curl https://mirrors.ustc.edu.cn/docker-ce/linux/centos/docker-ce.repo >> /etc/yum.repo.d/docker-ce.repo

yum install -y containerd.io docker-compose-plugin

mkdir -p /etc/containerd/
containerd config default > /etc/containerd/config.toml

1. sandbox 修改为 国内 k8s.gcr.io 源
2. 
      [plugins."io.containerd.grpc.v1.cri".registry]
        config_path = "/etc/containerd/certs.d"
        
        
      mkdir -p /etc/containerd/certs.d
      
      vim /etc/containerd/certs.d/docker.io/hosts.toml
      [host."https://********.mirror.aliyuncs.com"]
        capabilities = ["pull", "resolve"]
        skip_verify = true
      [host."https://registry.docker-cn.com"]
        capabilities = ["pull", "resolve"]
        skip_verify = true
      
      vim /etc/containerd/certs.d/gcr.io/hosts.toml
      [host."https://registry.aliyuncs.com"]
        capabilities = ["pull", "resolve"]
        skip_verify = true
      [host."https://gcr.mirrors.ustc.edu.cn"]
        capabilities = ["pull", "resolve"]
        skip_verify = true
      
      vim /etc/containerd/certs.d/quay.io/hosts.toml
      [host."https://quay.mirrors.ustc.edu.cn"]
        capabilities = ["pull", "resolve"]
        skip_verify = true

4. SystemdCgroup = true