Wordpress网站仿站,心馨人生珠海网站建设,简单网站制作教程,做外贸需要什么网站containerd的安装和使用
1、containerd介绍
containerd 是从 docker 项目中剥离出来的一个容器运行时、几乎囊括了容器管理的所有功能#xff0c;并且 containerd
内置了 CRI 插件#xff0c;k8s 的 kubelet 组件可以直接调用 containerd#xff0c;相较于 docker 容器运…containerd的安装和使用
1、containerd介绍
containerd 是从 docker 项目中剥离出来的一个容器运行时、几乎囊括了容器管理的所有功能并且 containerd
内置了 CRI 插件k8s 的 kubelet 组件可以直接调用 containerd相较于 docker 容器运行时要精简很多。
containerd 是一个工业级标准的容器运行时它强调简单性、健壮性和可移植性。containerd 可以在宿主机中管
理完整的容器生命周期包括容器镜像的传输和存储、容器的执行和管理、存储和网络等。
CRI (Container Runtime Interface开放工业标准)对容器运行时规范设定的标准定义了容器运行时状态的描述
以及运行时需要提供的容器管理功能只要符合 CRI 接口的容器运行时均可被 k8s 调用为了兼容 CRI 规范
docker 项目自身也做了架构调整自 1.11.0 版本起docker 引擎由一个单一组件被拆分为四个项目分别是
1、docker-daemon2、containerd3、containerd-shim4、runc
containerd 是从 Docker 中分离出来的一个项目可以作为一个底层容器运行时现在它成了 Kubernete 容器运
行时更好的选择。不仅仅是 Docker还有很多云平台也支持 containerd 作为底层容器运行时。
k8s 发布CRI (Container Runtime Interface)统一了容器运行时接口凡是支持 CRI 的容器运行时皆可作为
k8s 的底层容器运行时。
几个概念 RunC可以理解为OCI的一个实现用来创建一个符合规范的容器 Containerd就是一个标准的容器运行时。 OCI开放容器标准镜像规范定义了镜像的主要格式和内容、运行时规范 CRI容器运行时接口由 google 和 RedHat 主导推出的一组与容器运行时交互的接口只要能实现这个标准 接口的容器运行时就可以对接 Kubernetes 平台。
k8s 为什么要放弃使用 Docker 作为容器运行时而使用containerd呢?
如果你使用 Docker 作为 k8s 容器运行时的话kubelet 需要先要通过 dockershim 去调用 Docker再通过
Docker 去调用 containerd。如果你使用 containerd 作为 k8s 容器运行时的话由于 containerd 内置了 CRI 插
件kubelet 可以直接调用 containerd。使用 containerd 不仅性能提高了(调用链变短了)而且资源占用也会变
小(Docker不是一个纯粹的容器运行时具有大量其他功能)。
2、containerd安装
安装包下载地址https://github.com/containerd/containerd/releases
2.1 系统信息
$ cat /etc/redhat-release
CentOS Linux release 7.9.2009 (Core)2.2 下载
# 下载安装包
[rootmaster ~]# wget https://github.com/containerd/containerd/releases/download/v1.7.1/containerd-1.7.1-linux-amd64.tar.gz2.3 解压
[rootmaster ~]# tar -xvf containerd-1.7.1-linux-amd64.tar.gz2.4 拷贝
[rootmaster ~]# cp bin/* /usr/local/bin/2.5 查看版本
[rootmaster ~]# containerd -v
containerd github.com/containerd/containerd v1.7.1 1677a17964311325ed1c31e2c0a3589ce6d5c30d能够正常显示版本信息说明安装成功。
2.6 生成containerd配置
containerd 默认配置文件在 /etc/containerd 目录下名称为 config.toml。
可以通过如下命令生成默认配置
[rootmaster ~]# mkdir -p /etc/containerd
[rootmaster ~]# containerd config default /etc/containerd/config.toml2.7 修改配置文件
# 1
# 阿里云镜像
sandbox_image registry.k8s.io/pause:3.8
改为
sandbox_image registry.aliyuncs.com/k8sxio/pause:3.8
# 2
SystemdCgroup false
修改为
SystemdCgroup true
# 3
# 配置镜像加速
# 上下级配置,缩进两个空格
[plugins.io.containerd.grpc.v1.cri.registry.mirrors][plugins.io.containerd.grpc.v1.cri.registry.mirrors.docker.io]endpoint [https://bqr1dr1n.mirror.aliyuncs.com][plugins.io.containerd.grpc.v1.cri.registry.mirrors.k8s.gcr.io]endpoint [https://registry.aliyuncs.com/k8sxio]2.8 服务文件
[rootmaster ~]# cat /lib/systemd/system/containerd.service EOF
[Unit]
Descriptioncontainerd container runtime
Documentationhttps://containerd.io
Afternetwork.target local-fs.target[Service]
