前置依赖安装

### 转发 IPv4 并让 iptables 看到桥接流量
执行下述指令：

```bash
cat <<EOF | sudo tee /etc/modules-load.d/k8s.conf
overlay
br_netfilter
EOF

sudo modprobe overlay
sudo modprobe br_netfilter

# 设置所需的 sysctl 参数，参数在重新启动后保持不变
cat <<EOF | sudo tee /etc/sysctl.d/k8s.conf
net.bridge.bridge-nf-call-iptables  = 1
net.bridge.bridge-nf-call-ip6tables = 1
net.ipv4.ip_forward                 = 1
EOF

# 应用 sysctl 参数而不重新启动
sudo sysctl --system
```

通过运行以下指令确认 `br_netfilter` 和 `overlay` 模块被加载：

```bash
lsmod | grep br_netfilter
lsmod | grep overlay
```

通过运行以下指令确认 `net.bridge.bridge-nf-call-iptables`、`net.bridge.bridge-nf-call-ip6tables` 和 `net.ipv4.ip_forward` 系统变量在你的 `sysctl` 配置中被设置为 1：

```bash
sysctl net.bridge.bridge-nf-call-iptables net.bridge.bridge-nf-call-ip6tables net.ipv4.ip_forward
```

### 配置 cgroup 驱动

> ubuntu 系统，debian 系统，centos7 系统，都是使用 systemd 初始化系统的。
> 要将 `systemd` 设置为 cgroup 驱动，需编辑 [`KubeletConfiguration`](https://kubernetes.io/zh-cn/docs/tasks/administer-cluster/kubelet-config-file/) 的 `cgroupDriver` 选项，并将其设置为 `systemd`。例如：
> 
```yaml
apiVersion: kubelet.config.k8s.io/v1beta1
kind: KubeletConfiguration
...
cgroupDriver: systemd
```
>
> 如果你将 `systemd` 配置为 kubelet 的 cgroup 驱动，你也必须将 `systemd` 配置为容器运行时的 cgroup 驱动。 参阅容器运行时文档，了解指示说明。

# 概要

在可以访问境外资源的机器上执行

```bash
wget https://github.com/containerd/containerd/releases/download/v1.6.21/containerd-1.6.21-linux-amd64.tar.gz
wget https://raw.githubusercontent.com/containerd/containerd/main/containerd.service
wget https://github.com/opencontainers/runc/releases/download/v1.1.7/runc.amd64
wget https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-amd64-v1.3.0.tgz
```

在要安装k8s的机器上执行

```shell
wget down.v-ta.com/k8s/cni-plugins-linux-amd64-v1.3.0.tgz  
wget down.v-ta.com/k8s/containerd-1.6.21-linux-amd64.tar.gz  
wget down.v-ta.com/k8s/containerd.service  
wget down.v-ta.com/k8s/runc.amd64
```

安装
```bash
tar Cxzvf /usr/local containerd-1.6.21-linux-amd64.tar.gz
mv containerd.service /etc/systemd/system/.
systemctl daemon-reload
systemctl enable --now containerd
install -m 755 runc.amd64 /usr/local/sbin/runc
mkdir -p /opt/cni/bin
tar Cxzvf /opt/cni/bin cni-plugins-linux-amd64-v1.3.0.tgz
```

#  详细

### 安装 containerd
文档： [containerd](https://github.com/containerd/containerd/blob/main/docs/getting-started.md)

从 [https://github.com/containerd/containerd/releases](https://github.com/containerd/containerd/releases) 下载 `containerd-<VERSION>-<OS>-<ARCH>.tar.gz` 归档文件，并将其解压缩到 `/usr/local` 下：
``` bash
wget https://github.com/containerd/containerd/releases/download/v1.6.21/containerd-1.6.21-linux-amd64.tar.gz

tar Cxzvf /usr/local containerd-1.6.21-linux-amd64.tar.gz

wget https://github.com/containerd/containerd/releases/download/v1.7.1/containerd-1.7.1-linux-amd64.tar.gz

tar Cxzvf /usr/local containerd-1.7.1-linux-amd64.tar.gz
```

如果您打算通过systemd启动containerd，您还应该从 [containerd.service](https://raw.githubusercontent.com/containerd/containerd/main/containerd.service) 下载 `containerd.service` 单元文件到 `/usr/local/lib/systemd/system/containerd.service` ：

```bash
wget https://raw.githubusercontent.com/containerd/containerd/main/containerd.service
mv containerd.service /etc/systemd/system/.
systemctl daemon-reload
systemctl enable --now containerd
```

### 安装 runc

从 [https://github.com/opencontainers/runc/releases](https://github.com/opencontainers/runc/releases) 下载 `runc.<ARCH>` 二进制文件，并将其安装为 `/usr/local/sbin/runc` 。

```bash
wget https://github.com/opencontainers/runc/releases/download/v1.1.7/runc.amd64

install -m 755 runc.amd64 /usr/local/sbin/runc
```

### 安装 cni
从 [https://github.com/containernetworking/plugins/releases](https://github.com/containernetworking/plugins/releases) 下载 `cni-plugins-<OS>-<ARCH>-<VERSION>.tgz` 归档文件，验证其sha256sum，并将其解压缩到 `/opt/cni/bin` 下：

```bash
wget https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-amd64-v1.3.0.tgz

mkdir -p /opt/cni/bin

tar Cxzvf /opt/cni/bin cni-plugins-linux-amd64-v1.3.0.tgz
```