1. 修改主配置文件如果/etc/containerd/config.toml不存在先生成默认配置containerd config default /etc/containerd/config.toml编辑文件找到[plugins.io.containerd.grpc.v1.cri.registry]部分添加config_path指向镜像仓库配置目录[plugins.io.containerd.grpc.v1.cri.registry] config_path /etc/containerd/certs.d这样后续的镜像源配置会放在/etc/containerd/certs.d/目录下2. 配置镜像加速源建议为常用源如 Docker Hub、K8s 官方、GCR、GHCR 等分别创建hosts.toml文件示例Docker Hub 加速mkdir -p /etc/containerd/certs.d/docker.io cat /etc/containerd/certs.d/docker.io/hosts.toml EOF server https://docker.io [host.https://docker.xuanyuan.me] capabilities [pull, resolve] [host.https://docker.1panel.live] capabilities [pull, resolve] EOF示例K8s 官方镜像加速mkdir -p /etc/containerd/certs.d/registry.k8s.io cat /etc/containerd/certs.d/registry.k8s.io/hosts.toml EOF server https://registry.k8s.io [host.https://k8s.m.daocloud.io] capabilities [pull, resolve, push] EOF其他常用源可参考 DaoCloud、阿里云 ACR、轩辕镜像等docker.elastic.co→elastic.m.daocloud.iogcr.io→gcr.m.daocloud.ioghcr.io→ghcr.m.daocloud.iomcr.microsoft.com→mcr.m.daocloud.ionvcr.io→nvcr.m.daocloud.ioquay.io→quay.m.daocloud.io3. 重启 containerdsystemctl daemon-reload systemctl restart containerdhosts.toml 支持热加载但重启最稳妥4. 验证配置使用crictl测试拉取crictl pull nginx:latest crictl pull registry.k8s.io/pause:3.9如果提示Image is up to date或下载速度快说明配置成功5. 注意事项命名空间K8s 镜像默认在k8s.io命名空间使用ctr -n k8s.io拉取腾讯云加速源维护免费加速源可能失效建议定期更换或使用自建 Registry 缓存腾讯云批量部署可写脚本批量配置多台节点腾讯云这样配置后containerd 就能自动走国内加速源大幅提高镜像拉取速度尤其适合国内网络环境