本文作者：丁辉

新版Containerd配置镜像加速

Public-Image-Mirror

本文适用于 Containerd v2.2.0 版本添加镜像加速(备注：各版本添加镜像加速参数具有差异请对照好版本)

查看 Containerd 版本 containerd --version

1. 查看是否存在镜像加速

   containerd config dump | grep -A 10 -B 5 "mirrors"

2. 检查 Containerd 配置

   cat /etc/containerd/config.toml

   保证有如下内容

   [plugins]
     [plugins."io.containerd.grpc.v1.cri"]
       ...
       [plugins."io.containerd.grpc.v1.cri".registry]
         config_path = "/etc/containerd/certs.d"

3. 创建镜像加速读取目录

   mkdir -p /etc/containerd/certs.d

4. 添加镜像加速

   目录名称为需要加速的镜像官方地址

   • docker.io

     创建目录

     mkdir -p /etc/containerd/certs.d/docker.io

     内容如下

     cat > /etc/containerd/certs.d/docker.io/hosts.toml <<EOF
     server = "https://registry-1.docker.io"
     
     [host."https://docker.m.daocloud.io"]
       capabilities = ["pull", "resolve"]
     [host."https://docker.1ms.run"]
       capabilities = ["pull", "resolve"]
     [host."https://docker-0.unsee.tech"]
       capabilities = ["pull", "resolve"]
     [host."https://registry-1.docker.io"]
       capabilities = ["pull", "resolve"]
     EOF

   • quay.io

     创建目录

     mkdir -p /etc/containerd/certs.d/quay.io

     内容如下

     cat > /etc/containerd/certs.d/docker.io/hosts.toml <<EOF
     server = "https://quay.io"
     
     [host."https://docker.m.daocloud.io"]
       capabilities = ["pull", "resolve"]
     EOF

   • 其他

     ……(内容如上)

5. 此配置无需重启 Containerd

6. 查看是否启用了代理

   ctr --debug=true i pull --hosts-dir=/etc/containerd/certs.d docker.io/nginx:latest