ExecStartPre-/sbin/modprobe overlay
ExecStart/usr/local/bin/containerdTypenotify
Delegateyes
KillModeprocess
Restartalways
RestartSec5
# Having non-zero Limit*s causes performance problems due to accounting overhead
# in the kernel. We recommend using cgroups to do container-local accounting.
LimitNPROCinfinity
LimitCOREinfinity
LimitNOFILEinfinity
# Comment TasksMax if your systemd version does not supports it.
# Only systemd 226 and above support this version.
TasksMaxinfinity
OOMScoreAdjust-999[Install]
WantedBymulti-user.target
EOF2.9 启动服务并设置为开机启动
[rootmaster ~]# systemctl restart containerd systemctl enable containerd
Created symlink from /etc/systemd/system/multi-user.target.wants/containerd.service to /usr/lib/systemd/system/containerd.service.2.10 查看启动情况
[rootmaster ~]# systemctl status containerd
● containerd.service - containerd container runtimeLoaded: loaded (/usr/lib/systemd/system/containerd.service; enabled; vendor preset: disabled)Active: active (running) since 六 2023-07-22 18:37:23 CST; 24s agoDocs: https://containerd.ioMain PID: 10145 (containerd)CGroup: /system.slice/containerd.service└─10145 /usr/local/bin/containerd3、部署runc
docker 引擎是自带 runc 的containerd 是需要自己部署 runc到githup官网下载。
[rootmaster ~]# wget https://github.com/opencontainers/runc/releases/download/v1.1.3/runc.amd64 -O /usr/bin/runc[rootmaster ~]# chmod ax /usr/bin/runc[rootmaster ~]# runc -v
runc version 1.1.3
commit: v1.1.3-0-g6724737f
spec: 1.0.2-dev
go: go1.17.10
libseccomp: 2.5.4ctr 命令功能太少因此 containerd 支持客户端工具扩展推荐使用 nerdctl。
nerdctl使用效果与docker命令的语法一致。
4、部署nerdctl客户端工具
[rootmaster ~]# wget https://github.com/containerd/nerdctl/releases/download/v0.18.0/nerdctl-0.18.0-linux-amd64.tar.gz[rootmaster ~]# tar xvf nerdctl-0.18.0-linux-amd64.tar.gz[rootmaster ~]# cp nerdctl /usr/local/bin/[rootmaster ~]# nerdctl -v
nerdctl version 0.18.0# 验证nerdctl命令
[rootmaster ~]# nerdctl images
REPOSITORY TAG IMAGE ID CREATED PLATFORM SIZE BLOB SIZE5、镜像操作
Containerd 默认提供 CLI 命令行工具 ctrctr 命名提供基本的镜像和容器操作功能可以通过如下查看命令帮
助
[rootmaster ~]# ctr
NAME:ctr -_______/ /______/ ___/ __/ ___/
/ /__/ /_/ /
\___/\__/_/containerd CLIUSAGE:ctr [global options] command [command options] [arguments...]VERSION:v1.7.1DESCRIPTION:ctr is an unsupported debug and administrative client for interacting
with the containerd daemon. Because it is unsupported, the commands,
options, and operations are not guaranteed to be backward compatible or
