[root@node1 containerd]# cat config.toml

disabled_plugins = []

imports = []

oom_score = 0

plugin_dir = ""

required_plugins = []

root = "/var/lib/containerd"

state = "/run/containerd"

temp = ""

version = 2

[cgroup]

  path = ""

[debug]

  address = ""

  format = ""

  gid = 0

  level = ""

  uid = 0

[grpc]

  address = "/run/containerd/containerd.sock"

  gid = 0

  max_recv_message_size = 16777216

  max_send_message_size = 16777216

  tcp_address = ""

  tcp_tls_ca = ""

  tcp_tls_cert = ""

  tcp_tls_key = ""

  uid = 0

[metrics]

  address = ""

  grpc_histogram = false

[plugins]

  [plugins."io.containerd.gc.v1.scheduler"]

    deletion_threshold = 0

    mutation_threshold = 100

    pause_threshold = 0.02

    schedule_delay = "0s"

    startup_delay = "100ms"

  [plugins."io.containerd.grpc.v1.cri"]

    device_ownership_from_security_context = false

    disable_apparmor = false

    disable_cgroup = false

    disable_hugetlb_controller = true

    disable_proc_mount = false

    disable_tcp_service = true

    enable_selinux = false

    enable_tls_streaming = false

    enable_unprivileged_icmp = false

    enable_unprivileged_ports = false

    ignore_image_defined_volumes = false

    max_concurrent_downloads = 3

    max_container_log_line_size = 16384

    netns_mounts_under_state_dir = false

    restrict_oom_score_adj = false

    sandbox_image = "registry.aliyuncs.com/google_containers/pause:3.6"

    selinux_category_range = 1024

    stats_collect_period = 10

    stream_idle_timeout = "4h0m0s"

    stream_server_address = "127.0.0.1"

    stream_server_port = "0"

    systemd_cgroup = false

    tolerate_missing_hugetlb_controller = true

    unset_seccomp_profile = ""

    [plugins."io.containerd.grpc.v1.cri".cni]

      bin_dir = "/opt/cni/bin"

      conf_dir = "/etc/cni/net.d"

      conf_template = ""

      ip_pref = ""

      max_conf_num = 1

    [plugins."io.containerd.grpc.v1.cri".containerd]

      default_runtime_name = "runc"

      disable_snapshot_annotations = true

      discard_unpacked_layers = false

      ignore_rdt_not_enabled_errors = false

      no_pivot = false

      snapshotter = "overlayfs"

      [plugins."io.containerd.grpc.v1.cri".containerd.default_runtime]

        base_runtime_spec = ""

        cni_conf_dir = ""

        cni_max_conf_num = 0

        container_annotations = []

        pod_annotations = []

        privileged_without_host_devices = false

        runtime_engine = ""

        runtime_path = ""

        runtime_root = ""

        runtime_type = ""

        [plugins."io.containerd.grpc.v1.cri".containerd.default_runtime.options]

      [plugins."io.containerd.grpc.v1.cri".containerd.runtimes]

        [plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc]

          base_runtime_spec = ""

          cni_conf_dir = ""

          cni_max_conf_num = 0

          container_annotations = []

          pod_annotations = []

          privileged_without_host_devices = false

          runtime_engine = ""

          runtime_path = ""

          runtime_root = ""

          runtime_type = "io.containerd.runc.v2"

          [plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc.options]

            BinaryName = ""

            CriuImagePath = ""

            CriuPath = ""

            CriuWorkPath = ""

            IoGid = 0

            IoUid = 0

            NoNewKeyring = false

            NoPivotRoot = false

            Root = ""

            ShimCgroup = ""

            SystemdCgroup = true

      [plugins."io.containerd.grpc.v1.cri".containerd.untrusted_workload_runtime]

        base_runtime_spec = ""

        cni_conf_dir = ""

        cni_max_conf_num = 0

        container_annotations = []

        pod_annotations = []

        privileged_without_host_devices = false

        runtime_engine = ""

        runtime_path = ""

        runtime_root = ""

        runtime_type = ""

