code has-small-font-size\"><code>    &#91;plugins.\"io.containerd.grpc.v1.cri\".registry]\n      config_path = \"\"\n\n      &#91;plugins.\"io.containerd.grpc.v1.cri\".registry.auths]\n\n      &#91;plugins.\"io.containerd.grpc.v1.cri\".registry.configs]\n       <span class=\"has-inline-color has-luminous-vivid-orange-color\"> &#91;plugins.\"io.containerd.grpc.v1.cri\".registry.configs.\"172.16.3.249:8443\".tls]<\/span>\n<span class=\"has-inline-color has-luminous-vivid-orange-color\">            ca_file = \"\/etc\/containerd\/172.16.3.249:8443\/ca.crt\"<\/span>\n\n      &#91;plugins.\"io.containerd.grpc.v1.cri\".registry.headers]\n\n      &#91;plugins.\"io.containerd.grpc.v1.cri\".registry.mirrors]\n<span class=\"has-inline-color has-luminous-vivid-orange-color\">        &#91;plugins.\"io.containerd.grpc.v1.cri\".registry.mirrors.\"172.16.3.249:8443\"]\n          endpoint = &#91;\"https:\/\/172.16.3.249:8443\"]<\/span><\/code><\/pre>\n\n\n\n<p>systemd\u914d\u7f6e,\u4ecefalse\u6539\u6210true<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>plugins.\"io.containerd.grpc.v1.cri\".containerd.runtimes.runc.options\n...\n SystemdCgroup = true<\/code><\/pre>\n\n\n\n<p>\u5b8c\u6574\u7684\u914d\u7f6e\u6587\u4ef6\u4f8b\u5b50\uff0c\u7ea2\u8272\u662f\u6211\u6539\u52a8\u8fc7\u7684\u90e8\u5206<\/p>\n\n\n\n<pre class=\"wp-block-code has-small-font-size\"><code>&#91;root@k8s-82 containerd]# cat config.toml\ndisabled_plugins = &#91;]\nimports = &#91;]\noom_score = 0\nplugin_dir = \"\"\nrequired_plugins = &#91;]\nroot = \"\/var\/lib\/containerd\"\nstate = \"\/run\/containerd\"\ntemp = \"\"\nversion = 2\n\n&#91;cgroup]\n  path = \"\"\n\n&#91;debug]\n  address = \"\"\n  format = \"\"\n  gid = 0\n  level = \"\"\n  uid = 0\n\n&#91;grpc]\n  address = \"\/run\/containerd\/containerd.sock\"\n  gid = 0\n  max_recv_message_size = 16777216\n  max_send_message_size = 16777216\n  tcp_address = \"\"\n  tcp_tls_ca = \"\"\n  tcp_tls_cert = \"\"\n  tcp_tls_key = \"\"\n  uid = 0\n\n&#91;metrics]\n  address = \"\"\n  grpc_histogram = false\n\n&#91;plugins]\n\n  &#91;plugins.\"io.containerd.gc.v1.scheduler\"]\n    deletion_threshold = 0\n    mutation_threshold = 100\n    pause_threshold = 0.02\n    schedule_delay = \"0s\"\n    startup_delay = \"100ms\"\n\n  &#91;plugins.\"io.containerd.grpc.v1.cri\"]\n    device_ownership_from_security_context = false\n    disable_apparmor = false\n    disable_cgroup = false\n    disable_hugetlb_controller = true\n    disable_proc_mount = false\n    disable_tcp_service = true\n    enable_selinux = false\n    enable_tls_streaming = false\n    enable_unprivileged_icmp = false\n    enable_unprivileged_ports = false\n    ignore_image_defined_volumes = false\n    max_concurrent_downloads = 3\n    max_container_log_line_size = 16384\n    netns_mounts_under_state_dir = false\n    restrict_oom_score_adj = false\n    sandbox_image =<span class=\"has-inline-color has-luminous-vivid-orange-color\"> \"172.16.3.249:8443\/library\/pause:3.6\"<\/span>\n    selinux_category_range = 1024\n    stats_collect_period = 10\n    stream_idle_timeout = \"4h0m0s\"\n    stream_server_address = <span class=\"has-inline-color has-luminous-vivid-orange-color\">\"10.0.2.82\"<\/span>\n    stream_server_port = \"0\"\n    systemd_cgroup = false\n    tolerate_missing_hugetlb_controller = true\n    unset_seccomp_profile = \"\"\n\n    &#91;plugins.