stable from release to release of the containerd project.COMMANDS:plugins, plugin Provides information about containerd pluginsversion Print the client and server versionscontainers, c, container Manage containerscontent Manage contentevents, event Display containerd eventsimages, image, i Manage imagesleases Manage leasesnamespaces, namespace, ns Manage namespacespprof Provide golang pprof outputs for containerdrun Run a containersnapshots, snapshot Manage snapshotstasks, t, task Manage tasksinstall Install a new packageoci OCI toolssandboxes, sandbox, sb, s Manage sandboxesinfo Print the server infoshim Interact with a shim directlyhelp, h Shows a list of commands or help for one commandGLOBAL OPTIONS:--debug Enable debug output in logs--address value, -a value Address for containerds GRPC server (default: /run/containerd/containerd.sock) [$CONTAINERD_ADDRESS]--timeout value Total timeout for ctr commands (default: 0s)--connect-timeout value Timeout for connecting to containerd (default: 0s)--namespace value, -n value Namespace to use with commands (default: default) [$CONTAINERD_NAMESPACE]--help, -h show help--version, -v print the version5.1 查看命名空间
$ ctr namespace ls[rootmaster ~]# ctr namespace ls
NAME LABELS
default5.2 拉取镜像
# image和i等价
$ ctr image/i pull docker.io/library/busybox:latest[rootmaster ~]# ctr image pull docker.io/library/busybox:latest
docker.io/library/busybox:latest: resolved ||
index-sha256:3fbc632167424a6d997e74f52b878d7cc478225cffac6bc977eedfe51c7f4e79: done ||
manifest-sha256:023917ec6a886d0e8e15f28fb543515a5fcd8d938edb091e8147db4efed388ee: done ||
layer-sha256:3f4d90098f5b5a6f6a76e9d217da85aa39b2081e30fa1f7d287138d6e7bf0ad7: done ||
config-sha256:a416a98b71e224a31ee99cff8e16063554498227d2b696152a9c3e0aa65e5824: done ||
elapsed: 16.7s total: 2.0 Mi (122.9 KiB/s)
unpacking linux/amd64 sha256:3fbc632167424a6d997e74f52b878d7cc478225cffac6bc977eedfe51c7f4e79...
done: 103.791318ms$ ctr -ndefault image pull --all-platforms docker.io/library/nginx:1.18.0
$ ctr -ndefault image pull --platform linux/amd64 docker.io/library/nginx:1.18.0
# -n: 指定命名空间,镜像下载到什么命名空间,后续就只能在这个命名空间下找到该镜像
# -all-platforms: 提取所有平台镜像
# -platform: 提取指定平台镜像[rootmaster ~]# ctr -ndefault image pull --platform linux/amd64 docker.io/library/nginx:1.18.0
docker.io/library/nginx:1.18.0: resolved ||
index-sha256:e90ac5331fe095cea01b121a3627174b2e33e06e83720e9a934c7b8ccc9c55a0: done ||
manifest-sha256:9b0fc8e09ae1abb0144ce57018fc1e13d23abd108540f135dc83c0ed661081cf: done ||
layer-sha256:03f221d9cf00a7077231c6dcac3c95182727c7e7fd44fd2b2e882a01dcda2d70: done ||
config-sha256:c2c45d506085d300b72a6d4b10e3dce104228080a2cf095fc38333afe237e2be: done ||
layer-sha256:f7ec5a41d630a33a2d1db59b95d89d93de7ae5a619a3a8571b78457e48266eba: done ||
layer-sha256:1576642c97761adf346890bf67c43473217160a9a203ef47d0bc6020af652798: done ||
layer-sha256:c12a848bad84d57e3f5faafab5880484434aee3bf8bdde4d519753b7c81254fd: done ||
layer-sha256:0b20d28b5eb3007f70c43cdd8efcdb04016aa193192e5911cda5b7590ffaa635: done ||
elapsed: 124.3s total: 51.1 M (421.3 KiB/s)
unpacking linux/amd64 sha256:e90ac5331fe095cea01b121a3627174b2e33e06e83720e9a934c7b8ccc9c55a0...