        [plugins."io.containerd.grpc.v1.cri".containerd.untrusted_workload_runtime.options]

    [plugins."io.containerd.grpc.v1.cri".image_decryption]

      key_model = "node"

    [plugins."io.containerd.grpc.v1.cri".registry]

      config_path = ""

      [plugins."io.containerd.grpc.v1.cri".registry.auths]

      [plugins."io.containerd.grpc.v1.cri".registry.configs]

      [plugins."io.containerd.grpc.v1.cri".registry.headers]

      [plugins."io.containerd.grpc.v1.cri".registry.mirrors]

    [plugins."io.containerd.grpc.v1.cri".x509_key_pair_streaming]

      tls_cert_file = ""

      tls_key_file = ""

  [plugins."io.containerd.internal.v1.opt"]

    path = "/opt/containerd"

  [plugins."io.containerd.internal.v1.restart"]

    interval = "10s"

  [plugins."io.containerd.internal.v1.tracing"]

    sampling_ratio = 1.0

    service_name = "containerd"

  [plugins."io.containerd.metadata.v1.bolt"]

    content_sharing_policy = "shared"

  [plugins."io.containerd.monitor.v1.cgroups"]

    no_prometheus = false

  [plugins."io.containerd.runtime.v1.linux"]

    no_shim = false

    runtime = "runc"

    runtime_root = ""

    shim = "containerd-shim"

    shim_debug = false

  [plugins."io.containerd.runtime.v2.task"]

    platforms = ["linux/amd64"]

    sched_core = false

  [plugins."io.containerd.service.v1.diff-service"]

    default = ["walking"]

  [plugins."io.containerd.service.v1.tasks-service"]

    rdt_config_file = ""

  [plugins."io.containerd.snapshotter.v1.aufs"]

    root_path = ""

  [plugins."io.containerd.snapshotter.v1.btrfs"]

    root_path = ""

  [plugins."io.containerd.snapshotter.v1.devmapper"]

    async_remove = false

    base_image_size = ""

    discard_blocks = false

    fs_options = ""

    fs_type = ""

    pool_name = ""

    root_path = ""

  [plugins."io.containerd.snapshotter.v1.native"]

    root_path = ""

  [plugins."io.containerd.snapshotter.v1.overlayfs"]

    root_path = ""

    upperdir_label = false

  [plugins."io.containerd.snapshotter.v1.zfs"]

    root_path = ""

  [plugins."io.containerd.tracing.processor.v1.otlp"]

    endpoint = ""

    insecure = false

    protocol = ""

[proxy_plugins]

[stream_processors]

  [stream_processors."io.containerd.ocicrypt.decoder.v1.tar"]

    accepts = ["application/vnd.oci.image.layer.v1.tar+encrypted"]

    args = ["--decryption-keys-path", "/etc/containerd/ocicrypt/keys"]

    env = ["OCICRYPT_KEYPROVIDER_CONFIG=/etc/containerd/ocicrypt/ocicrypt_keyprovider.conf"]

    path = "ctd-decoder"

    returns = "application/vnd.oci.image.layer.v1.tar"

  [stream_processors."io.containerd.ocicrypt.decoder.v1.tar.gzip"]

    accepts = ["application/vnd.oci.image.layer.v1.tar+gzip+encrypted"]

    args = ["--decryption-keys-path", "/etc/containerd/ocicrypt/keys"]

    env = ["OCICRYPT_KEYPROVIDER_CONFIG=/etc/containerd/ocicrypt/ocicrypt_keyprovider.conf"]

    path = "ctd-decoder"

    returns = "application/vnd.oci.image.layer.v1.tar+gzip"

[timeouts]

  "io.containerd.timeout.bolt.open" = "0s"

  "io.containerd.timeout.shim.cleanup" = "5s"

  "io.containerd.timeout.shim.load" = "5s"

  "io.containerd.timeout.shim.shutdown" = "3s"

