containerd

1
2
3

# cni plugin
mkdir -p /opt/cni/bin
tar Cxzvf /opt/cni/bin cni-plugins-linux-amd64-v1.1.1.tgz

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31

sudo apt-get update
sudo apt-get install containerd
# download latest version of nerdctl from https://github.com/containerd/nerdctl/releases
tar zxvf nerdctl-2.0.0-linux-amd64.tar.gz
sudo mv nerdctl /usr/bin/nerdctl
# download latest version of CNI plugins from https://github.com/containernetworking/plugins/releases/
sudo mkdir -p /opt/cni/bin/
sudo tar -zxf cni-plugins-linux-amd64-v1.3.0.tgz -C /opt/cni/bin/

# containerd config
sudo mkdir /etc/containerd
containerd config default | sudo tee /etc/containerd/config.toml
sudo sed -i 's/SystemdCgroup \= false/SystemdCgroup \= true/g' /etc/containerd/config.toml
sudo curl -L https://raw.githubusercontent.com/containerd/containerd/main/containerd.service -o /etc/systemd/system/containerd.service
sudo systemctl daemon-reload
sudo systemctl enable --now containerd
sudo nerdctl pull hello-world
sudo nerdctl run hello-world

# buildkit
# download latest version of buildkit from https://github.com/moby/buildkit/releases
tar zxvf buildkit-v0.17.1.linux-amd64.tar.gz
sudo mv bin/* /usr/local/bin/
sudo curl -L https://raw.githubusercontent.com/moby/buildkit/refs/heads/master/examples/systemd/system/buildkit.service -o /etc/systemd/system/buildkit.service
# edit buildkit.service, add --oci-worker=false --containerd-worker=true after buildkitd
sudo vim /etc/systemd/system/buildkit.service
sudo curl -L https://raw.githubusercontent.com/moby/buildkit/refs/heads/master/examples/systemd/system/buildkit.socket -o /etc/systemd/system/buildkit.socket
sudo systemctl daemon-reload
sudo systemctl enable --now buildkit

1
2
3
4
5

VERSION=$(curl -Ls -o /dev/null -w %{url_effective} https://github.com/docker/buildx/releases/latest)
VERSION=${VERSION##*/}

mkdir -p $HOME/.docker/cli-plugins
wget https://github.com/docker/buildx/releases/download/$VERSION/buildx-$VERSION.linux-amd64 -O $HOME/.docker/cli-plugins/docker-buildx

1
2

# check containerd version
containerd --version

1
2

[plugins."io.containerd.grpc.v1.cri".registry]
   config_path = "/etc/containerd/certs.d"

1

sudo nerdctl --insecure-registry push 127.0.0.1:5000/image_0:1.4