done: 2.765843156s需要注意的是拉取镜像时要加上 docker.io/liarary
如ctr image pull docker.io/library/image:tag
5.3 列出本地镜像
$ ctr image ls
# 或者
$ ctr image list[rootmaster ~]# ctr image ls
REF TYPE DIGEST SIZE PLATFORMS LABELS
docker.io/library/busybox:latest application/vnd.docker.distribution.manifest.list.v2json sha256:3fbc632167424a6d997e74f52b878d7cc478225cffac6bc977eedfe51c7f4e79 2.1 MiB linux/386,linux/amd64,linux/arm/v5,linux/arm/v6,linux/arm/v7,linux/arm64/v8,linux/mips64le,linux/ppc64le,linux/riscv64,linux/s390x -
docker.io/library/nginx:1.18.0 application/vnd.docker.distribution.manifest.list.v2json sha256:e90ac5331fe095cea01b121a3627174b2e33e06e83720e9a934c7b8ccc9c55a0 51.1 MiB linux/386,linux/amd64,linux/arm/v5,linux/arm/v7,linux/arm64/v8,linux/mips64le,linux/ppc64le,linux/s390x [rootmaster ~]# ctr image list
REF TYPE DIGEST SIZE PLATFORMS LABELS
docker.io/library/busybox:latest application/vnd.docker.distribution.manifest.list.v2json sha256:3fbc632167424a6d997e74f52b878d7cc478225cffac6bc977eedfe51c7f4e79 2.1 MiB linux/386,linux/amd64,linux/arm/v5,linux/arm/v6,linux/arm/v7,linux/arm64/v8,linux/mips64le,linux/ppc64le,linux/riscv64,linux/s390x -
docker.io/library/nginx:1.18.0 application/vnd.docker.distribution.manifest.list.v2json sha256:e90ac5331fe095cea01b121a3627174b2e33e06e83720e9a934c7b8ccc9c55a0 51.1 MiB linux/386,linux/amd64,linux/arm/v5,linux/arm/v7,linux/arm64/v8,linux/mips64le,linux/ppc64le,linux/s390x# -q只列出镜像名
$ ctr image ls -q
# 或者
$ ctr image list -q[rootmaster ~]# ctr image ls -q
docker.io/library/busybox:latest
docker.io/library/nginx:1.18.0[rootmaster ~]# ctr image list -q
docker.io/library/busybox:latest
docker.io/library/nginx:1.18.0# 查看命名空间下的镜像
# 指定空间
$ ctr -n namespace image list
$ ctr -n default images ls
# 或者
$ ctr -n default images list[rootmaster ~]# ctr -n default images ls
REF TYPE DIGEST SIZE PLATFORMS LABELS
docker.io/library/busybox:latest application/vnd.docker.distribution.manifest.list.v2json sha256:3fbc632167424a6d997e74f52b878d7cc478225cffac6bc977eedfe51c7f4e79 2.1 MiB linux/386,linux/amd64,linux/arm/v5,linux/arm/v6,linux/arm/v7,linux/arm64/v8,linux/mips64le,linux/ppc64le,linux/riscv64,linux/s390x -
docker.io/library/nginx:1.18.0 application/vnd.docker.distribution.manifest.list.v2json sha256:e90ac5331fe095cea01b121a3627174b2e33e06e83720e9a934c7b8ccc9c55a0 51.1 MiB linux/386,linux/amd64,linux/arm/v5,linux/arm/v7,linux/arm64/v8,linux/mips64le,linux/ppc64le,linux/s390x -[rootmaster ~]# ctr -n default images list
REF TYPE DIGEST SIZE PLATFORMS LABELS
docker.io/library/busybox:latest application/vnd.docker.distribution.manifest.list.v2json sha256:3fbc632167424a6d997e74f52b878d7cc478225cffac6bc977eedfe51c7f4e79 2.1 MiB linux/386,linux/amd64,linux/arm/v5,linux/arm/v6,linux/arm/v7,linux/arm64/v8,linux/mips64le,linux/ppc64le,linux/riscv64,linux/s390x -
docker.io/library/nginx:1.18.0 application/vnd.docker.distribution.manifest.list.v2json sha256:e90ac5331fe095cea01b121a3627174b2e33e06e83720e9a934c7b8ccc9c55a0 51.1 MiB linux/386,linux/amd64,linux/arm/v5,linux/arm/v7,linux/arm64/v8,linux/mips64le,linux/ppc64le,linux/s390x 5.4 检查镜像
