From 953e892e56fa27d8d30ebb3ec49160388dda5a5b Mon Sep 17 00:00:00 2001
From: lIuDuI <1693291525@qq.com>
Date: Fri, 7 Dec 2018 21:57:38 +0800
Subject: [PATCH] zh-trans: add cri.md (#11448)

* zh-trans: add cri.md

zh-trans: add cri.md

update cri.md

update cri.md

Update cri.md

update cri.md

update cri.md

* update cri.md

update cri.md

* update cri.md

* update cri.md
---
 content/zh/docs/setup/cri.md | 471 +++++++++++++++++++++++++++++++++++
 1 file changed, 471 insertions(+)
 create mode 100644 content/zh/docs/setup/cri.md

diff --git a/content/zh/docs/setup/cri.md b/content/zh/docs/setup/cri.md
new file mode 100644
index 0000000000..a77476a074
--- /dev/null
+++ b/content/zh/docs/setup/cri.md
@@ -0,0 +1,471 @@
+---
+title: 安装 CRI
+content_template: templates/concept
+weight: 100
+---
+
+<!--
+---
+reviewers:
+- vincepri
+- bart0sh
+title: CRI installation
+content_template: templates/concept
+weight: 100
+---
+-->
+
+{{% capture overview %}}
+
+从 v1.6.0 开始，Kubernetes 默认启用 CRI(容器运行时接口)。此页面包含各种运行时的安装说明。
+此页面包含各种运行时的安装说明。
+
+<!--
+Since v1.6.0, Kubernetes has enabled the use of CRI, Container Runtime Interface, by default.
+This page contains installation instruction for various runtimes.
+-->
+
+{{% /capture %}}
+
+{{% capture body %}}
+
+请以 root 用户在操作系统上执行以下命令。
+SSH 登录到各个主机后，你可以执行 `sudo -i` 成为 root 用户。
+
+<!--
+Please proceed with executing the following commands based on your OS as root.
+You may become the root user by executing `sudo -i` after SSH-ing to each host.
+-->
+
+## Docker
+
+<!--
+## Docker
+-->
+
+在每台机器上安装 Docker
+
+<!--
+On each of your machines, install Docker.
+-->
+
+建议使用版本 18.06，但已知 1.11，1.12，1.13 和 17.03 也可以使用。
+
+<!--
+Version 18.06 is recommended, but 1.11, 1.12, 1.13 and 17.03 are known to work as well.
+-->
+
+跟踪在 Kubernetes 发行说明中最新的已验证 Docker 版本。
+
+<!--
+Keep track of the latest verified Docker version in the Kubernetes release notes.
+-->
+
+使用以下命令在系统上安装 Docker：
+
+<!--
+Use the following commands to install Docker on your system:
+-->
+
+
+
+<!--
+# Install Docker from Ubuntu's repositories:
+-->
+
+<!--
+# or install Docker CE 18.06 from Docker's repositories for Ubuntu or Debian:
+-->
+
+<!--
+## Install prerequisites.
+-->
+
+<!--
+## Download GPG key.
+-->
+
+<!--
+## Add docker apt repository.
+-->
+
+<!--
+## Install docker.
+-->
+
+<!--
+# Setup daemon.
+-->
+
+<!--
+# Restart docker.
+-->
+
+<!--
+# Install Docker from CentOS/RHEL repository:
+-->
+
+<!--
+# or install Docker CE 18.06 from Docker's CentOS repositories:
+-->
+
+<!--
+## Install prerequisites.
+-->
+
+<!--
+## Add docker repository.
+-->
+
+<!--
+## Install docker.
+-->
+
+<!--
+## Create /etc/docker directory.
+-->
+
+<!--
+# Setup daemon.
+-->
+
+<!--
+# Restart docker.
+-->
+
+
+
+{{< tabs name="tab-cri-docker-installation" >}}
+{{< tab name="Ubuntu 16.04" codelang="bash" >}}
+
+# 从 Ubuntu 的存储库安装 Docker：
+apt-get update
+apt-get install -y docker.io
+
+# 或者从 Docker 的 Ubuntu 或 Debian 镜像仓库中安装 Docker CE 18.06：
+
+## 安装环境准备。
+apt-get update && apt-get install apt-transport-https ca-certificates curl software-properties-common
+
+## 下载 GPG 密钥。
+url -fsSL https://download.docker.com/linux/ubuntu/gpg | apt-key add -
