Questions tagged [cri-o]

CRI-O is an implementation of the Kubernetes CRI to enable using OCI compatible runtimes, CRI-O QUESTIONS MUST BE SPECIFICALLY RELATED TO CONFIGURATION OR INSTALLATION ISSUES. This tag is frequently used alongside other tags like kubernetes or openshift.

42 questions
8
votes
1 answer

"crictl rmi" removing all the images which are in use

I'm trying to remove all unused images with specific name format from Kubernetes cluster like below. crictl images | grep -E -- 'foo|bar' | awk '{print \$3}' | xargs -n 1 crictl rmi But this one also deletes all the images with naming "foo" or…
CRP08
  • 133
  • 1
  • 2
  • 6
6
votes
2 answers

Kubelet - failed to "CreatePodSandbox" for coredns; failed to set bridge addr: could not add ip addr to "cni0": permission denied

EDIT 1 In response to the comments I have included additional information. $ kubectl get pods --namespace kube-system NAME READY STATUS RESTARTS AGE coredns-66bff467f8-lkwfn …
Riki
  • 193
  • 1
  • 10
6
votes
1 answer

What are good workflows for deploying podman/buildah created container images to minikube?

I am exploring and learning about containers and kubernetes using podman and minikube on a linux workstation. I use podman to build images on the workstation and would like to deploy these images in minikube also running on the workstation using the…
Brad Smith
  • 183
  • 1
  • 7
5
votes
3 answers

Kubespray fails with "Found multiple CRI sockets, please use --cri-socket to select one"

Problem encountered When deploying a cluster with Kubespray, CRI-O and Cilium I get an error about having multiple CRI socket to choose from. Full error fatal: [p3kubemaster1]: FAILED! => {"changed": true, "cmd": " mkdir -p…
Doctor
  • 7,115
  • 4
  • 37
  • 55
4
votes
0 answers

How to start a container in cri-o with only specifying the image name?

I am trying to achieve something like docker run -it bash I want to specify the image to run and do not care about anything else. crictl requires config files for both a container and a pod for the run command, if I am not…
Hakan Baba
  • 1,897
  • 4
  • 21
  • 37
3
votes
1 answer

SSLError: ('The read operation timed out',) when trying to deploy Kuberntes with Kubespray

Hello and thanks in advance for your help ! I am trying to deploy a Kubernetes cluster using Kubespray (an ansible playbook). I am trying to deploy the Cluster on 17 KVM host (all nodes are running centos 7 , and are hosted on a baremetal…
Popopame
  • 492
  • 4
  • 18
2
votes
1 answer

Kubernetes with CRI-O and docker private registry: pods running only on master node

I have a kubernetes cluster running on 3 VMs and I enabled master nodes for pods. I also have docker private registry running on another VM with valid SSL certificates installed. I am using CRI-O in my kubernetes cluster. This is what I am doing VM…
Thomson Mathew
  • 419
  • 1
  • 9
  • 28
2
votes
0 answers

Retrieve cri-o information using golang

I am trying to retrieve cri-o information like containerID, pid using golang. The below mentioned code works in my mac but when I containerize it and deploy it on openshift 3.11 stack, it doesn't work. cmdStr in the below mentioned code can be any…
kms
  • 153
  • 2
  • 9
2
votes
1 answer

How do I identify if a runc container is running as privileged?

Regardless of docker/crio/containerd starting the container, is there a way to understand if the runc container is running as privileged one? docker inspect does show privilegedness but I want to find out at the runc layer.
Sam Thomas
  • 647
  • 7
  • 25
2
votes
3 answers

coredns can't start when using crio and with selinux on

I know this question is asked many times, but all about docker, this time is crio. CentOS Linux release 7.6 CRI-O Version: 1.16.1 Kubernetes: v1.16.3 KubeAdm: v1.16.3 CoreDNS pods are in Error/CrashLoopBackOff state, and audit.log shows selinux…
Cyron
  • 41
  • 4
2
votes
1 answer

kubeadm compatibility between "--cri-socket" flag and "init phase" argument

I'm trying to set which cri-o socket to use by kubeadm ! To achieve this I should use the flag --cri-socket /var/run/crio/crio.sock The current command is in the form kubeadm init phase . I must add the --cri-socket flag to it. I…
Doctor
  • 7,115
  • 4
  • 37
  • 55
1
vote
0 answers

not showing kubernetes pods in podman

after installing the k8s 1.24 version, I would like to manage the container using cri-o and podman. I installed podman to use the podman commit function, but I can see the image, but I can't see the containers. As far as I know, I need to change the…
ymir0916
  • 11
  • 2
1
vote
0 answers

How to install podman on top of docker (for build purposes)?

Question How to install podman on top of docker (in general or in particular on CentOS Stream 8) on the same (bare metal) build server? First such installation attempt revealed incompatibles between their respective dependencies (containerd and…
mirekphd
  • 4,799
  • 3
  • 38
  • 59
1
vote
1 answer

How to get a pod name and namespace on a node running that pod?

A node have a plenty of info for metrics collection, under cgroups kubepods.slice for example. but to complete the metric you have to relate a pod metric to a pod name. a name and namespace itself are kind of static metric of a pod, so they are…
xakepp35
  • 2,878
  • 7
  • 26
  • 54
1
vote
1 answer

kubeadm v1.18.2 with crio version 1.18.2 failing to start master node from private repo on Centos7 / RH7

Description I am relatively new to kubernetes. I can run my cluster when using the default socket (/var/run/dockershim.sock) but when I tried the crio socket to pull the images from my private repo I noticed the speed is not even close to compare…
Thanos
  • 1,618
  • 4
  • 28
  • 49
1
2 3