containerd离线快速部署脚本

[root@localhost containerd_install]# tree
.
├── buildkit-v0.13.2.linux-amd64.tar.gz
├── cri-containerd-cni-1.7.18-linux-amd64.tar.gz
├── install_containerd.sh
├── nerdctl-1.7.6-linux-amd64.tar.gz
├── runc.amd64

#!/bin/bash
DIR=`pwd`
# https://github.com/containerd/containerd
CONTAINERD_VERSION=1.7.18
# https://github.com/containerd/nerdctl
NERDCTL_VERSION=1.7.6
# https://github.com/opencontainers/runc
RUNC_VERSION=1.1.12
# https://github.com/moby/buildkit
BUILDKIT_VERSION=v0.13.2
install_containerd(){
  tar -xvzf cri-containerd-cni-*-linux-amd64.tar.gz -C /
  #rm -f cri-containerd-cni-*-linux-amd64.tar.gz
  # 创建默认配置文件
  mkdir -p /etc/containerd
  # 创建containerd默认配置文件
  containerd config default | tee /etc/containerd/config.toml
  cp /etc/containerd/config.toml /etc/containerd/config.toml.init
  # 修改Containerd的配置文件
  sed -i "s#SystemdCgroup\ \=\ false#SystemdCgroup\ \=\ true#g" /etc/containerd/config.toml
  cat /etc/containerd/config.toml | grep SystemdCgroup

  sed -i "s#registry.k8s.io#m.daocloud.io/registry.k8s.io#g" /etc/containerd/config.toml
  cat /etc/containerd/config.toml | grep sandbox_image

  # 配置加速
  sed -i "s#config_path\ \=\ \"\"#config_path\ \=\ \"/etc/containerd/certs.d\"#g" /etc/containerd/config.toml
  cat /etc/containerd/config.toml | grep certs.d
  # 创建相应目录
  mkdir /etc/containerd/certs.d/docker.io -pv
  cat > /etc/containerd/certs.d/docker.io/hosts.toml << EOF
server = "https://docker.io"
[host."https://docker.199604.com"]
  capabilities = ["pull", "resolve"]
EOF

  #生成配置文件
  cat > /etc/crictl.yaml <<EOF
runtime-endpoint: unix:///run/containerd/containerd.sock
image-endpoint: unix:///run/containerd/containerd.sock
timeout: 10
debug: false
EOF

  systemctl daemon-reload
  systemctl enable --now containerd.service
  systemctl restart  containerd.service
  # 验证containerd是否安装成功
  crictl info
}

# 覆盖containerd的runc工具
install_runc(){
  mv runc.amd64 runc && chmod +x runc && mv -f runc /usr/local/sbin/
  ln -s /usr/local/sbin/runc /usr/bin/runc
  runc -version
}

install_nerdctl(){
  cd ${DIR}
  mkdir nerdctl
  tar -xf nerdctl-${NERDCTL_VERSION}-linux-amd64.tar.gz -C nerdctl/
  mv nerdctl/nerdctl /usr/local/bin/
  rm -rf nerdctl

  cat << 'EOF' > /usr/local/bin/docker
#!/bin/bash
/usr/local/bin/nerdctl $@
EOF
  chmod +x /usr/local/bin/docker
  nerdctl --version
}

install_buildkit(){
  mkdir -p /usr/local/buildkit
  tar -xf buildkit-${BUILDKIT_VERSION}.linux-amd64.tar.gz -C /usr/local/buildkit
  echo 'export PATH=/usr/local/buildkit/bin:$PATH' >> /etc/profile
  source /etc/profile
  # 创建buildkitd自启动服务
  cat > /etc/systemd/system/buildkitd.service << 'EOF'
[Unit]
Documentation=https://github.com/moby/buildkit
Description=buildkitd
After=network.target

[Service]
ExecStart=/usr/local/buildkit/bin/buildkitd --oci-worker=false --containerd-worker=true

[Install]
WantedBy=multi-user.target
EOF
  # 重新加载Unit file
  systemctl daemon-reload
  # 启动服务
  systemctl start buildkitd
  # 开机自启动
  systemctl enable buildkitd
}

install(){
  install_containerd
  install_runc
  install_nerdctl
  install_buildkit
}

install