$ ctr image check[rootmaster ~]# ctr image check
REF TYPE DIGEST STATUS SIZE UNPACKED
docker.io/library/busybox:latest application/vnd.docker.distribution.manifest.list.v2json sha256:3fbc632167424a6d997e74f52b878d7cc478225cffac6bc977eedfe51c7f4e79 complete (2/2) 2.1 MiB/2.1 MiB true
docker.io/library/nginx:1.18.0 application/vnd.docker.distribution.manifest.list.v2json sha256:e90ac5331fe095cea01b121a3627174b2e33e06e83720e9a934c7b8ccc9c55a0 complete (6/6) 51.1 MiB/51.1 MiB true5.5 打标签
# ctr image tag 源镜像:源标签 目标镜像:目标标签
# 源镜像:源标签需要存在
$ ctr image tag docker.io/library/nginx:1.18.0 my/nginx:1.18.0[rootmaster ~]# ctr image tag docker.io/library/nginx:1.18.0 my/nginx:1.18.0
my/nginx:1.18.0[rootmaster ~]# ctr images ls -q
docker.io/library/busybox:latest
docker.io/library/nginx:1.18.0
my/nginx:1.18.0# 加入命令空间
$ ctr -n k8s.io image tag registry.cn-hangzhou.aliyuncs.com/google_containers/pause:3.2 k8s.gcr.io/pause:3.2
# 注意若新镜像reference已存在,需要先删除新reference或者如下方式强制替换
$ ctr -n k8s.io image tag --force registry.cn-hangzhou.aliyuncs.com/google_containers/pause:3.2 k8s.gcr.io/pause:3.25.6 删除镜像
$ ctr image rm 镜像
# 或者
$ ctr image remove 镜像$ ctr image remove my/nginx:1.18.0[rootmaster ~]# ctr image remove my/nginx:1.18.0
my/nginx:1.18.0[rootmaster ~]# ctr images ls --q
docker.io/library/busybox:latest
docker.io/library/nginx:1.18.05.7 导入/导出镜像
$ ctr image import image.tar.gz
$ ctr image import nginxv1.tar.gz$ ctr image export image.tar.gz 镜像
$ ctr image export nginxv1.tar.gz docker.io/library/nginx:1.18.0# 导出
$ ctr image export mynginx.tar.gz docker.io/library/nginx:1.18.0[rootmaster ~]# ctr image export mynginx.tar.gz docker.io/library/nginx:1.18.0[rootmaster ~]# ls | grep mynginx
mynginx.tar.gz# 导入
$ ctr image import mynginx.tar.gz[rootmaster ~]# ctr image rm docker.io/library/nginx:1.18.0
docker.io/library/nginx:1.18.0[rootmaster ~]# ctr image import mynginx.tar.gz --platform linux/amd64
unpacking docker.io/library/nginx:1.18.0 (sha256:e90ac5331fe095cea01b121a3627174b2e33e06e83720e9a934c7b8ccc9c55a0)...done[rootmaster ~]# ctr image ls -q
docker.io/library/busybox:latest
docker.io/library/nginx:1.18.05.8 挂载镜像
将 nginx:1.18.0 镜像挂载到 /opt/my 下
$ ctr image mount docker.io/library/nginx:1.18.0 /opt/my[rootmaster ~]# mkdir /opt/my[rootmaster ~]# ctr image mount docker.io/library/nginx:1.18.0 /opt/my
sha256:43d6c481a041dbcc1d8ea9c565b1b692bcb28da3414683c316703c669c012ebc
/opt/my[rootmaster ~]# ls /opt/my/
bin dev docker-entrypoint.sh home lib64 mnt proc run srv tmp var
boot docker-entrypoint.d etc lib media opt root sbin sys usr5.9 卸载镜像
$ umount /opt/my[rootmaster ~]# umount /opt/my[rootmaster ~]# ls /opt/my/5.10 推送镜像
# 将镜像推送到远程仓库
$ ctr -n default image push docker.io/library/busybox:latest
# 如果报错
ctr: content digest sha256:b4b2e7e35845acd1e5433f4237cd50ecda47d789a9660e893adac145d1548e07: not found
# 解决
# 需要重新拉取镜像使用--all-platforms参数
$ ctr -n default image pull --platform docker.io/library/busybox:latest
