Merge pull request #26600 from marosset/windows-containerd-install-disable-defender

Updating containerd on Windows install steps to add Defender Exclusion
This commit is contained in:
Kubernetes Prow Robot
2021-02-28 13:26:39 -08:00
committed by GitHub
@@ -219,30 +219,39 @@ sudo systemctl restart containerd
``` ```
{{% /tab %}} {{% /tab %}}
{{% tab name="Windows (PowerShell)" %}} {{% tab name="Windows (PowerShell)" %}}
<br />
Start a Powershell session, set `$Version` to the desired version (ex: `$Version=1.4.3`), and then run the following commands:
<br />
```powershell ```powershell
# (Install containerd) # (Install containerd)
# download containerd # Download containerd
cmd /c curl -OL https://github.com/containerd/containerd/releases/download/v1.4.1/containerd-1.4.1-windows-amd64.tar.gz curl.exe -L https://github.com/containerd/containerd/releases/download/v$Version/containerd-$Version-windows-amd64.tar.gz -o containerd-windows-amd64.tar.gz
cmd /c tar xvf .\containerd-1.4.1-windows-amd64.tar.gz tar.exe xvf .\containerd-windows-amd64.tar.gz
``` ```
```powershell ```powershell
# extract and configure # Extract and configure
Copy-Item -Path ".\bin\" -Destination "$Env:ProgramFiles\containerd" -Recurse -Force Copy-Item -Path ".\bin\" -Destination "$Env:ProgramFiles\containerd" -Recurse -Force
cd $Env:ProgramFiles\containerd\ cd $Env:ProgramFiles\containerd\
.\containerd.exe config default | Out-File config.toml -Encoding ascii .\containerd.exe config default | Out-File config.toml -Encoding ascii
# review the configuration. depending on setup you may want to adjust: # Review the configuration. Depending on setup you may want to adjust:
# - the sandbox_image (kubernetes pause image) # - the sandbox_image (Kubernetes pause image)
# - cni bin_dir and conf_dir locations # - cni bin_dir and conf_dir locations
Get-Content config.toml Get-Content config.toml
# (Optional - but highly recommended) Exclude containerd form Windows Defender Scans
Add-MpPreference -ExclusionProcess "$Env:ProgramFiles\containerd\containerd.exe"
``` ```
```powershell ```powershell
# start containerd # Start containerd
.\containerd.exe --register-service .\containerd.exe --register-service
Start-Service containerd Start-Service containerd
``` ```
{{% /tab %}} {{% /tab %}}
{{< /tabs >}} {{< /tabs >}}