+
+## 添加 docker apt 镜像仓库。
+add-apt-repository \
+   "deb [arch=amd64] https://download.docker.com/linux/ubuntu \
+   $(lsb_release -cs) \
+   stable"
+
+## 安装 docker。
+apt-get update && apt-get install docker-ce=18.06.0~ce~3-0~ubuntu
+
+# 设置守护进程。
+cat > /etc/docker/daemon.json <<EOF
+{
+  "exec-opts": ["native.cgroupdriver=systemd"],
+  "log-driver": "json-file",
+  "log-opts": {
+    "max-size": "100m"
+  },
+  "storage-driver": "overlay2"
+}
+EOF
+
+mkdir -p /etc/systemd/system/docker.service.d
+
+# 重启 docker。
+ystemctl daemon-reload
+systemctl restart docker
+
+{{< /tab >}}
+{{< tab name="CentOS/RHEL 7.4+" codelang="bash" >}}
+
+# 从 CentOs 镜像仓库安装 Docker：
+yum install -y docker
+
+# 或从 Docker 的 Centos 存储库安装 Docker CE 18.06：
+
+## 安装环境准备。
+yum install yum-utils device-mapper-persistent-data lvm2
+
+## 添加 docker 镜像仓库。
+m-config-manager \
+    --add-repo \
+    https://download.docker.com/linux/centos/docker-ce.repo
+
+## 安装 docker。
+yum update && yum install docker-ce-18.06.1.ce
+
+## 创建 /etc/docker 目录。
+mkdir /etc/docker
+
+# 设置守护进程。
+
+cat > /etc/docker/daemon.json <<EOF
+{
+  "exec-opts": ["native.cgroupdriver=systemd"],
+  "log-driver": "json-file",
+  "log-opts": {
+    "max-size": "100m"
+  },
+  "storage-driver": "overlay2",
+  "storage-opts": [
+    "overlay2.override_kernel_check=true"
+  ]
+}
+EOF
+
+mkdir -p /etc/systemd/system/docker.service.d
+
+# 重启 docker。
+systemctl daemon-reload
+systemctl restart docker
+
+{{< /tab >}}
+{{< /tabs >}}
+
+请参阅 [Docker 官方安装指南](https://docs.docker.com/engine/installation/)
+获取更多信息。
+
+<!--
+Refer to the [official Docker installation guides](https://docs.docker.com/engine/installation/)
+for more information.
+-->
+
+## CRI-O
+
+本节包含将“CRI-O”安装为 CRI 运行时所需的步骤。
+
+<!--
+## CRI-O
+
+This section contains the necessary steps to install `CRI-O` as CRI runtime.
+-->
+
+使用以下命令在系统上安装 CRI-O：
+
+<!--
+Use the following commands to install CRI-O on your system:
+-->
+
+### 环境准备
+
+<!--
+### Prerequisites
+-->
+
+
+
+<!--
+# Setup required sysctl params, these persist across reboots.
+-->
+
+<!--
+# Install prerequisites
+-->
+
+<!--
+# Install CRI-O
+-->
+
+<!--
+# Install prerequisites
+-->
+
+<!--
+# Install CRI-O
+-->
+
+
+
+```shell
+modprobe overlay
+modprobe br_netfilter
+
+# 设置需要 sysctl 参数，这些参数在重新引导时仍然存在。
+cat > /etc/sysctl.d/99-kubernetes-cri.conf <<EOF
+net.bridge.bridge-nf-call-iptables  = 1
+net.ipv4.ip_forward                 = 1
+net.bridge.bridge-nf-call-ip6tables = 1
+EOF
+
+sysctl --system
+```
+
+{{< tabs name="tab-cri-cri-o-installation" >}}
+{{< tab name="Ubuntu 16.04" codelang="bash" >}}
+
+# 安装环境准备。
+apt-get update
+apt-get install software-properties-common
+
+add-apt-repository ppa:projectatomic/ppa
+apt-get update
+
+# 安装 CRI-O
+apt-get install cri-o-1.11
+
+{{< /tab >}}
+{{< tab name="CentOS/RHEL 7.4+" codelang="bash" >}}
+
+# 安装环境准备
+yum-config-manager --add-repo=https://cbs.centos.org/repos/paas7-crio-311-candidate/x86_64/os/
+
+# 安装 CRI-O
+apt-get install cri-o-1.11
+
+{{< /tab >}}
+{{< /tabs >}}
+
+### 启动 CRI-O
+
+```
+systemctl start crio
+```
+
+<!--
+### Start CRI-O
+
+```
+systemctl start crio
+```
+-->
+
+请参阅 [CRI-O 安装指南](https://github.com/kubernets-sigs/cri-o# get -started)