# 如果有问题参考
# https://blog.csdn.net/weixin_43616190/article/details/126415601
# https://blog.csdn.net/yangqihai510/article/details/1301004375.11 离线导入docker镜像
# 离线导入docker镜像,在其它docker上导出,containerd镜像导入
$ docker save -o rabbitmq_latest.tar rabbitmq:latest
$ ctr images import rabbitmq_latest.tar6、容器操作
[rootmaster ~]# ctr container
NAME:ctr containers - Manage containersUSAGE:ctr containers command [command options] [arguments...]COMMANDS:create Create containerdelete, del, remove, rm Delete one or more existing containersinfo Get info about a containerlist, ls List containerslabel Set and clear labels for a containercheckpoint Checkpoint a containerrestore Restore a container from checkpointOPTIONS:--help, -h show help静态容器只创建容器并不运行容器内程序。动态容器创建容器并运行容器内程序。
6.1 创建静态容器
创建容器镜像必须在本地存在否则无法创建。
# c和container等价
$ ctr c/container create docker.io/library/nginx:1.18.0 my-nginx
$ ctr c/container create docker.io/library/busybox:latest my-busybox[rootmaster ~]# ctr container create docker.io/library/nginx:1.18.0 my-nginx[rootmaster ~]# ctr container create docker.io/library/busybox:latest my-busybox6.2 查看容器
$ ctr container ls
# 或者
$ ctr container list[rootmaster ~]# ctr container ls
CONTAINER IMAGE RUNTIME
my-busybox docker.io/library/busybox:latest io.containerd.runc.v2
my-nginx docker.io/library/nginx:1.18.0 io.containerd.runc.v2[rootmaster ~]# ctr container list
CONTAINER IMAGE RUNTIME
my-busybox docker.io/library/busybox:latest io.containerd.runc.v2
my-nginx docker.io/library/nginx:1.18.0 io.containerd.runc.v2[rootmaster ~]# ctr container list -q
my-busybox
my-nginx[rootmaster ~]# ctr container ls -q
my-busybox
my-nginx6.3 启动静态容器(启动任务)
# 静态容器启动后会成为动态容器
# task和t等价
# -d后台运行,类似docker run -d
$ ctr task/t start -d my-busybox
$ ctr task/t start -d my-nginx[rootmaster ~]# ctr task start -d my-busybox[rootmaster ~]# ctr task start -d my-nginx# 其它参数
[rootmaster ~]# ctr t start -h
NAME:ctr tasks start - Start a container that has been createdUSAGE:ctr tasks start [command options] CONTAINEROPTIONS:--no-pivot Disable use of pivot-root (linux only)--null-io Send all IO to /dev/null--log-uri value Log uri--fifo-dir value Directory used for storing IO FIFOs--pid-file value File path to write the tasks pid--detach, -d Detach from the task after it has started execution6.4 查看任务
# task表示容器内运行的进程信息
$ ctr task ls
# 或者
$ ctr task list[rootmaster ~]# ctr task ls
TASK PID STATUS
my-nginx 48981 RUNNING
my-busybox 49757 RUNNING[rootmaster ~]# ctr task list
TASK PID STATUS
my-nginx 48981 RUNNING
my-busybox 49757 RUNNING[rootmaster ~]# ctr task list -q
my-nginx
my-busybox[rootmaster ~]# ctr task ls -q
my-nginx
my-busybox# 命令空间
[rootmaster ~]# ctr -n default task list
TASK PID STATUS
my-nginx 48981 RUNNING
my-busybox 49757 RUNNING6.5 查看容器详细信息
$ ctr container info my-nginx
$ ctr container info my-busybox[rootmaster ~]# ctr container info my-nginx | head -20
{ID: my-nginx,Labels: {io.containerd.image.config.stop-signal: SIGQUIT,maintainer: NGINX Docker Maintainers \u003cdocker-maintnginx.com\u003e},Image: docker.io/library/nginx:1.18.0,Runtime: {Name: io.containerd.runc.v2,Options: {type_url: containerd.runc.v1.Options}},SnapshotKey: my-nginx,Snapshotter: overlayfs,CreatedAt: 2023-07-22T12:31:38.260915721Z,UpdatedAt: 2023-07-22T12:31:38.260915721Z,Extensions: {},SandboxID: ,Spec: {
