blog/kubernetes/installation/crictl.md

crictl

crictl 是一个开源的container runtime 管理工具。

安装crictl

crictl是kubeadmin的依赖包，安装kubeadm会自动安装cri-tools包

也可以安装指定版本

VERSION="v1.20.0"
wget https://github.com/kubernetes-sigs/cri-tools/releases/download/$VERSION/crictl-$VERSION-linux-amd64.tar.gz
sudo tar zxvf crictl-$VERSION-linux-amd64.tar.gz -C /usr/local/bin
rm -f crictl-$VERSION-linux-amd64.tar.gz

21-12-09更新，crictl 工具 1.19版(k8s1.23)已经无法兼容containerd 1.4，Redhat8库里面的是1.4无法正常使用，需要安装1.5版本

配置crictl

配置文件位于/etc/crictl.yaml

docker

runtime-endpoint: unix:///var/run/dockershim.sock
image-endpoint: unix:///var/run/dockershim.sock
timeout: 2
debug: true
pull-image-on-create: false

containerd

cat <<EOF >/etc/crictl.yaml
runtime-endpoint: unix:///run/containerd/containerd.sock
image-endpoint: unix:///run/containerd/containerd.sock
timeout: 10
debug: false
EOF

创建pod

编写pod配置,需要两个json文件或两个yaml文件

pod.json

{
    "metadata": {
        "name": "nginx-sandbox",
        "namespace": "default",
        "attempt": 1,
        "uid": "hdishd83djaidwnduwk28bcsb"
    },
    "log_directory": "/tmp",
    "linux": {
    }
}

container.json

{
  "metadata": {
      "name": "busybox"
  },
  "image":{
      "image": "busybox"
  },
  "command": [
      "top"
  ],
  "log_path":"busybox.0.log",
  "linux": {
  }
}

pod.yaml

metadata:
  attempt: 1
  name: busybox-sandbox
  namespace: default
  uid: hdishd83djaidwnduwk28bcsb
log_directory: /tmp
linux:
  namespaces:
    options: {}

container.yaml

metadata:
  name: busybox
image:
  image: busybox:latest
command:
- top
log_path: busybox.0.log

执行命令

crictl runp container.json pod.json
#crictl runp container.yaml pod.yaml

nginx

container.yaml

metadata:
  name: nginx
image:
  image: nginx:1.19
log_path: nginx.0.log
mounts:
- container_path: /etc/nginx/nginx.conf
  host_path: /etc/nginx/nginx.conf
  readonly: true
- container_path: /etc/nginx/conf.d
  host_path: /etc/nginx/conf.d
  readonly: true
linux:
  namespaces:
    options: {}

pod.yaml

metadata:
  attempt: 1
  name: nginx-pod
  namespace: default
log_directory: /tmp/nginx
linux:
  namespaces:
    options: {}
port_mappings:
- host_port: 80
  container_port: 80
  host_ip: 0.0.0.0
- host_port: 443
  container_port: 443
  host_ip: 0.0.0.0