  "io.containerd.timeout.task.state" = "2s"

[ttrpc]

  address = ""

  gid = 0

  uid = 0　

[root@node1 ~]# ls

anaconda-ks.cfg                              etc  runc.amd64

cri-containerd-cni-1.6.9-linux-amd64.tar.gz  opt  usr

[root@node1 ~]# mv runc.amd64 /usr/bin/runc

[root@node1 ~]# chmod +x /usr/bin/runc

[root@node1 ~]# runc -version

runc version 1.1.4

commit: v1.1.4-0-g5fd4c4d1

spec: 1.0.2-dev

go: go1.17.10

libseccomp: 2.5.4

Containerd容器镜像管理

• docker使用docker images命令管理镜像
• 单机containerd使用ctr images命令管理镜像,containerd本身的CLI
• k8s中containerd使用crictl images命令管理镜像,Kubernetes社区的专用CLI工具

[root@node1 ~]# ctr --help

NAME:

   ctr -

        __

  _____/ /______

 / ___/ __/ ___/

/ /__/ /_/ /

\___/\__/_/

containerd CLI

USAGE:

   ctr [global options] command [command options] [arguments...]

VERSION:

   v1.6.9

DESCRIPTION:

ctr is an unsupported debug and administrative client for interacting

with the containerd daemon. Because it is unsupported, the commands,

options, and operations are not guaranteed to be backward compatible or

stable from release to release of the containerd project.

COMMANDS:

   plugins, plugin            provides information about containerd plugins

   version                    print the client and server versions

   containers, c, container   manage containers

   content                    manage content

   events, event              display containerd events

   images, image, i           manage images

   leases                     manage leases

   namespaces, namespace, ns  manage namespaces

   pprof                      provide golang pprof outputs for containerd

   run                        run a container

   snapshots, snapshot        manage snapshots

   tasks, t, task             manage tasks

   install                    install a new package

   oci                        OCI tools

   shim                       interact with a shim directly

   help, h                    Shows a list of commands or help for one command

GLOBAL OPTIONS:

   --debug                      enable debug output in logs

   --address value, -a value    address for containerd's GRPC server (default: "/run/containerd/containerd.sock") [$CONTAINERD_ADDRESS]

   --timeout value              total timeout for ctr commands (default: 0s)

   --connect-timeout value      timeout for connecting to containerd (default: 0s)

   --namespace value, -n value  namespace to use with commands (default: "default") [$CONTAINERD_NAMESPACE]

   --help, -h                   show help

   --version, -v                print the version

[root@node1 ~]# ctr i ls

REF TYPE DIGEST SIZE PLATFORMS LABELS

[root@node1 ~]# ctr images list

REF TYPE DIGEST SIZE PLATFORMS LABELS

[root@node1 ~]# ctr image ls

REF TYPE DIGEST SIZE PLATFORMS LABELS

[root@node1 ~]# ctr i list

REF TYPE DIGEST SIZE PLATFORMS LABELS

[root@node1 ~]# ctr images ls

REF TYPE DIGEST SIZE PLATFORMS LABELS 　

[root@node1 ~]# ctr images pull --platform  linux/amd64 docker.io/library/nginx:alpine

docker.io/library/nginx:alpine:                                                   resolved       |++++++++++++++++++++++++++++++++++++++|

index-sha256:455c39afebd4d98ef26dd70284aa86e6810b0485af5f4f222b19b89758cabf1e:    done           |++++++++++++++++++++++++++++++++++++++|

manifest-sha256:0f2ab24c6aba5d96fcf6e7a736333f26dca1acf5fa8def4c276f6efc7d56251f: done           |++++++++++++++++++++++++++++++++++++++|

layer-sha256:4342b1ab302e894161372b32fe2976899a978bf8ff2241fb1655dc25e6645a34:    done           |++++++++++++++++++++++++++++++++++++++|

config-sha256:19dd4d73108a1feefc29d299f3727467ac02486c83474fc3979e4a7637291fe6:   done           |++++++++++++++++++++++++++++++++++++++|