......[rootmaster ~]# ctr container info my-busybox | head -20
{ID: my-busybox,Labels: {io.containerd.image.config.stop-signal: SIGTERM},Image: docker.io/library/busybox:latest,Runtime: {Name: io.containerd.runc.v2,Options: {type_url: containerd.runc.v1.Options}},SnapshotKey: my-busybox,Snapshotter: overlayfs,CreatedAt: 2023-07-22T12:35:38.271982112Z,UpdatedAt: 2023-07-22T12:35:38.271982112Z,Extensions: {},SandboxID: ,Spec: {ociVersion: 1.1.0-rc.1,
......6.6 进入任务容器
# --exec-id参数这个id可以随便写只要唯一就行
$ ctr task exec -exec-id 1 -t my-busybox sh[rootmaster ~]# ctr task exec -exec-id 1 -t my-busybox sh
/ #
/ # ls
bin dev etc home lib lib64 proc root run sys tmp usr var
/ # exit6.7 暂停容器(任务)
$ ctr task pause my-busybox[rootmaster ~]# ctr task pause my-busybox[rootmaster ~]# ctr task list
TASK PID STATUS
my-nginx 48981 RUNNING
my-busybox 49757 PAUSED6.8 恢复容器(任务)
$ ctr task resume my-busybox[rootmaster ~]# ctr task resume my-busybox[rootmaster ~]# ctr task list
TASK PID STATUS
my-nginx 48981 RUNNING
my-busybox 49757 RUNNING6.9 终止容器(任务)
$ ctr task kill my-nginx[rootmaster ~]# ctr task kill my-nginx[rootmaster ~]# ctr task ls
TASK PID STATUS
my-nginx 48981 STOPPED
my-busybox 49757 RUNNING6.10 删除容器
$ ctr container rm my-nginx[rootmaster ~]# ctr container rm my-nginx[rootmaster ~]# ctr container list
CONTAINER IMAGE RUNTIME
my-busybox docker.io/library/busybox:latest io.containerd.runc.v26.11 查看容器内进程
$ ctr task ps my-busybox[rootmaster ~]# ctr task ps my-busybox
PID INFO
49757 -6.12 获取容器资源使用情况
[rootmaster ~]# ctr task metrics my-busybox
ID TIMESTAMP
my-busybox seconds:1690030610 nanos:990202065METRIC VALUE
memory.usage_in_bytes 151552
memory.limit_in_bytes 9223372036854771712
memory.stat.cache 4096
cpuacct.usage 115987455
cpuacct.usage_percpu [10962488 38389161 41221211 25414595]
pids.current 1
pids.limit 06.13 运行一个任务
$ ctr run -t -d docker.io/library/busybox:latest busybox[rootmaster ~]# ctr run -t -d docker.io/library/busybox:latest busybox[rootmaster ~]# ctr task ls
TASK PID STATUS
busybox 70751 RUNNING
my-nginx 65143 RUNNING7、名称空间
containerd 和 kubernetes 一样也有 namespace 的概念容器默认运行在 default 名称空间下。
需要注意的是
使用 docker 运行的容器运行在 mody 名称空间下我们上面也简单介绍了docker的架构图其实 docker 最终也
是调用的 containerd所以在使用 ctr 查看容器或者镜像时需要使用 -n 参数指定 mody 名称空间。kuernetes 结
合 containerd 运行的容器及下载的镜像默认在 k8s.io 名称空间下。
# 创建名称空间
$ ctr ns create dev[rootmaster ~]# ctr ns create dev# 列出名称空间
$ ctr ns ls[rootmaster ~]# ctr ns ls
NAME LABELS
default
dev
k8s.io# 删除名称空间
$ ctr ns remove/rm dev[rootmaster ~]# ctr ns remove dev
dev[rootmaster ~]# ctr ns ls
NAME LABELS
default
k8s.io8、ctr和docker命令比较
Containerd命令Docker命令描述ctr task lsdocker ps查看运行容器ctr image lsdocker images获取image信息ctr image pull pausedocker pull pausepull该pause镜像ctr image push pause-testdocker push pause-testpush该pause镜像ctr image import pause.tardocker load 镜像导入本地镜像ctr run -d pause-test pausedocker run -d --namepause pause-test运行容器ctr image tag pause pause-testdocker tag pause pause-testtag该pause镜像