\"io.containerd.grpc.v1.cri\".cni]\n      bin_dir = \"\/opt\/cni\/bin\"\n      conf_dir = \"\/etc\/cni\/net.d\"\n      conf_template = \"\"\n      ip_pref = \"\"\n      max_conf_num = 1\n\n    &#91;plugins.\"io.containerd.grpc.v1.cri\".containerd]\n      default_runtime_name = \"runc\"\n      disable_snapshot_annotations = true\n      discard_unpacked_layers = false\n      ignore_rdt_not_enabled_errors = false\n      no_pivot = false\n      snapshotter = \"overlayfs\"\n\n      &#91;plugins.\"io.containerd.grpc.v1.cri\".containerd.default_runtime]\n        base_runtime_spec = \"\"\n        cni_conf_dir = \"\"\n        cni_max_conf_num = 0\n        container_annotations = &#91;]\n        pod_annotations = &#91;]\n        privileged_without_host_devices = false\n        runtime_engine = \"\"\n        runtime_path = \"\"\n        runtime_root = \"\"\n        runtime_type = \"\"\n\n        &#91;plugins.\"io.containerd.grpc.v1.cri\".containerd.default_runtime.options]\n\n      &#91;plugins.\"io.containerd.grpc.v1.cri\".containerd.runtimes]\n\n        &#91;plugins.\"io.containerd.grpc.v1.cri\".containerd.runtimes.runc]\n          base_runtime_spec = \"\"\n          cni_conf_dir = \"\"\n          cni_max_conf_num = 0\n          container_annotations = &#91;]\n          pod_annotations = &#91;]\n          privileged_without_host_devices = false\n          runtime_engine = \"\"\n          runtime_path = \"\"\n          runtime_root = \"\"\n          runtime_type = \"io.containerd.runc.v2\"\n\n          &#91;plugins.\"io.containerd.grpc.v1.cri\".containerd.runtimes.runc.options]\n            BinaryName = \"\"\n            CriuImagePath = \"\"\n            CriuPath = \"\"\n            CriuWorkPath = \"\"\n            IoGid = 0\n            IoUid = 0\n            NoNewKeyring = false\n            NoPivotRoot = false\n            Root = \"\"\n            ShimCgroup = \"\"\n            <span class=\"has-inline-color has-luminous-vivid-orange-color\">SystemdCgroup = true<\/span>\n\n      &#91;plugins.\"io.containerd.grpc.v1.cri\".containerd.untrusted_workload_runtime]\n        base_runtime_spec = \"\"\n        cni_conf_dir = \"\"\n        cni_max_conf_num = 0\n        container_annotations = &#91;]\n        pod_annotations = &#91;]\n        privileged_without_host_devices = false\n        runtime_engine = \"\"\n        runtime_path = \"\"\n        runtime_root = \"\"\n        runtime_type = \"\"\n\n        &#91;plugins.\"io.containerd.grpc.v1.cri\".containerd.untrusted_workload_runtime.options]\n\n    &#91;plugins.\"io.containerd.grpc.v1.cri\".image_decryption]\n      key_model = \"node\"\n\n    &#91;plugins.\"io.containerd.grpc.v1.cri\".registry]\n      config_path = \"\"\n\n      &#91;plugins.\"io.containerd.grpc.v1.cri\".registry.auths]\n\n      &#91;plugins.\"io.containerd.grpc.v1.cri\".registry.configs]\n<span class=\"has-inline-color has-luminous-vivid-orange-color\">        &#91;plugins.\"io.containerd.grpc.v1.cri\".registry.configs.\"172.16.3.249:8443\".tls]\n            ca_file = \"\/etc\/containerd\/172.16.3.249:8443\/ca.crt\"<\/span>\n\n      &#91;plugins.