layer-sha256:ca7dd9ec2225f2385955c43b2379305acd51543c28cf1d4e94522b3d94cce3ce:    done           |++++++++++++++++++++++++++++++++++++++|

layer-sha256:76a48b0f58980a64d28bc3575ae4733eb337f7b82403559122b13d5e2ced3921:    done           |++++++++++++++++++++++++++++++++++++++|

layer-sha256:2f12a0e7c01d607251a4040fa41518fd2542f3ebab83a6f7817867d0de111c96:    done           |++++++++++++++++++++++++++++++++++++++|

layer-sha256:1a7b9b9bbef6853211515e42f58be7763749950c244a0c485bb4afd1946e06d7:    done           |++++++++++++++++++++++++++++++++++++++|

layer-sha256:b704883c57afcf77f6bc48709943bcf808c9e9945d7e04926be41226fa415d33:    done           |++++++++++++++++++++++++++++++++++++++|

elapsed: 8.6 s                                                                    total:  7.7 Mi (915.8 KiB/s)

unpacking linux/amd64 sha256:455c39afebd4d98ef26dd70284aa86e6810b0485af5f4f222b19b89758cabf1e...

done: 488.54181ms

[root@node1 ~]# uname -a

Linux node1 3.10.0-693.el7.x86_64 #1 SMP Tue Aug 22 21:09:27 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux

[root@node1 ~]# ctr images pull --all-platforms docker.io/library/nginx:latest

..........

layer-sha256:5b221a36b4338b09410bbe89507e41d0b7f29bca528624270cdae477a994a020:    done           |++++++++++++++++++++++++++++++++++++++|

layer-sha256:fcd48e11f0ee5b433a823d2ce982c083cc16daf0de2c64acd8f58f0fee3b4abf:    done           |++++++++++++++++++++++++++++++++++++++|

layer-sha256:2c61dffb3feda2a72f267842bc181dda76c16a6902616dbf8379f2e2175aa046:    done           |++++++++++++++++++++++++++++++++++++++|

elapsed: 38.7s                                                                    total:  395.6  (10.2 MiB/s)

unpacking linux/amd64 sha256:d08d964023fe853b491e1f5eb182499653722c58cc4c294f2675f39d7c6a209d...

unpacking linux/arm/v5 sha256:d08d964023fe853b491e1f5eb182499653722c58cc4c294f2675f39d7c6a209d...

unpacking linux/arm/v7 sha256:d08d964023fe853b491e1f5eb182499653722c58cc4c294f2675f39d7c6a209d...

unpacking linux/arm64/v8 sha256:d08d964023fe853b491e1f5eb182499653722c58cc4c294f2675f39d7c6a209d...

unpacking linux/386 sha256:d08d964023fe853b491e1f5eb182499653722c58cc4c294f2675f39d7c6a209d...

unpacking linux/mips64le sha256:d08d964023fe853b491e1f5eb182499653722c58cc4c294f2675f39d7c6a209d...

unpacking linux/ppc64le sha256:d08d964023fe853b491e1f5eb182499653722c58cc4c294f2675f39d7c6a209d...

unpacking linux/s390x sha256:d08d964023fe853b491e1f5eb182499653722c58cc4c294f2675f39d7c6a209d...

done: 30.090253019s 

[root@node1 ~]# ctr i ls

REF                            TYPE                                                      DIGEST                                                                  SIZE     PLATFORMS                                                                                               LABELS

docker.io/library/nginx:alpine application/vnd.docker.distribution.manifest.list.v2+json sha256:455c39afebd4d98ef26dd70284aa86e6810b0485af5f4f222b19b89758cabf1e 9.8 MiB  linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64/v8,linux/ppc64le,linux/s390x                -

docker.io/library/nginx:latest application/vnd.docker.distribution.manifest.list.v2+json sha256:d08d964023fe853b491e1f5eb182499653722c58cc4c294f2675f39d7c6a209d 54.2 MiB linux/386,linux/amd64,linux/arm/v5,linux/arm/v7,linux/arm64/v8,linux/mips64le,linux/ppc64le,linux/s390x -

docker.io/library/nginx:stable application/vnd.docker.distribution.manifest.list.v2+json sha256:6f93c7c8b3ecc6ff99a743564c9701278d3f678bbe09d12dd3019bbb3d534f92 54.2 MiB linux/386,linux/amd64,linux/arm/v5,linux/arm/v7,linux/arm64/v8,linux/mips64le,linux/ppc64le,linux/s390x -  　

