282
questions
0
votes
0
answers
9
views
How can I run NVIDIA GPU code from containerd ctr?
I installed containerd using getting started guide from https://github.com/containerd/containerd/blob/main/docs/getting-started.md. Using ctr tool, I am able to run container like
sudo ctr run --...
0
votes
0
answers
34
views
How to Add a Private Docker Registry with Self-Signed Certificates to k3s Without Restarting k3s?
I am currently running a k3s cluster, which uses containerd as the container runtime. I need to add a private Docker registry to the cluster that uses self-signed certificates. However, I'm unable to ...
1
vote
0
answers
31
views
Containerd, extend network interface/access to DIND container to perform docker pull
I have an unusual use case, for a number of reasons my company asked me to rewrite my application and deploy it using containerd on Kubernets.The app does something similar to Github Actions and ...
1
vote
1
answer
70
views
why can "ctr images list" not show images pulled by command of "crictl pull"?
why can "ctr images list" not show images pulled by command of "crictl pull"?
After install containerd , using crictl to pull busybox successed
sudo crictl pull busybox
but using ...
0
votes
0
answers
65
views
Monitoring containerd with cAdvisor, outside of Kubernetes
I'm running a number of containers using containerd directly, spun up with the assistance of nerdctl. For various reasons, docker and podman does not suit our current usecase. Also, this is NOT a ...
0
votes
0
answers
85
views
To run nginx as a non root user in GKE - nginxinc/nginx-unprivileged:alpine-slim - on privileged port 80
https://hub.docker.com/r/nginxinc/nginx-unprivileged
States that
The default NGINX listen port is now 8080 instead of 80 (this is no
longer necessary as of Docker 20.03 but it's still required in ...
0
votes
0
answers
27
views
Is there any programmatic way to detect that a process running under containerd has its stdin and stdout closed?
I am currently exploring workarounds for the problem of processes started by kubectl exec not dying on disconnect described in my other question.
Here are a couple of observations.
If I run the ...
0
votes
0
answers
56
views
Ingress is not working on my Kubernetes clusters
I have built Kubernetes clusters that consists of four nodes.
But ingress is not reachable from control plane or deployed host.
I tried to deploy services by NodePort then the service is reachable ...
1
vote
1
answer
103
views
containerd client + soci snapshotter: http: server gave HTTP response to HTTPS client
I'm trying to setup and insecure containerd client to pull images from an insecure private registry using the following code:
package main
import (
"context"
"crypto/tls"
...
0
votes
1
answer
99
views
Error when changing containerd root directory to nfsshare mount point
After changing containerd root directory to nfsshare mount point I am getting this error:
unpacking registry.k8s.io/kube-apiserver:v1.28.11 (sha256:...
2
votes
1
answer
142
views
How to show pull progress when using Go code to pull containerd image
I am using the following Golang code to pull containerd image.
package main
import (
"context"
"log"
"github.com/containerd/containerd"
"github.com/...
1
vote
0
answers
426
views
Containerd error loading seccomp filter into kernel in kubernetes
Recently i get this error on one of the Kubernetes worker and on bitnami pods (redis, rabbitmq, mongodb) where the seccomp profile is defined.
(combined from similar events): Liveness probe errored: ...
0
votes
1
answer
78
views
How to use grpcurl with containerd.sock pull image?
I found the image.proto file of containerd,
https://github.com/containerd/containerd/blob/main/api/services/images/v1/images.proto#L90
I can use the proto file to get a local image,
[root@master-18-...
0
votes
1
answer
112
views
podman can not connect to container port
I run postgresql with podman :
> podman run \
-d \
--name=postgresql \
-v /opt/Docker/volumes/postgresql:/var/lib/postgresql/data
-e POSTGRES_DB=admin \
-e POSTGRES_USER=admin \
...
0
votes
1
answer
342
views
Using Colima how can I expose a containerd socket to the host?
I'm developing an application using containerd as the container runtime. I want to use Colima for development on my Mac. The problem is that Colima doesn't seem to expose the containerd socket on the ...
0
votes
0
answers
138
views
Trouble Running NVIDIA GPU Containers on Custom Yocto-Based Distro on HPE Server with NVIDIA A40 GPU
I'm experiencing difficulties running NVIDIA GPU containers on a custom Yocto-based distribution tailored for an HPE server equipped with an NVIDIA A40 GPU. Despite having set up a custom meta-nvidia ...
-1
votes
1
answer
643
views
change container image registry in containerd to nexus proxy repository [closed]
I setup docker hub proxy on nexus http mode and I want to change the default image registry in containerd .I have kubernetes cluster version 1.27 up and running.how can I achieve this?