\"io.containerd.grpc.v1.cri\".registry.headers]\n\n      &#91;plugins.\"io.containerd.grpc.v1.cri\".registry.mirrors]\n<span class=\"has-inline-color has-luminous-vivid-orange-color\">        &#91;plugins.\"io.containerd.grpc.v1.cri\".registry.mirrors.\"172.16.3.249:8443\"]\n          endpoint = &#91;\"https:\/\/172.16.3.249:8443\"]<\/span>\n\n    &#91;plugins.\"io.containerd.grpc.v1.cri\".x509_key_pair_streaming]\n      tls_cert_file = \"\"\n      tls_key_file = \"\"\n\n  &#91;plugins.\"io.containerd.internal.v1.opt\"]\n    path = \"\/opt\/containerd\"\n\n  &#91;plugins.\"io.containerd.internal.v1.restart\"]\n    interval = \"10s\"\n\n  &#91;plugins.\"io.containerd.internal.v1.tracing\"]\n    sampling_ratio = 1.0\n    service_name = \"containerd\"\n\n  &#91;plugins.\"io.containerd.metadata.v1.bolt\"]\n    content_sharing_policy = \"shared\"\n\n  &#91;plugins.\"io.containerd.monitor.v1.cgroups\"]\n    no_prometheus = false\n\n  &#91;plugins.\"io.containerd.runtime.v1.linux\"]\n    no_shim = false\n    runtime = \"runc\"\n    runtime_root = \"\"\n    shim = \"containerd-shim\"\n    shim_debug = false\n\n  &#91;plugins.\"io.containerd.runtime.v2.task\"]\n    platforms = &#91;\"linux\/amd64\"]\n    sched_core = false\n\n  &#91;plugins.\"io.containerd.service.v1.diff-service\"]\n    default = &#91;\"walking\"]\n\n  &#91;plugins.\"io.containerd.service.v1.tasks-service\"]\n    rdt_config_file = \"\"\n\n  &#91;plugins.\"io.containerd.snapshotter.v1.aufs\"]\n    root_path = \"\"\n\n  &#91;plugins.\"io.containerd.snapshotter.v1.btrfs\"]\n    root_path = \"\"\n\n  &#91;plugins.\"io.containerd.snapshotter.v1.devmapper\"]\n    async_remove = false\n    base_image_size = \"\"\n    discard_blocks = false\n    fs_options = \"\"\n    fs_type = \"\"\n    pool_name = \"\"\n    root_path = \"\"\n\n  &#91;plugins.\"io.containerd.snapshotter.v1.native\"]\n    root_path = \"\"\n\n  &#91;plugins.\"io.containerd.snapshotter.v1.overlayfs\"]\n    root_path = \"\"\n    upperdir_label = false\n\n  &#91;plugins.\"io.containerd.snapshotter.v1.zfs\"]\n    root_path = \"\"\n\n  &#91;plugins.\"io.containerd.tracing.processor.v1.otlp\"]\n    endpoint = \"\"\n    insecure = false\n    protocol = \"\"\n\n&#91;proxy_plugins]\n\n&#91;stream_processors]\n\n  &#91;stream_processors.\"io.containerd.ocicrypt.decoder.v1.tar\"]\n    accepts = &#91;\"application\/vnd.oci.image.layer.v1.tar+encrypted\"]\n    args = &#91;\"--decryption-keys-path\", \"\/etc\/containerd\/ocicrypt\/keys\"]\n    env = &#91;\"OCICRYPT_KEYPROVIDER_CONFIG=\/etc\/containerd\/ocicrypt\/ocicrypt_keyprovider.conf\"]\n    path = \"ctd-decoder\"\n    returns = \"application\/vnd.oci.image.layer.v1.tar\"\n\n  &#91;stream_processors.\"io.containerd.ocicrypt.decoder.v1.tar.gzip\"]\n    accepts = &#91;\"application\/vnd.oci.image.layer.v1.tar+gzip+encrypted\"]\n    args = &#91;\"--decryption-keys-path\", \"\/etc\/containerd\/ocicrypt\/keys\"]\n    env = &#91;\"OCICRYPT_KEYPROVIDER_CONFIG=\/etc\/containerd\/ocicrypt\/ocicrypt_keyprovider.conf\"]\n    path = \"ctd-decoder\"\n    returns = \"application\/vnd.oci.image.layer.v1.tar+gzip\"\n\n&#91;timeouts]\n  \"io.containerd.timeout.bolt.open\" = \"0s\"\n  \"io.containerd.timeout.shim.cleanup\" = \"5s\"\n  \"io.containerd.timeout.shim.load\" = \"5s\"\n  \"io.containerd.timeout.shim.shutdown\" = \"3s\"\n  \"io.containerd.timeout.task.state\" = \"2s\"\n\n&#91;ttrpc]\n  address = \"\"\n  gid = 0\n  uid = 0\n&#91;root@k8s-82 containerd]#<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"%E7%94%9F%E6%88%90_CNI%E9%85%8D%E7%BD%AE%E6%96%87%E4%BB%B6etccninetd10-containerd-netconflist\"><\/span>\u751f\u6210 CNI\u914d\u7f6e\u6587\u4ef6\/etc\/cni\/net.d\/10-containerd-net.conflist<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<pre class=\"wp-block-code has-small-font-size\"><code>cat &lt;&lt; EOF | tee \/etc\/cni\/net.d\/10-containerd-net.conflist\r\n{\r\n \"cniVersion\": \"1.0.0\",\r\n \"name\": \"containerd-net\",\r\n \"plugins\": &#91;\r\n   {\r\n     \"type\": \"bridge\",\r\n     \"bridge\": \"cni0\",\r\n     \"isGateway\": true,\r\n     \"ipMasq\": true,\r\n     \"promiscMode\": true,\r\n     \"ipam\": {\r\n       \"type\": \"host-local\",\r\n       \"ranges\": &#91;\r\n         &#91;{\r\n           \"subnet\": \"10.88.0.0\/16\"\r\n         }],\r\n         &#91;{\r\n           \"subnet\": \"2001:db8:4860::\/64\"\r\n         }]\r\n       ],\r\n       \"routes\": &#91;\r\n         { \"dst\": \"0.0.0.0\/0\" },\r\n         { \"dst\": \"::\/0\" }\r\n       ]\r\n     }\r\n   },\r\n   {\r\n     \"type\": \"portmap\",\r\n     \"capabilities\": {\"portMappings\": true},\r\n     \"externalSetMarkChain\": \"KUBE-MARK-MASQ\"\r\n   }\r\n ]\r\n}\r\nEOF<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"%E9%85%8D%E7%BD%AE%E5%BC%80%E6%9C%BA%E8%87%AA%E5%90%AF%E5%8A%A8\"><\/span>\u914d\u7f6e\u5f00\u673a\u81ea\u542f\u52a8<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<pre class=\"wp-block-code has-small-font-size\"><code>systemctl enable containerd\nsystemctl enable docker\n\n&#91;root@vm246 ~]# systemctl enable containerd\nCreated symlink from \/etc\/systemd\/system\/multi-user.target.wants\/containerd.service to \/usr\/lib\/systemd\/system\/containerd.service.\n&#91;root@vm246 ~]# systemctl enable docker\nCreated symlink from \/etc\/systemd\/system\/multi-user.target.wants\/docker.service to \/usr\/lib\/systemd\/system\/docker.service.\n&#91;root@vm246 ~]#\n<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"%E9%87%8D%E5%90%AF%E6%9C%8D%E5%8A%A1\"><\/span>\u91cd\u542f\u670d\u52a1<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<pre class=\"wp-block-code has-small-font-size\"><code>systemctl daemon-reload\nsystemctl restart containerd\nsystemctl restart docker<\/code><\/pre>\n\n\n\n<p>\u68c0\u67e5\u5404\u4e2a\u670d\u52a1\u7684status,\u80fd\u6b63\u5e38\u542f\u52a8\uff0c\u4e14\u6ca1\u6709\u62a5\u9519\u4e3a\u51c6\u3002 \u7279\u522b\u662f\u955c\u50cf\u62c9\u53d6\u90e8\u5206\u3002\u4e00\u822c\u5305\u542b\u5173\u952e\u5b57images<\/p>\n\n\n\n<p>\u91cd\u70b9\u662fcontainerd\u670d\u52a1\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code has-small-font-size\"><code>systemctl status containerd -l\nsystemctl status docker -l<\/code><\/pre>\n\n\n\n<p>\u6210\u529f\u6807\u8bb0<\/p>\n\n\n\n<pre class=\"wp-block-code has-small-font-size\"><code>&#91;root@vm246 ~]# systemctl status containerd -l\n\u25cf containerd.service - containerd container runtime\n   Loaded: loaded (\/usr\/lib\/systemd\/system\/containerd.service; enabled; vendor preset: disabled)\n   Active: active (running) since Thu 2023-06-15 19:23:29 PDT; 22s ago\n     Docs: https:\/\/containerd.io\n  Process: 122442 ExecStartPre=\/sbin\/modprobe overlay (code=exited, status=0\/SUCCESS)\n Main PID: 122447 (containerd)\n    Tasks: 9\n   Memory: 12.5M\n   CGroup: \/system.slice\/containerd.service\n           \u2514\u2500122447 \/usr\/bin\/containerd\n\nJun 15 19:23:29 vm246 containerd&#91;122447]: time=\"2023-06-15T19:23:29.875312841-07:00\" level=error msg=\"failed to load cni during init, please check CRI plugin status before setting up network for pods\" error=\"cni config load failed: no network config found in \/etc\/cni\/net.d: cni plugin not initialized: failed to load cni config\"\nJun 15 19:23:29 vm246 containerd&#91;122447]: time=\"2023-06-15T19:23:29.876437032-07:00\" level=info msg=\"Start subscribing containerd event\"\nJun 15 19:23:29 vm246 containerd&#91;122447]: time=\"2023-06-15T19:23:29.876571680-07:00\" level=info msg=\"Start recovering state\"\nJun 15 19:23:29 vm246 containerd&#91;122447]: time=\"2023-06-15T19:23:29.876731048-07:00\" level=info msg=\"Start event monitor\"\nJun 15 19:23:29 vm246 containerd&#91;122447]: time=\"2023-06-15T19:23:29.876776079-07:00\" level=info msg=\"Start snapshots syncer\"\nJun 15 19:23:29 vm246 containerd&#91;122447]: time=\"2023-06-15T19:23:29.876804634-07:00\" level=info msg=\"Start cni network conf syncer for default\"\nJun 15 19:23:29 vm246 containerd&#91;122447]: time=\"2023-06-15T19:23:29.876824365-07:00\" level=info msg=\"Start streaming server\"\nJun 15 19:23:29 vm246 containerd&#91;122447]: time=\"2023-06-15T19:23:29.880223372-07:00\" level=info msg=serving... address=\/run\/containerd\/containerd.sock.ttrpc\nJun 15 19:23:29 vm246 containerd&#91;122447]: time=\"2023-06-15T19:23:29.880340135-07:00\" level=info msg=serving... address=\/run\/containerd\/containerd.sock\nJun 15 19:23:29 vm246 containerd&#91;122447]: time=\"2023-06-15T19:23:29.880507655-07:00\" level=info msg=\"<span class=\"has-inline-color has-luminous-vivid-orange-color\">containerd successfully booted in 0.045285s<\/span>\"\n&#91;root@vm246 ~]# systemctl status docker -l\n\u25cf docker.service - Docker Application Container Engine\n   Loaded: loaded (\/usr\/lib\/systemd\/system\/docker.service; enabled; vendor preset: disabled)\n   Active: active (running) since Thu 2023-06-15 19:23:31 PDT; 47s ago\n     Docs: https:\/\/docs.docker.com\n Main PID: 122475 (dockerd)\n    Tasks: 8\n   Memory: 23.9M\n   CGroup: \/system.slice\/docker.service\n           \u2514\u2500122475 \/usr\/bin\/dockerd -H fd:\/\/ --containerd=\/run\/containerd\/containerd.sock\n\nJun 15 19:23:31 vm246 systemd&#91;1]: Starting Docker Application Container Engine...\nJun 15 19:23:31 vm246 dockerd&#91;122475]: time=\"2023-06-15T19:23:31.090256047-07:00\" level=info msg=\"Starting up\"\nJun 15 19:23:31 vm246 dockerd&#91;122475]: time=\"2023-06-15T19:23:31.128884422-07:00\" level=info msg=\"&#91;graphdriver] using prior storage driver: overlay2\"\nJun 15 19:23:31 vm246 dockerd&#91;122475]: time=\"2023-06-15T19:23:31.129218516-07:00\" level=info msg=\"Loading containers: start.