momo's Blog.

配置Containerd使其可以拉取私有的registry

字数统计: 393阅读时长: 2 min
2021/10/21 Share

配置私有镜像的仓库

因为kubernetes在20版本以后, 将不会在支持docker，所以将了解一下containerd如何去配置私有镜像.

配置文件

containerd的配置文件在/etc/containerd/config.toml 如果没有的话也可以去主动创建 containerd config default > /etc/containerd/config.toml

查看配置文件, 我们可以找到定义镜像仓库的字段

1
2
3
4
[plugins."io.containerd.grpc.v1.cri".registry]
  [plugins."io.containerd.grpc.v1.cri".registry.mirrors]
    [plugins."io.containerd.grpc.v1.cri".registry.mirrors."docker.io"]
      endpoint = ["https://registry-1.docker.io"]

按照规则, 我们添加一个我们自己的私有仓库

1
2
3
4
5
6
7
8
[plugins."io.containerd.grpc.v1.cri".registry]
  [plugins."io.containerd.grpc.v1.cri".registry.mirrors]
    [plugins."io.containerd.grpc.v1.cri".registry.mirrors."docker.io"]
      endpoint = ["https://registry-1.docker.io"]
    [plugins."io.containerd.grpc.v1.cri".registry.mirrors."aaaaa-registry.aaaaa.com"]
      endpoint = ["https://aaaaa-registry.aaaaa.com"]
    [plugins."io.containerd.grpc.v1.cri".registry.mirrors."registry-vpc.cn-hangzhou.aliyuncs.com"]
      endpoint = ["https://registry-vpc.cn-hangzhou.aliyuncs.com"]

添加密码配置

1
2
3
4
5
6
7
8
9
10
11
[plugins."io.containerd.grpc.v1.cri".registry]
      [plugins."io.containerd.grpc.v1.cri".registry.mirrors]
        [plugins."io.containerd.grpc.v1.cri".registry.mirrors."docker.io"]
          endpoint = ["https://registry-1.docker.io"]
        [plugins."io.containerd.grpc.v1.cri".registry.mirrors."daaaaa-registry.aaaaa.com"]
          endpoint = ["https://daaaaa-registry.aaaaa.com"]
        [plugins."io.containerd.grpc.v1.cri".registry.mirrors."registry-vpc.cn-hangzhou.aliyuncs.com"]
          endpoint = ["https://registry-vpc.cn-hangzhou.aliyuncs.com"]
      [plugins."io.containerd.grpc.v1.cri".registry.configs]
        [plugins."io.containerd.grpc.v1.cri".registry.configs."daaaaa-registry.aaaaa.com".auth]
          auth = "F3ZXVNOQ=="

注意格式:

  • 格式1, 使用auth,可以去 $ROOT/.docker/config.json 获取字段

    1
    2
    [plugins."io.containerd.grpc.v1.cri".registry.configs."daaaaa-registry.aaaaa.com".auth]
      auth = "F3ZXVNOQ=="

  • 格式2

1
2
3
[plugins."io.containerd.grpc.v1.cri".registry.configs."daaaaa-registry.aaaaa.com".auth]
  username = ""
  password = ""

重启 Containerd

1
systemctl restart containerd.service

参考文档

原文作者：Momo

原文链接：https://mo.xmomo521.top/2021/10/21/配置Containerd使其可以拉取私有的registry/

发表日期：October 21st 2021, 2:59:29 pm

更新日期：December 21st 2021, 3:32:58 pm

版权声明：本文采用知识共享署名-非商业性使用 4.0 国际许可协议进行许可

CATALOG
  1. 1. 配置私有镜像的仓库
  2. 2. 配置文件
  3. 3. 添加密码配置
  4. 4. 重启 Containerd
  5. 5. 参考文档
Total : 133
2024
2023
2022
2021
2020
2019
Terraform CD TLS cfssl Python django drf JWT kubernetes CA 安全 Kibana JS Vue Devops Jenkins Gitlab DevOps Linux swarm pod ipvs ca k8s CPU CFS Linux时区 CST monitor PromQL Ajax logging Channels 聊天室 RPC Docker 学习笔记 Thanos Process ansible cryptography docker django-rest-framework Git 流程图 js 前端 Kubernetes prometheus-operator logstash filebeat Prometheus-operator eslint network axios vue cd xterm Docker网络 Prom联邦集群 secret CI ElementUi backup acme.sh Vuex Daemonset Taints log 动态路由 Swarm 软路由 标准运维 蓝鲸智云 ElementUI 监控 nginx ERROR
Ansible Atlantis Argocd Cloud-init Alpine Django CA Go etcd Elasticsearch Helm 日志 前端 Jenkins Kubernetes Jsonnet Docker kubernetes Linux Nginx NAS Grafana PostgreSQL Prometheus Python TerraForm Redis Terraform python alertmanager alpine docker Git gitlab-runner k3s ELK Mysql SSH vscode calico Python/Django LVM mysql Mongo TLS logging myself 蓝鲸 OpenWrt 源码分析 TCPDUMP Chrome Containerd iptables 技巧 nginx