+的更多的信息。
+
+<!--
+Refer to the [CRI-O installation guide](https://github.com/kubernetes-sigs/cri-o#getting-started)
+for more information.
+-->
+
+## 容器
+
+<!--
+## containerd
+-->
+
+本节包含使用“容器运行时”作为 CRI 运行时所需的步骤。
+
+<!--
+This section contains the necessary steps to use `containerd` as CRI runtime.
+-->
+
+使用以下命令在系统上安装容器：
+
+<!--
+Use the following commands to install Containerd on your system:
+-->
+
+### 环境准备
+
+<!--
+### Prerequisites
+-->
+```shell
+modprobe overlay
+modprobe br_netfilter
+
+# 设置需要 sysctl 参数，这些参数在重新引导时仍然存在。
+cat > /etc/sysctl.d/99-kubernetes-cri.conf <<EOF
+net.bridge.bridge-nf-call-iptables  = 1
+net.ipv4.ip_forward                 = 1
+net.bridge.bridge-nf-call-ip6tables = 1
+EOF
+
+sysctl --system
+```
+
+<!--
+# Setup required sysctl params, these persist across reboots.
+cat > /etc/sysctl.d/99-kubernetes-cri.conf <<EOF
+net.bridge.bridge-nf-call-iptables  = 1
+net.ipv4.ip_forward                 = 1
+net.bridge.bridge-nf-call-ip6tables = 1
+EOF
+
+sysctl --system
+```
+-->
+
+{{< tabs name="tab-cri-containerd-installation" >}}
+{{< tab name="Ubuntu 16.04+" codelang="bash" >}}
+apt-get install -y libseccomp2
+{{< /tab >}}
+{{< tab name="CentOS/RHEL 7.4+" codelang="bash" >}}
+yum install -y libseccomp
+{{< /tab >}}
+{{< /tabs >}}
+
+<!--
+apt-get install -y libseccomp2
+yum install -y libseccomp
+-->
+
+### 安装容器运行时
+
+<!--
+### Install containerd
+-->
+
+[容器运行时版本](https://github.com/containerd/containerd/release)定期发布，下面的值被硬编码为编写本文时可用的最新版本。请查看更新的版本和哈希[此处](https://storage.googleapis.com/cri-containerd.release)。
+
+<!--
+[Containerd releases](https://github.com/containerd/containerd/releases) are published regularly, the values below are hardcoded to the latest version available at the time of writing. Please check for newer versions and hashes [here](https://storage.googleapis.com/cri-containerd-release).
+-->
+
+
+
+<!--
+# Export required environment variables.
+-->
+
+<!--
+# Download containerd tar.
+-->
+
+<!--
+# Check hash.
+-->
+
+<!--
+# Unpack.
+-->
+
+<!--
+# Start containerd.
+-->
+
+
+
+```shell
+# 导出所需的环境变量。
+export CONTAINERD_VERSION="1.1.2"
+export CONTAINERD_SHA256="d4ed54891e90a5d1a45e3e96464e2e8a4770cd380c21285ef5c9895c40549218"
+
+# 下载容器 tar 包。
+wget https://storage.googleapis.com/cri-containerd-release/cri-containerd-${CONTAINERD_VERSION}.linux-amd64.tar.gz
+
+# 哈希校验和检查。
+echo "${CONTAINERD_SHA256} cri-containerd-${CONTAINERD_VERSION}.linux-amd64.tar.gz" | sha256sum --check -
+
+# 解压缩。
+tar --no-overwrite-dir -C / -xzf cri-containerd-${CONTAINERD_VERSION}.linux-amd64.tar.gz
+
+# 启动容器。
+systemctl start containerd
+```
+
+## 其他 CRI 运行时：rktlet 和 frakti
+
+<!--
+## Other CRI runtimes: rktlet and frakti
+-->
+
+参考 [Frakti 快速入门指南](https://github.com/kubernetes/frakti# QuickStart)和 [Rktlet 入门指南](https://github.com/kubernets-incubator/rktlet/blob/master/docs/getting-startedguide.md)获取更多信息。
+
+{{% /capture %}}
+
+<!--
+Refer to the [Frakti QuickStart guide](https://github.com/kubernetes/frakti#quickstart) and [Rktlet Getting Started guide](https://github.com/kubernetes-incubator/rktlet/blob/master/docs/getting-started-guide.md) for more information.
+-->