-1
votes
1
answer
255
views
How to check the pause image download address [closed]
I have changed the Kubernetes default pause image download address to registry.cn-hangzhou.aliyuncs.com/google_containers/pause:3.6 in /etc/containerd/config.toml like this:
[root@k8sslave01 kubelet]# ...
0
votes
0
answers
148
views
How can I change the docker storage driver of a Kubernetes POD that is running on EKS Anywhere running containerd
Does anyone know how to run docker build from inside of a Kubernetes POD running on EKS Anywhere / Kubernetes 1.28 / Ubuntu 22.04 / Jenkins + Kubernetes Plugin and have the docker storage driver be ...
2
votes
1
answer
788
views
Unexplained increasing RES (resident) memory usage of java process
I'm investigating memory issues in a Java 17 spring boot 3 application that was ported from Glassfish/Java 8. It runs on kubernetes.
The container memory request = limit = 5.5Gib. The heap is -Xms = -...
0
votes
0
answers
189
views
containerd commit container to containerd images
I have a running containerd container. I made some changes inside container and want to save it as a containerd image so that if my container restarts changes will be persistent.
Using docker commit ...
0
votes
1
answer
583
views
container_fs_usage_bytes metrics miss pod/container label on containerd
kubectl version v1.24.15-eks
contained version 1.6.19
I am use aws esk cluster, container_fs_usage_bytes metrics miss pod and container label on containerd!
Is there have any solutions?
I am use aws ...
0
votes
0
answers
396
views
issue run nerdctl inside docker container: failed to create shim task: failed to mount rootfs component: invalid argument: unknown
solution to this exact problem is commented below.
original problem:
when try to buildup a docker container and using nerdctl inside it, an error occurs:
failed to create shim task: failed to mount ...
0
votes
0
answers
101
views
kubernetes pod 'CrashLoopBackOff' error: cpu.max: no such file or directory: unknowncontainer
I initiated a Kubernetes cluster on my master node and aimed to incorporate the Jetson AGX Orin as an edge node. Using keadm join, I successfully added the Orin device to the cluster, and it appears ...
0
votes
0
answers
139
views
Cannot run an image pulled from ctr with docker
I'm learning docker and I wanted to tests some stuff about containerd and its command line, with docker, So I pulled an image (in my example docker.io/library/python:3.8.18-bookworm) with ctr command, ...
0
votes
0
answers
524
views
How do I pull a private docker image into crio?
I'm debugging why a container runs fine locally with docker but not on a k8s backend. One of the steps I'd like to debug is running the image locally with crictl like k8s does instead of docker.
I ...
0
votes
0
answers
887
views
Migrating from docker & docker-compose to containerd and nerdctl
I'm currently running docker and docker-compose to automatically deploy my containers. My first container houses Apache and my second container houses Traefik as my reverse proxy. The following docker-...
0
votes
0
answers
553
views
how to login into container when using ctr
I am using this command to start the container:
root@k8sslave01:~# ctr run --net-host --rm docker.io/nicolaka/netshoot:latest netshoot-container
then using this command to login into the container ...
1
vote
0
answers
675
views
How to Configure Containerd to Use a Specific Endpoint in a Harbor Proxy Cache Registry
I'm currently setting up a Kubernetes cluster and using containerd as the container runtime. I have a Harbor registry with a proxy cache project set up to cache images from an external registry (...
1
vote
2
answers
344
views
contained runtime configuration does not persist after AMI creation
I have created an AMI image to be deployed in my AWS EKS. The image has been created from a EC2 instance type P3.2xLarge, I have installed CUDA drivers and Nvidia-container-toolkit and I have ...
0
votes
0
answers
371
views
Pull Image from Private insecure docker registry for K8S using containerd
I am unable to pull image from insecure registry using containerd.
Error:
[eds@rnd-4 4px]$ sudo crictl -r /run/containerd/containerd.sock pull <registry-name>:5000/registry/nginx:master
I1017 12:...
0
votes
0
answers
124
views
How to create a private registry in containerd using ctr command?
I am new to containerd. Please help me out.
In docker to deploy a private registry, we have the below command
docker run -d --restart=always --name registry
-v "$(pwd)"/certs:/certs -e ...
0
votes
0
answers
50
views
Windows rootfs.size-gb label is not expanding volume to specified size
We use to have storage-opts in Docker . Do we have anything similar in containerd to work on
Windows rootfs.size-gb label is not expanding volume to specified size in containerd
We need windows ...
0
votes
0
answers
177
views
I want to create containerd/config.toml file for local lxc containers
I've been trying and looking for a solution to use my local lxc containers images to get loaded in my local k8s cluster.
