Questions tagged [cri-o]

CRI-O is an implementation of the Kubernetes CRI to enable using OCI compatible runtimes, CRI-O QUESTIONS MUST BE SPECIFICALLY RELATED TO CONFIGURATION OR INSTALLATION ISSUES. This tag is frequently used alongside other tags like kubernetes or openshift.

Filter by
Sorted by
Tagged with
0 votes
0 answers
58 views

Jetson Orin NX nvidia-container-runtime not utilizing GPU

I'm attempting to get an Nvidia Jetson Orin NX 16gb playing nicely with Kubernetes, using CRI-O. I've installed the latest stable toolkit on the Jetson. NVIDIA Container Runtime version 1.13.5 commit: ...
Dudo's user avatar
  • 4,011
0 votes
1 answer
37 views

Does a StatefulSet pod, when deleted or failed, get redeployed on the same worker node, or is it deployed on another available worker node?

Does a StatefulSet pod, when deleted or failed, get redeployed on the same worker node, or is it deployed on another available worker node? Seeking clarification on the default behavior of StatefulSet ...
rd17's user avatar
  • 1
0 votes
1 answer
406 views

How to allow only one user to be able to access only one pod within an openshift project?

I need solve an issue about pod access inside a given project. One given user, just need to do oc exec in a specific pod, inside a specific project. The user has the lowest rbac profile inside the ...
Mad Rudder Man's user avatar
0 votes
1 answer
234 views

How to resolve kube-proxy stuck in container creating state?

I am trying to join a ubuntu host to rhel kubernetes master. Installed kubernetes version 1.24.3 and using crio runtime. If i join a rhel vm to rhel kubernetes master. There is no issue. But when i ...
Prems's user avatar
  • 101
0 votes
1 answer
95 views

Need to know the exact differences between the docker, rocket and CRIO

We have docker, rocket and CRIO as OCIs . what is the main differences between docker , rocket and CRIO ? why only docker is most popular ? what is the reason behind the same ? Anticipating your ...
Srikrishnan Subramanian's user avatar
1 vote
0 answers
191 views

not showing kubernetes pods in podman

after installing the k8s 1.24 version, I would like to manage the container using cri-o and podman. I installed podman to use the podman commit function, but I can see the image, but I can't see the ...
ymir0916's user avatar
-1 votes
1 answer
312 views

Switch container runtime in K8S cluster. From CRI-O to docker

There is a working k8s cluster with two nodes(master and worker) in it, and with CRI-O as a container runtime. I need(temporary) to switch from cri-o to docker container runtime. I was trying to use ...
johnny k's user avatar
0 votes
1 answer
538 views

how to start minikube after restart my host pc

I install minikube on ubuntu 22.04 with podman and cri-o , the issue I have the pc will be late if I restart, and minikube will not work after restart my pc. this is my status after restart $ minikube ...
MSH's user avatar
  • 395
1 vote
0 answers
392 views

How to install podman on top of docker (for build purposes)?

Question How to install podman on top of docker (in general or in particular on CentOS Stream 8) on the same (bare metal) build server? First such installation attempt revealed incompatibles between ...
mirekphd's user avatar
  • 4,877
0 votes
1 answer
981 views

Create kubectl secrets when pulling from private registry using crio

I want to pull images from the private registry, as without docker need to do this step. Any alternative to this command for crio: kubectl create secret docker-registry regcred --docker-server=<...
rowoc's user avatar
  • 239
-3 votes
1 answer
2k views

can i install kubernetes on amazon linux 2

I'm having trouble Installing kubeadm on my amazon linux 2 instance specifically when i try to create a cluster, when i try Installing runtime i get to chose which one to use : containerd CRI-O Docker ...
mohamed lahsoumi's user avatar
2 votes
1 answer
3k views

Kubernetes with CRI-O and docker private registry: pods running only on master node

I have a kubernetes cluster running on 3 VMs and I enabled master nodes for pods. I also have docker private registry running on another VM with valid SSL certificates installed. I am using CRI-O in ...
Thomson Mathew's user avatar
0 votes
1 answer
2k views

How to export image in CRI-O?

Both docker and containerd provide golang clients and provide some interfaces, such as list images, export images or tag images. How can this be done in cri-o? eg: github.com/containerd/containerd and ...
mjammer's user avatar
  • 11
0 votes
2 answers
2k views

How to make a redis cluster in k8s environment using nodeport service type?