[root@node1 ~]# ctr images mount docker.io/library/nginx:latest /mnt

sha256:8b811a30cb94c227fb2ae61a2a1ec1e93381dbef06f9ea6b5c06df4f27651fed

/mnt

[root@node1 ~]# ls /mnt

bin  boot  dev  docker-entrypoint.d  docker-entrypoint.sh  etc  home  lib  lib64  media  mnt  opt  proc  root  run  sbin  srv  sys  tmp  usr  var

[root@node1 ~]# umount /mnt/

[root@node1 ~]# ls /mnt/

[root@node1 ~]# 

[root@node1 ~]# ctr i export --all-platforms nginx.img docker.io/library/nginx:latest

[root@node1 ~]# ls

etc  nginx.img  opt  usr

[root@node1 ~]# ctr c ls

CONTAINER    IMAGE    RUNTIME

[root@node1 ~]# ctr container ls

CONTAINER    IMAGE    RUNTIME

[root@node1 ~]# ctr containers ls

CONTAINER    IMAGE    RUNTIME  

[root@node1 ~]# ctr t ls

TASK    PID    STATUS

[root@node1 ~]# ctr tasks ls

TASK    PID    STATUS

[root@node1 ~]# ctr task ls

TASK    PID    STATUS 　　

[root@node1 ~]# ctr containers create docker.io/library/nginx:latest nginx

ctr: image "docker.io/library/nginx:latest": not found

[root@node1 ~]# ctr images pull docker.io/library/nginx:latest

docker.io/library/nginx:latest:                                                   resolved       |++++++++++++++++++++++++++++++++++++++|

index-sha256:e209ac2f37c70c1e0e9873a5f7231e91dcd83fdf1178d8ed36c2ec09974210ba:    done           |++++++++++++++++++++++++++++++++++++++|

manifest-sha256:6ad8394ad31b269b563566998fd80a8f259e8decf16e807f8310ecc10c687385: done           |++++++++++++++++++++++++++++++++++++++|

layer-sha256:9802a2cfdb8d8504273e75f503a7c9fb4594782653b8252ec3073ae7b850a235:    done           |++++++++++++++++++++++++++++++++++++++|

config-sha256:88736fe827391462a4db99252117f136b2b25d1d31719006326a437bb40cb12d:   done           |++++++++++++++++++++++++++++++++++++++|

layer-sha256:a603fa5e3b4127f210503aaa6189abf6286ee5a73deeaab460f8f33ebc6b64e2:    done           |++++++++++++++++++++++++++++++++++++++|

layer-sha256:c39e1cda007e48da53e4b20c928bcefa9e10958c7461c1ca645b5eed9a2ba029:    done           |++++++++++++++++++++++++++++++++++++++|

layer-sha256:90cfefba34d7c6a81fe1dfbb4a579998c65ff49092052967f63ddc48f6be85d9:    done           |++++++++++++++++++++++++++++++++++++++|

layer-sha256:a38226fb7abac764207dffedaee902fdf63c9d4ec076236fb632fe991c4d4b4f:    done           |++++++++++++++++++++++++++++++++++++++|

layer-sha256:62583498bae6886d90f3b1cbad2ebbeb68b66948161413087ff27b05cb75b994:    done           |++++++++++++++++++++++++++++++++++++++|

elapsed: 10.7s                                                                    total:  54.2 M (5.1 MiB/s)

unpacking linux/amd64 sha256:e209ac2f37c70c1e0e9873a5f7231e91dcd83fdf1178d8ed36c2ec09974210ba...