\"\nJun 15 19:23:31 vm246 dockerd&#91;122475]: time=\"2023-06-15T19:23:31.294765086-07:00\" level=info msg=\"Default bridge (docker0) is assigned with an IP address 172.17.0.0\/16. Daemon option --bip can be used to set a preferred IP address\"\nJun 15 19:23:31 vm246 dockerd&#91;122475]: time=\"2023-06-15T19:23:31.358672366-07:00\" level=info msg=\"Loading containers: done.\"\nJun 15 19:23:31 vm246 dockerd&#91;122475]: time=\"2023-06-15T19:23:31.381460228-07:00\" level=info msg=\"Docker daemon\" commit=659604f graphdriver=overlay2 version=24.0.2\nJun 15 19:23:31 vm246 dockerd&#91;122475]: time=\"2023-06-15T19:23:31.381616108-07:00\" level=info msg=\"Daemon has completed initialization\"\nJun 15 19:23:31 vm246 dockerd&#91;122475]: time=\"2023-06-15T19:23:31.418241862-07:00\" level=info msg=\"API listen on \/run\/docker.sock\"\nJun 15 19:23:31 vm246 systemd&#91;1]: <span class=\"has-inline-color has-luminous-vivid-orange-color\">Started Docker Application Container Engine<\/span>.\n&#91;root@vm246 ~]#\n<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"%E6%9F%A5%E7%9C%8B%E6%9C%8D%E5%8A%A1%E6%97%A5%E5%BF%97\"><\/span>\u67e5\u770b\u670d\u52a1\u65e5\u5fd7<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<pre class=\"wp-block-code has-small-font-size\"><code>journalctl -u docker -f -n 200\n-- Logs begin at Fri 2023-06-16 15:32:21 CST. --\nJun 16 16:23:29 vm246 systemd&#91;1]: Starting Docker Application Container Engine...\nJun 16 16:23:29 vm246 dockerd&#91;14222]: time=\"2023-06-16T01:23:29.903461113-07:00\" level=info msg=\"Starting up\"\nJun 16 16:23:29 vm246 dockerd&#91;14222]: time=\"2023-06-16T01:23:29.975099107-07:00\" level=info msg=\"&#91;graphdriver] using prior storage driver: overlay2\"\nJun 16 16:23:29 vm246 dockerd&#91;14222]: time=\"2023-06-16T01:23:29.976284285-07:00\" level=info msg=\"Loading containers: start.\"\nJun 16 16:23:30 vm246 dockerd&#91;14222]: time=\"2023-06-16T01:23:30.269691401-07:00\" level=info msg=\"Default bridge (docker0) is assigned with an IP address 172.17.0.0\/16. Daemon option --bip can be used to set a preferred IP address\"\nJun 16 16:23:30 vm246 dockerd&#91;14222]: time=\"2023-06-16T01:23:30.337563745-07:00\" level=info msg=\"Loading containers: done.\"\nJun 16 16:23:30 vm246 dockerd&#91;14222]: time=\"2023-06-16T01:23:30.362873451-07:00\" level=info msg=\"Docker daemon\" commit=659604f graphdriver=overlay2 version=24.0.2\nJun 16 16:23:30 vm246 dockerd&#91;14222]: time=\"2023-06-16T01:23:30.363081732-07:00\" level=info msg=\"Daemon has completed initialization\"\nJun 16 16:23:30 vm246 dockerd&#91;14222]: time=\"2023-06-16T01:23:30.403721175-07:00\" level=info msg=\"API listen on \/run\/docker.sock\"\nJun 16 16:23:30 vm246 systemd&#91;1]: Started Docker Application Container Engine.\nJun 16 16:34:48 vm246 systemd&#91;1]: Stopping Docker Application Container Engine...\nJun 16 16:34:48 vm246 dockerd&#91;14222]: time=\"2023-06-16T01:34:48.779962200-07:00\" level=info msg=\"Processing signal 'terminated'\"\nJun 16 16:34:48 vm246 dockerd&#91;14222]: time=\"2023-06-16T01:34:48.784279762-07:00\" level=info msg=\"stopping event stream following graceful shutdown\" error=\"&lt;nil&gt;\" module=libcontainerd namespace=moby\nJun 16 16:34:48 vm246 dockerd&#91;14222]: time=\"2023-06-16T01:34:48.785022718-07:00\" level=info msg=\"Daemon shutdown complete\"\nJun 16 16:34:48 vm246 systemd&#91;1]: Stopped Docker Application Container Engine.