By this, I have a Dev Environment, which has few lxc containers and images. I ...
3
votes
0
answers
281
views
jdk vulnerability displaying in containerd overlay snapshot
Our Platform team is running security scan behind and displaying the vulnerability as java-1.8.0-openjdk. This directory was displaying under var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/...
0
votes
1
answer
328
views
kubeadm upgrade plan warning when updaten from 1.23 to 1.24 [closed]
A few weeks ago I upgraded kubernetes 1.22 to 1.23. I'm using containerd as container runtime a long time.
Now when upgrading from 1.23 to 1.24 kubeadm upgrade plan show warning about runtime as
W0917 ...
-2
votes
2
answers
3k
views
Pods are not deleted after Deployment is deleted in my Kubernetes Cluster
After deployment, the pods, replicaset, and deployment are created successfully. However, when I try to delete the Deployment using kubectl delete deploy nginx-deployment, the pods and replicaset are ...
0
votes
0
answers
80
views
I’m facing drastic slowness in my web Appa running on containerd and kubernetes vs docker
I’m using containerd runtime for kubernetes ….
When I compare the performance in the same node, same container in docker vs kubernetes, the build load time is 17sec in docker and 55 sec in k8….
The ...
0
votes
1
answer
815
views
ctr pull: Always have to specify registry explicitly
I wanted to pull an image using ctr image pull.
However, it doesn't automatically use the main Docker hub when just using the image name:
ctr image pull e2eteam/busybox:1.29
Results in:
time="...
0
votes
1
answer
426
views
Using Docker image in containerd
I have a Docker image and I imported it to containerd by executing
docker save -o flaskapp.tar flaskapp:v1
Now I imported it to containerd using below
ctr images import flaskapp.tar
After this ctr ...
-1
votes
2
answers
873
views
Local Registry for Kubernetes cluster running with containerd
I have a 4 node (on 4 different machines) Kubernetes cluster running over containerd (setuped with kubeadm), and i need to run some local images on this cluster but i can't find a way to create a ...
4
votes
0
answers
259
views
How can I configure SpringBoot TestContainers to use containerd instead of docker
DockerDesktop allows you to enable the use of containerd. Doing this appears to disable the docker daemon or prevent TestContainers from accessing the host.
I would actually like to use containerd in ...
0
votes
1
answer
109
views
Command cannot be recognized
I wanted to ask a likely very simple question regarding Linux (AlmaLinux-9.2)...
I unpacked the file and I wanted to execute the binary file nerdctl. However, I could not do it if I did not add ./ at ...
0
votes
1
answer
569
views
Cant pull image from nexus repository when i upgrade kubernetes cluster to v1.24
We are unable to pull the container image from the Nexus repository on Kubernetes versions 1.24 and above. However, on Kubernetes version 1.23, we can successfully pull the container image from the ...
0
votes
0
answers
235
views
dns lookup issue on 1.26.7 version kubernetes cluster
I have built a single control-plane 5 worker nodes cluster using kubeadm and containerd as container runtime. I have deployed a simple debian pod and I am getting flapping results in dns requests.
...
1
vote
0
answers
195
views
Kubernetes calico on AWS ec2 instance not functioning
Just got a kubernetes cluster setup on an AWS ec2 instance with calico for networking and I'm receiving the following:
ubuntu@ip-172-31-12-195:~$ kubectl get pods -n kube-system
NAME ...
1
vote
0
answers
602
views
how do I configure ctr to use nexus pull through docker proxy
I am in an air-gapped network, but have access to docker.io via a nexus docker pull through proxy.
I need to use ctr to pull docker.io/plndr/kube-vip.
How do I tell ctr to use nexus as a proxy?
I have ...
3
votes
1
answer
993
views
How to configure containerd to use AWS ECR?
I can pull images from ECR with docker, but failed to pull images with containerd.
I have configured it(/etc/containerd/config.toml) many times, but it has not been successful so far.
e.g.
...
[...
0
votes
1
answer
134
views
Jmeter keeps running in containerd-shim everytime docker is started. how to completely remove it?
I used jmeter once last year for web performance testing.
I didn't realize it keeps running until my colleague told me the staging env keeps getting huge API accesses.
After some investigation, turns ...
0
votes
1
answer
589
views
NeuVector pods deployed via Helm to a local K3s cluster fails to come online, Unknown container runtime
I have a K3s instance running locally with containerd, and I went through the following commands to install NeuVector via Helm
helm repo add neuvector https://neuvector.github.io/neuvector-helm/
helm ...