containerd config default > /etc/containerd/config.toml

兩種config.toml配置文件結(jié)構(gòu)

  [plugins."io.containerd.grpc.v1.cri"]

若是生成的配置文件中包含這個(gè)配置項(xiàng)，選擇第一種，若是沒有如下配置項(xiàng)，選擇第二種
第一種新增配置項(xiàng)

[plugins]
  [plugins."io.containerd.grpc.v1.cri"]
    [plugins."io.containerd.grpc.v1.cri".registry]
      # 強(qiáng)制使用 HTTP 協(xié)議
      [plugins."io.containerd.grpc.v1.cri".registry.mirrors]
        [plugins."io.containerd.grpc.v1.cri".registry.mirrors."xxx.xxx.xxx.xxx:8080"]
          endpoint = ["http://xxx.xxx.xxx.xxx:8080"]
      [plugins."io.containerd.grpc.v1.cri".registry.configs]
        [plugins."io.containerd.grpc.v1.cri".registry.configs."xxx.xxx.xxx.xxx:8080"]
          # 如果倉庫需要認(rèn)證，添加以下內(nèi)容（替換實(shí)際用戶名和密碼）
          [plugins."io.containerd.grpc.v1.cri".registry.configs."xxx.xxx.xxx.xxx:8080".auth]
            username = "<用戶名>"
            password = "<密碼>"
          # 跳過 TLS 驗(yàn)證
          [plugins."io.containerd.grpc.v1.cri".registry.configs."xxx.xxx.xxx.xxx:8080".tls]
            insecure_skip_verify = true

第二種新增配置項(xiàng)

[plugins]
  [plugins.cri]
    [plugins.cri.registry]
      [plugins.cri.registry.mirrors]
        [plugins.cri.registry.mirrors."docker.io"]
          endpoint = ["https://registry-1.docker.io"]
        # 新增私有倉庫的 HTTP 端點(diǎn)配置
        [plugins.cri.registry.mirrors."xxx.xxx.xxx.xxx:8080"]
          endpoint = ["http://xxx.xxx.xxx.xxx:8080"]
      [plugins.cri.registry.configs]
        # 配置私有倉庫跳過 TLS 驗(yàn)證
        [plugins.cri.registry.configs."xxx.xxx.xxx.xxx".tls]
          insecure_skip_verify = true
        # 如果倉庫需要認(rèn)證，添加以下內(nèi)容（替換實(shí)際用戶名和密碼）
        [plugins.cri.registry.configs."xxx.xxx.xxx.xxx".auth]
          username = "<YOUR_REGISTRY_USERNAME>"
          password = "<YOUR_REGISTRY_PASSWORD>"

crictl pull 鏡像地址驗(yàn)證

對第一種方式的的補(bǔ)充
生成containerd 配置文件

mkdir -p /etc/containerd
containerd config default > /etc/containerd/config.toml

/etc/containerd/config.toml

root = "/data/containerd"

sandbox_image = "xxx.xxx.xxx.xxx:8080/k8s/pause:3.9"

SystemdCgroup = true

   [plugins."io.containerd.grpc.v1.cri".registry]
      config_path = "/etc/containerd/certs.d"

添加containerd登陸私有倉庫憑證

mkdir -p /etc/containerd/certs.d/xxx.xxx.xxx.xxx:8080
vi /etc/containerd/certs.d/xxx.xxx.xxx.xxx:8080/hosts.toml

hosts.toml

server = "xxx.xxx.xxx.xxx:8080"
[host."http://xxx.xxx.xxx.xxx:8080"]
capabilities = ["pull","resolve","push"]
skip_verify = true