正文
下载
需要注意本文学习了很多如下网站的内容:
https://zhuanlan.zhihu.com/p/366671300
# 第一步下载资源
https://github.com/moby/buildkit/releases/tag/v0.11.2
注意这是 2023.2.7 左右能够下载的最新版本
https://github.com/containerd/containerd/releases
注意这个可以下载cri-containerd的版本, 有一个集成的systemd服务便于使用.
部署服务-containerd
tar -zxvf cri-containerd-1.6.16-linux-amd64.tar.gz -C /
# 如果是arm的
tar -zxvf cri-containerd-1.6.16-linux-arm64.tar.gz -C /
mkdir -p /etc/containerd
containerd config default > /etc/containerd/config.toml
# 启动服务即可
systemctl daemon-reload
systemctl enable containerd
systemctl start containerd
systemctl status containerd
部署服务-其他软件
# 注意这一步也需要在github上面下载对应文件
https://github.com/containerd/nerdctl
https://github.com/containernetworking/plugins
tar -zxvf nerdctl-1.2.0-linux-amd64.tar.gz -C /usr/local/bin/
tar -zxvf cni-plugins-linux-amd64-v1.2.0.tgz -C /usr/local/bin/
# 如果是arm的
tar -zxvf nerdctl-1.2.0-linux-arm64.tar.gz -C /usr/local/bin/
tar -zxvf cni-plugins-linux-arm64-v1.2.0.tgz -C /usr/local/bin/
部署服务-buildkit
注意下载的文件为:
buildkit-v0.11.2.linux-amd64.tar.gz
tar -zxvf buildkit-v0.11.2.linux-amd64.tar.gz -C /usr/local
# 如果是arm的
tar -zxvf buildkit-v0.11.2.linux-arm64.tar.gz -C /usr/local
# 创建配置文件
cat >/etc/systemd/system/buildkitd.service <<EOF
[Unit]
Description=BuildKit
Documentation=https://github.com/moby/buildkit
After=containerd.service
[Service]
Type=notify
ExecStart=/usr/local/bin/buildkitd --oci-worker=false --containerd-worker=true
[Install]
WantedBy=multi-user.target
EOF
systemctl daemon-reload && systemctl restart buildkitd
systemctl enable buildkitd
systemctl status buildkitd
参数设置以及镜像处理
跟之前打包 openJdk的镜像一样, 增加文件信息:
root@inspur-PC:/docker-jdk# tree -L 1
.
├── dockerfile_openjdk字体
├── myfonts.tar.gz
└── zh.tar.gz
dockerfile的内容为:
FROM adoptopenjdk:8u292-b10-jdk-hotspot
RUN apt-get update && apt-get -y install fontconfig && apt-get install -y locales && rm -rf /var/lib/apt/lists/* \ && localedef -i zh_CN -c -f UTF-8 -A /usr/share/locale/locale.alias zh_CN.UTF-8
WORKDIR /usr/share/fonts/
ADD myfonts.tar.gz /usr/share/fonts/
RUN fc-cache
ADD zh.tar.gz /usr/lib/locale
ENV LANG zh_CN.utf8
ENV TZ=Asia/Shanghai
RUN ln -snf /usr/share/zoneinfo/$TZ /etc/localtime && echo '$TZ' > /etc/timezone
buildctl build \
--frontend=dockerfile.v0 \
--local context=. \
--local dockerfile=. \
--output type=image,name=openjdk_8_292_withfonts
修改镜像的命名空间
mkdir -p /etc/buildkit/
vim /etc/buildkit/buildkitd.toml
[worker.oci]
enabled = false
[worker.containerd]
enabled = true
# namespace should be "k8s.io" for Kubernetes (including Rancher Desktop)
namespace = "k8s.io"
platforms = [ "linux/arm64" ]
gc = true
# gckeepstorage sets storage limit for default gc profile, in MB.
gckeepstorage = 9000
重新构建镜像
- 会比docker构建多很多信息
- 注意我的多架构构建好像有点问题.
[root@KylinV10SP3ARM64 docker-jdk]# buildctl build \
> --frontend=dockerfile.v0 \
> --local context=. \
> --local dockerfile=. \
> --output type=image,name=openjdk_8_292_withfonts
[+] Building 184.3s (12/12) FINISHED
=> [internal] load .dockerignore 0.1s
=> => transferring context: 2B 0.0s
=> [internal] load build definition from Dockerfile 0.1s
=> => transferring dockerfile: 786B 0.0s
=> [internal] load metadata for docker.io/library/adoptopenjdk:8u292-b10-jdk-hotspot
查看镜像以及高阶应用
ctr -n buildkit i ls
# 打包的同事直接进行推送
buildctl build \
--frontend=dockerfile.v0 \
--local context=. \
--local dockerfile=. \
--output type=image,name=docker.io/username/image:tag,push=true
--export-cache type=inline
问题解决
我使用UOS1050D 进行安装时出现了错误提示:
error: failed to solve: process "/bin/sh -c apt-get update && apt-get -y install fontconfig && apt-get install -y locales
&& rm -rf /var/lib/apt/lists/* \\ && localedef -i zh_CN -c -f UTF-8 -A /usr/share/locale/locale.alias zh_CN.UTF-8" did not complete successfully:
failed to create shim task: OCI runtime create failed: unable to retrieve OCI runtime error
(open /run/containerd/io.containerd.runtime.v2.task/k8s.io/5p0ndy0d0u5990sjt2r6lnujt/log.json: no such file or directory):
runc did not terminate successfully: exit status 127: unknown
根据百度怀疑是没有安装libseccomp 后者是版本太低导致.
查了下. 自动安装的版本是 libseccomp 2.3.x的版本
最低要求好像是 2.5.x
libseccomp-dev 已经是最新版 (2.3.3.2-1+dde)。
libseccomp2 已经是最新版 (2.3.3.2-1+dde)。
libseccomp2-dbgsym 已经是最新版 (2.3.3.2-1+dde)。
准备改天升级一下此包
但是我同时发现. 使用银河麒麟V10SP3自动就带的符合要求的就非常顺畅了.