done: 2.371879085s

[root@node1 ~]# ctr containers create docker.io/library/nginx:latest nginx

[root@node1 ~]# ctr containers ls

CONTAINER    IMAGE                             RUNTIME

nginx        docker.io/library/nginx:latest    io.containerd.runc.v2

[root@node1 ~]# ctr tasks ls

TASK    PID    STATUS

[root@node1 ]# ctr tasks start nginx

ctr: failed to start shim: failed to resolve runtime path: runtime "io.containerd.runc.v2" binary not installed "containerd-shim-runc-v2": file does not exist: unknown

CTR：启动垫片失败：无法解析运行时路径：未安装运行时“io.containerd.runc.v2”二进制文件“containerd-shim-runc-v2”：文件不存在：未知

[root@node1 bin]# cp /root/usr/local/bin/containerd-shim-runc-v2 /usr/bin/

[root@node1 bin]# ls /usr/bin/ | grep containerd-shim-runc-v2

containerd-shim-runc-v2

# 启动task，即表时在容器中运行了进程，即为动态容器。

[root@node1 bin]# ctr tasks start -d nginx

# 查看容器所在宿主机进程，是以宿主机进程的方式存在的。

[root@node1 bin]# ctr task ls

TASK     PID     STATUS

nginx    3356    RUNNING

# 查看容器的进程(都是物理机的进程)

[root@node1 bin]# ctr task ps nginx

PID     INFO

3356    -

3387    -

3388    -

# 物理机查看到相应的进程

[root@node1 bin]# ps aux | grep 3356

root       3356  0.0  0.3   8916  3488 ?        Ss   17:26   0:00 nginx: master process nginx -g daemon off;

root       3416  0.0  0.0 112824   988 pts/0    S+   17:29   0:00 grep --color=auto 3356

[root@node1 bin]# ctr tasks exec  --exec-id 2 nginx2 /bin/sh

ifconfig

lo        Link encap:Local Loopback

          inet addr:127.0.0.1  Mask:255.0.0.0

          inet6 addr: ::1/128 Scope:Host

          UP LOOPBACK RUNNING  MTU:65536  Metric:1

          RX packets:0 errors:0 dropped:0 overruns:0 frame:0

          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0

          collisions:0 txqueuelen:1

          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

curl http://127.0.0.1

  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current

                                 Dload  Upload   Total   Spent    Left  Speed

100   615  100   615    0     0   823k      0 --:--:-- --:--:-- --:--:--  600k

<!DOCTYPE html>

<html>

<head>

<title>Welcome to nginx!</title>

<style>

html { color-scheme: light dark; }

body { width: 35em; margin: 0 auto;

font-family: Tahoma, Verdana, Arial, sans-serif; }

</style>

</head>

<body>

<h1>Welcome to nginx!</h1>

<p>If you see this page, the nginx web server is successfully installed and

working. Further configuration is required.</p>

<p>For online documentation and support please refer to

<a href="http://nginx.org/">nginx.org</a>.<br/>

Commercial support is available at

<a href="http://nginx.com/">nginx.com</a>.</p>

<p><em>Thank you for using nginx.</em></p>

</body>

</html>

• -d 　　代表dameon，后台运行
• --net-host 　　代表容器的IP就是宿主机的IP(相当于docker里的host类型网络)

[root@node1 vod]# ctr run -d --net-host docker.io/library/nginx:alpine nginx

[root@node1 vod]# ctr t ls

TASK     PID     STATUS

nginx    3582    RUNNING

[root@node1 vod]# ctr task exec --exec-id 1 -t nginx /bin/sh

/ # ifconfig

ens32     Link encap:Ethernet  HWaddr 00:0C:29:DF:7E:67

          inet addr:192.168.1.90  Bcast:192.168.1.255  Mask:255.255.255.0

          inet6 addr: fe80::8449:8163:c2e:26fb/64 Scope:Link

          inet6 addr: fe80::e340:238:62a0:6413/64 Scope:Link

          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1

          RX packets:39979 errors:0 dropped:0 overruns:0 frame:0

          TX packets:4733 errors:0 dropped:0 overruns:0 carrier:0

          collisions:0 txqueuelen:1000

          RX bytes:4738148 (4.5 MiB)  TX bytes:496878 (485.2 KiB)

