$ cat /etc/containerd/certs.d/docker.io/hosts.toml server = "https://docker.io" [host."https://xxxx.mirror.aliyuncs.com"]
$ cat /etc/containerd/certs.d/quay.io/hosts.toml server = "https://quay.io" [host."https://xxx.mirrors.ustc.edu.cn"]
执行crictl pull nacos/nacos-server:v2.2.3报错
1 2 3 4
[root@exxk ~]# crictl pull docker.io/nacos/nacos-server:v2.2.3 FATA[0000] validate service connection: CRI v1 image API is not implemented for endpoint "unix:///var/run/containerd/containerd.sock": rpc error: code = Unimplemented desc = unknown service runtime.v1.ImageService [root@exxk ~]# crictl pull nacos/nacos-server:v2.2.3 FATA[0000] validate service connection: CRI v1 image API is not implemented for endpoint "unix:///var/run/containerd/containerd.sock": rpc error: code = Unimplemented desc = unknown service runtime.v1.ImageService
Failed to create pod sandbox: rpc error: code = DeadlineExceeded desc = failed to get sandbox image "k8s.gcr.io/pause:3.8": failed to pull image "k8s.gcr.io/pause:3.8": failed to pull and unpack image "k8s.gcr.io/pause:3.8": failed to resolve reference "k8s.gcr.io/pause:3.8": failed to do request: Head "https://k8s.gcr.io/v2/pause/manifests/3.8": dial tcp 74.125.23.82:443: i/o timeout
原因:关键信息failed to pull image "k8s.gcr.io/pause:3.8",说明镜像拉取失败,因为k8s.gcr.io解析的都是国外ip。
方案一(临时解决):
1 2 3 4
#拉取镜像 crictl pull registry.cn-hangzhou.aliyuncs.com/google_containers/pause:3.8 #修改镜像名 ctr -n k8s.io i tag registry.cn-hangzhou.aliyuncs.com/google_containers/pause:3.8 k8s.gcr.io/pause:3.8
方案二(永久解决):
1 2 3 4 5 6
vi /etc/containerd/config.toml #修改该行:sandbox_image = "k8s.gcr.io/pause:3.8" #为 :sandbox_image = "registry.cn-hangzhou.aliyuncs.com/google_containers/pause:3.8" systemctl daemon-reload systemctl restart containerd systemctl status containerd