I have tried to make a redis cluster in k8s environment using "NodePort" type of service. More specifically, I want to compose a redis cluster across two different k8s cluster. When I used ...
Togomi's user avatar
  • 139
0 votes
2 answers
3k views

How to run crictl command as non root user

How to run crictl as non-root user. My docker commands work with non-root user because my user is added to docker group. id uid=1002(kube) gid=100(users) groups=100(users),10(wheel),1001(dockerroot),...
My IT GURU's user avatar
0 votes
0 answers
231 views

My kubernetes pods dont reach to a VM in the same network

I had to setup an cluster on CentOS virtual machines, and I did as I found on internet; at first seems like is working well, but recently i'm getting too much trouble with istio and communications. ...
Lucas Aleixo's user avatar
1 vote
1 answer
648 views

How to get a pod name and namespace on a node running that pod?

A node have a plenty of info for metrics collection, under cgroups kubepods.slice for example. but to complete the metric you have to relate a pod metric to a pod name. a name and namespace itself are ...
xakepp35's user avatar
  • 2,888
-1 votes
1 answer
274 views

memory management problems with openj9 and k8s

we are running a k8s-cluster with some java applications. As container-runtime we use cr-io and as jvm adoptopenjdk-16 openj9 (should have good container support). Recently we have an increased ...
Chris's user avatar
  • 11
0 votes
1 answer
214 views

How to mount volume without using docker

In order to mount a directory to a container i used bind mounts https://docs.docker.com/storage/bind-mounts/ Now i'm trying to find a way to replace $docker run -v command.
Gioni's user avatar
  • 1
8 votes
1 answer
20k views

"crictl rmi" removing all the images which are in use

I'm trying to remove all unused images with specific name format from Kubernetes cluster like below. crictl images | grep -E -- 'foo|bar' | awk '{print \$3}' | xargs -n 1 crictl rmi But this one also ...
CRP08's user avatar
  • 133
-1 votes
1 answer
75 views

How to enable https on cri-o socket metrics

I am following the documentation CRI-O Metrics. I can get the metrics e.g. http://hostname:port/metrics but not as expected on https://hostname:port/metrics Sample of my configurations file: $ cat /...
Thanos's user avatar
  • 1,618
0 votes
1 answer
2k views

Kubelet - Factory "crio" was unable to handle container [closed]

I try to install Kubernetes 1.21.1 by kubespray master branch. It is behind proxy server. I filled in http_proxy, https_proxy,no_proxy to crio environment and global environment. Master 1: 192.168.33....
Martin Smola's user avatar
0 votes
1 answer
248 views

Is it possible to run wine in containerd/ kubernetes CRI-O?

Just wondering if deprecation of dockershim makes it still possible to run wine, windows processes in kubernetes?
Paal Pedersen's user avatar
0 votes
1 answer
276 views

what version of software I need to deploy to get kubernetes 1.19.7

I am trying to setup a kubernetes cluster but apparently the nfs-client-provisioner has issues with the newer versions of kubernetes. Therefore I need to install the latest version of 1.19. I am ...
zozo6015's user avatar
  • 557
4 votes
0 answers
421 views

How to start a container in cri-o with only specifying the image name?

I am trying to achieve something like docker run -it <image_name> bash I want to specify the image to run and do not care about anything else. crictl requires config files for both a container ...
Hakan Baba's user avatar
  • 1,895
2 votes
0 answers
308 views

Retrieve cri-o information using golang

I am trying to retrieve cri-o information like containerID, pid using golang. The below mentioned code works in my mac but when I containerize it and deploy it on openshift 3.11 stack, it doesn't work....
kms's user avatar
  • 153
0 votes
1 answer
30 views

CRIO runtime spec for OCI v1alpha1 compliance

devs, where can I find the spec for a cri-o runtime cmdline interface to be fully OCI v1alpha1 compliant? CRI-O supports any OCI compatible runtime. We test with runc and Clear Containers today. But ...
Ruben Jenster's user avatar
1 vote
1 answer
3k views

kubeadm v1.18.2 with crio version 1.18.2 failing to start master node from private repo on Centos7 / RH7

Description I am relatively new to kubernetes. I can run my cluster when using the default socket (/var/run/dockershim.sock) but when I tried the crio socket to pull the images from my private repo I ...
Thanos's user avatar
  • 1,618
6 votes
2 answers
7k views

Kubelet - failed to "CreatePodSandbox" for coredns; failed to set bridge addr: could not add ip addr to "cni0": permission denied

EDIT 1 In response to the comments I have included additional information. $ kubectl get pods --namespace kube-system NAME READY STATUS ...
Riki's user avatar
  • 303
2 votes
1 answer
892 views

How do I identify if a runc container is running as privileged?