lo        Link encap:Local Loopback

          inet addr:127.0.0.1  Mask:255.0.0.0

          inet6 addr: ::1/128 Scope:Host

          UP LOOPBACK RUNNING  MTU:65536  Metric:1

          RX packets:56 errors:0 dropped:0 overruns:0 frame:0

          TX packets:56 errors:0 dropped:0 overruns:0 carrier:0

          collisions:0 txqueuelen:1

          RX bytes:4409 (4.3 KiB)  TX bytes:4409 (4.3 KiB)

/ # curl http://192.168.1.90

<!DOCTYPE html>

<html>

<head>

<title>Welcome to nginx!</title>

<style>

html { color-scheme: light dark; }

body { width: 35em; margin: 0 auto;

font-family: Tahoma, Verdana, Arial, sans-serif; }

</style>

</head>

<body>

<h1>Welcome to nginx!</h1>

<p>If you see this page, the nginx web server is successfully installed and

working. Further configuration is required.</p>

<p>For online documentation and support please refer to

<a href="http://nginx.org/">nginx.org</a>.<br/>

Commercial support is available at

<a href="http://nginx.com/">nginx.com</a>.</p>

<p><em>Thank you for using nginx.</em></p>

</body>

</html>

# 修改显示文件

/ # echo "nginx" > /usr/share/nginx/html/index.html

/ # curl http://192.168.1.90

nginx

/ # exit

# 宿主机也可以访问

[root@node1 vod]# curl http://192.168.1.90

nginx　

[root@node1 ~]# ctr t ls

TASK      PID     STATUS

nginx4    3187    RUNNING

[root@node1 ~]# ctr tasks --help

NAME:

   ctr tasks - manage tasks

USAGE:

   ctr tasks command [command options] [arguments...]

COMMANDS:

   attach                   attach to the IO of a running container

   checkpoint               checkpoint a container

   delete, del, remove, rm  delete one or more tasks

   exec                     execute additional processes in an existing container

   list, ls                 list tasks

   kill                     signal a container (default: SIGTERM)

   pause                    pause an existing container

   ps                       list processes for container

   resume                   resume a paused container

   start                    start a container that has been created

   metrics, metric          get a single data point of metrics for a task with the built-in Linux runtime

OPTIONS:

   --help, -h  show help

[root@node1 ~]# ctr tasks pause nginx4

[root@node1 ~]# ctr t ls

TASK      PID     STATUS

nginx4    3187    PAUSED

[root@node1 ~]# ctr task resume nginx4

[root@node1 ~]# ctr t ls

TASK      PID     STATUS

nginx4    3187    RUNNING

# 使用kill命令停止容器中运行的进程，既为停止容器

[root@node1 ~]# ctr t ls

TASK      PID     STATUS

nginx4    3187    RUNNING

[root@node1 ~]# ctr task kill nginx4

[root@node1 ~]# ctr t ls

TASK      PID     STATUS

nginx4    3187    STOPPED

9.1 删除一个进程

# 必须先停止tasks或先删除task，再删除容器

[root@node1 ~]# ctr task delete nginx4

[root@node1 ~]# ctr c ls

CONTAINER    IMAGE                             RUNTIME

nginx4       docker.io/library/nginx:alpine    io.containerd.runc.v2

[root@node1 ~]# ctr task start -d nginx4

/docker-entrypoint.sh: /docker-entrypoint.d/ is not empty, will attempt to perform configuration

/docker-entrypoint.sh: Looking for shell scripts in /docker-entrypoint.d/

[root@node1 ~]# ctr t ls

TASK      PID     STATUS

nginx4    3416    RUNNING