Alice 咦kk居然支持containerd了，这个就不清楚了，我一直是手动部署环境，再这个基础上部署ks的 :

      magitekbay ok，多谢啦，那我再研究一下，我是基于3.0自己改的kk的源码，手动部署还好，都是官方的配置就行

          magitekbay 破案了，刚看了2.0kk的源码，这个config写在了源码里，每次都会更新，我去更新一下源码就行

              Alice : 嗯，不客气，kk部署比较省事，3.0的时候用过，但是不怎么符合我的场景，我就自己手动部署了，就是每次升级都得自己改镜像，签证书的是一个二级ca，ks-installer不支持就很头疼

                Alice
                k3s的话，kk没有去装容器运行时。然后是k3s会自己装containerd，使用命令是k3s ctr xxx。
                看你的报错应该是需要配置走http去上传镜像到私有镜像仓库，可以试试这样配置：

                registry:
    registryMirrors: []
    insecureRegistries: []
    privateRegistry: "192.168.5.61:1080"
    planHTTP: true

                    24sama 恩我现在是设置了http，配置不生效，我试试用新版的kk我看有pr修复这个问题了

                      改了v2.2.1的版本仍然不行
                      Warning FailedCreatePodSandBox 0s (x5 over 49s) kubelet, node1 Failed to create pod sandbox: rpc error: code = Unknown desc = failed to get sandbox image "192.168.5.61:1080/kubesphere/pause:3.2": failed to pull image "192.168.5.61:1080/kubesphere/pause:3.2": failed to pull and unpack image "192.168.5.61:1080/kubesphere/pause:3.2": failed to resolve reference "192.168.5.61:1080/kubesphere/pause:3.2": failed to do request: Head https://192.168.5.61:1080/v2/kubesphere/pause/manifests/3.2: http: server gave HTTP response to HTTPS client

                        config.yaml
                        registry:

                        privateRegistry: "192.168.5.61:1080"

namespaceOverride: ""

registryMirrors: []

insecureRegistries: [192.168.5.61:1080]

auths: # if docker add by \`docker login\`, if containerd append to \`/etc/containerd/config.toml\`

  "192.168.5.61:1080":

    username: "admin"

    password: "Harbor12345"

    skipTLSVerify: false # Allow contacting registries over HTTPS with failed TLS verification.

    plainHTTP: true # Allow contacting registries over HTTP.

                        addons: []

                        24sama 这个我确实设置了。。。还是不生效，就很离谱，我去github问问社区的人

                          24sama
                          [plugins.opt]

                          path = "/var/lib/rancher/k3s/agent/containerd"

                          [plugins.cri]

                          stream_server_address = "127.0.0.1"

                          stream_server_port = "10010"

                          enable_selinux = false

                          sandbox_image = "192.168.5.61:1080/kubesphere/pause:3.2"

                          [plugins.cri.containerd.runtimes.runc]

                          runtime_type = "io.containerd.runc.v2"

                          [plugins.cri.registry.mirrors]

                          [plugins.cri.registry.mirrors."192.168.5.61:1080"]

                          endpoint = ["http://192.168.5.61:1080"]

                          [plugins.cri.registry.configs."192.168.5.61:1080".auth]

                          username = "admin"

                          password = "Harbor12345"