\nJun 16 16:42:28 vm246 systemd&#91;1]: Starting Docker Application Container Engine...\nJun 16 16:42:28 vm246 dockerd&#91;16056]: time=\"2023-06-16T01:42:28.776106585-07:00\" level=info msg=\"Starting up\"\nJun 16 16:42:28 vm246 dockerd&#91;16056]: time=\"2023-06-16T01:42:28.807766565-07:00\" level=info msg=\"&#91;graphdriver] using prior storage driver: overlay2\"\nJun 16 16:42:28 vm246 dockerd&#91;16056]: time=\"2023-06-16T01:42:28.808052262-07:00\" level=info msg=\"Loading containers: start.\"\nJun 16 16:42:28 vm246 dockerd&#91;16056]: time=\"2023-06-16T01:42:28.982890894-07:00\" level=info msg=\"Default bridge (docker0) is assigned with an IP address 172.17.0.0\/16. Daemon option --bip can be used to set a preferred IP address\"\nJun 16 16:42:29 vm246 dockerd&#91;16056]: time=\"2023-06-16T01:42:29.043206290-07:00\" level=info msg=\"Loading containers: done.\"\nJun 16 16:42:29 vm246 dockerd&#91;16056]: time=\"2023-06-16T01:42:29.065665867-07:00\" level=info msg=\"Docker daemon\" commit=659604f graphdriver=overlay2 version=24.0.2\nJun 16 16:42:29 vm246 dockerd&#91;16056]: time=\"2023-06-16T01:42:29.065775807-07:00\" level=info msg=\"Daemon has completed initialization\"\nJun 16 16:42:29 vm246 dockerd&#91;16056]: time=\"2023-06-16T01:42:29.109587449-07:00\" level=info msg=\"API listen on \/run\/docker.sock\"\nJun 16 16:42:29 vm246 systemd&#91;1]: Started Docker Application Container Engine.\n<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"%E4%B8%8B%E4%B8%80%E6%AD%A5\"><\/span>\u4e0b\u4e00\u6b65<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p><a href=\"https:\/\/www.gbase8.cn\/en\/10892\/\">GCDW\u6280\u672f\u6808-  kubernets\u8fd0\u884c\u73af\u5883\u642d\u5efa<\/a><\/p>","protected":false},"excerpt":{"rendered":"<p>GCDW\u8fd0\u884c\u5728k8s\u4e0a\uff0c\u672c\u6587\u4ecb\u7ecddocker\u8fd0\u884c\u73af\u5883\u7684\u5b89\u88c5\uff0c\u7279\u522b\u662fcontainerd\u670d\u52a1\u7684\u914d\u7f6e\uff0c\u4e0eharbor\u955c\u50cf\u96c6\u7fa4\u7684\u4ea4\u4e92\u8bc1\u4e66\u7684\u914d\u7f6e\u7b49\u3002<\/p>","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[115,120],"class_list":["post-10845","post","type-post","status-publish","format-standard","hentry","category-gbase8a","tag-gcdw","tag-docker"],"_links":{"self":[{"href":"https:\/\/www.gbase8.cn\/en\/wp-json\/wp\/v2\/posts\/10845","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.gbase8.cn\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.gbase8.cn\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.gbase8.cn\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.gbase8.cn\/en\/wp-json\/wp\/v2\/comments?post=10845"}],"version-history":[{"count":51,"href":"https:\/\/www.gbase8.cn\/en\/wp-json\/wp\/v2\/posts\/10845\/revisions"}],"predecessor-version":[{"id":12315,"href":"https:\/\/www.gbase8.cn\/en\/wp-json\/wp\/v2\/posts\/10845\/revisions\/12315"}],"wp:attachment":[{"href":"https:\/\/www.gbase8.cn\/en\/wp-json\/wp\/v2\/media?parent=10845"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.gbase8.cn\/en\/wp-json\/wp\/v2\/categories?post=10845"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.gbase8.cn\/en\/wp-json\/wp\/v2\/tags?post=10845"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}