Regardless of docker/crio/containerd starting the container, is there a way to understand if the runc container is running as privileged one? docker inspect does show privilegedness but I want to ...
Sam Thomas's user avatar
0 votes
1 answer
2k views

cri-o socket (crio.sock) vs dockershim socket (dockershim.sock)

I am very new to Kubernetes and trying to understand the difference between crio vs dockershim. I was reading the manual on how to install kubernetes and I see that crio is recommended as a step (see ...
Thanos's user avatar
  • 1,618
1 vote
1 answer
4k views

Failed to create pod sandbox: rpc error: code = Unknown desc = seccomp is not enabled in your kernel, cannot run with a profile

I'm having a problem with kube & Cri-o. Actually I'm deploying a kube cluster and I just wan't to deploy the dashboard. I've installed CRIO instead of Docker (RHEL8 in production environment). The ...
CptBuko's user avatar
  • 11
6 votes
1 answer
808 views

What are good workflows for deploying podman/buildah created container images to minikube?

I am exploring and learning about containers and kubernetes using podman and minikube on a linux workstation. I use podman to build images on the workstation and would like to deploy these images in ...
Brad Smith's user avatar
2 votes
3 answers
1k views

coredns can't start when using crio and with selinux on

I know this question is asked many times, but all about docker, this time is crio. CentOS Linux release 7.6 CRI-O Version: 1.16.1 Kubernetes: v1.16.3 KubeAdm: v1.16.3 CoreDNS pods are in Error/...
Cyron's user avatar
  • 41
1 vote
2 answers
2k views

How to load a local Docker image in Minikube running on CRI-O?

To build and run a Docker image in Minikube running on the Docker container runtime, all I have to do is this: eval $(minikube docker-env) docker build -t some/tag . Minikube will find the image. ...
Michael Böckling's user avatar
1 vote
3 answers
3k views

use cri-o to run pod and container when `cgroup_manager=systemd`

I successfully use cri-o to run pod and container, following the guide and tutorial, whose default cgroup_manager is cgroupfs. when I tried to set cgroup_manager = "systemd" in /etc/crio/crio.conf ...
Jiaheng Tao's user avatar
1 vote
1 answer
1k views

Get specific output from grep [duplicate]

I am trying to get a specific output using grep but I am unable to do so. Here is my grep command : crictl inspect 47aaecb541688accf37840108cc0d19b39b84f8337740edf2ca7e5e81a24328e | grep "io....
kms's user avatar
  • 153
5 votes
3 answers
17k views

Kubespray fails with "Found multiple CRI sockets, please use --cri-socket to select one"

Problem encountered When deploying a cluster with Kubespray, CRI-O and Cilium I get an error about having multiple CRI socket to choose from. Full error fatal: [p3kubemaster1]: FAILED! => {"...
Doctor's user avatar
  • 7,185
2 votes
1 answer
6k views

kubeadm compatibility between "--cri-socket" flag and "init phase" argument

I'm trying to set which cri-o socket to use by kubeadm ! To achieve this I should use the flag --cri-socket /var/run/crio/crio.sock The current command is in the form kubeadm init phase <...
Doctor's user avatar
  • 7,185
3 votes
1 answer
6k views

SSLError: ('The read operation timed out',) when trying to deploy Kuberntes with Kubespray

Hello and thanks in advance for your help ! I am trying to deploy a Kubernetes cluster using Kubespray (an ansible playbook). I am trying to deploy the Cluster on 17 KVM host (all nodes are running ...
Popopame's user avatar
  • 492
1 vote
1 answer
485 views

Problem getting pods stats from kubelet and cri-o

We are running Kubernetes with the following configuration: On-premise Kubernetes 1.11.3, cri-o 1.11.6 and CentOS7 with UEK-4.14.35 I can't make crictl stats to return pods information, it returns ...
alubin's user avatar
  • 11