CRI-O is an implementation of the Kubernetes CRI to enable using OCI compatible runtimes, CRI-O QUESTIONS MUST BE SPECIFICALLY RELATED TO CONFIGURATION OR INSTALLATION ISSUES. This tag is frequently used alongside other tags like kubernetes or openshift.
Questions tagged [cri-o]
42 questions
8
votes
1 answer
"crictl rmi" removing all the images which are in use
I'm trying to remove all unused images with specific name format from Kubernetes cluster like below.
crictl images | grep -E -- 'foo|bar' | awk '{print \$3}' | xargs -n 1 crictl rmi
But this one also deletes all the images with naming "foo" or…

CRP08
- 133
- 1
- 2
- 6
6
votes
2 answers
Kubelet - failed to "CreatePodSandbox" for coredns; failed to set bridge addr: could not add ip addr to "cni0": permission denied
EDIT 1
In response to the comments I have included additional information.
$ kubectl get pods --namespace kube-system
NAME READY STATUS RESTARTS AGE
coredns-66bff467f8-lkwfn …

Riki
- 193
- 1
- 10
6
votes
1 answer
What are good workflows for deploying podman/buildah created container images to minikube?
I am exploring and learning about containers and kubernetes using podman and minikube on a linux workstation. I use podman to build images on the workstation and would like to deploy these images in minikube also running on the workstation using the…

Brad Smith
- 183
- 1
- 7
5
votes
3 answers
Kubespray fails with "Found multiple CRI sockets, please use --cri-socket to select one"
Problem encountered
When deploying a cluster with Kubespray, CRI-O and Cilium I get an error about having multiple CRI socket to choose from.
Full error
fatal: [p3kubemaster1]: FAILED! => {"changed": true, "cmd": " mkdir -p…

Doctor
- 7,115
- 4
- 37
- 55
4
votes
0 answers
How to start a container in cri-o with only specifying the image name?
I am trying to achieve something like
docker run -it bash
I want to specify the image to run and do not care about anything else.
crictl requires config files for both a container and a pod for the run command, if I am not…

Hakan Baba
- 1,897
- 4
- 21
- 37
3
votes
1 answer
SSLError: ('The read operation timed out',) when trying to deploy Kuberntes with Kubespray
Hello and thanks in advance for your help !
I am trying to deploy a Kubernetes cluster using Kubespray (an ansible playbook). I am trying to deploy the Cluster on 17 KVM host (all nodes are running centos 7 , and are hosted on a baremetal…

Popopame
- 492
- 4
- 18
2
votes
1 answer
Kubernetes with CRI-O and docker private registry: pods running only on master node
I have a kubernetes cluster running on 3 VMs and I enabled master nodes for pods. I also have docker private registry running on another VM with valid SSL certificates installed. I am using CRI-O in my kubernetes cluster. This is what I am doing
VM…

Thomson Mathew
- 419
- 1
- 9
- 28
2
votes
0 answers
Retrieve cri-o information using golang
I am trying to retrieve cri-o information like containerID, pid using golang. The below mentioned code works in my mac but when I containerize it and deploy it on openshift 3.11 stack, it doesn't work.
cmdStr in the below mentioned code can be any…

kms
- 153
- 2
- 9
2
votes
1 answer
How do I identify if a runc container is running as privileged?
Regardless of docker/crio/containerd starting the container, is there a way to understand if the runc container is running as privileged one?
docker inspect does show privilegedness but I want to find out at the runc layer.

Sam Thomas
- 647
- 7
- 25
2
votes
3 answers
coredns can't start when using crio and with selinux on
I know this question is asked many times, but all about docker, this time is crio.
CentOS Linux release 7.6
CRI-O Version: 1.16.1
Kubernetes: v1.16.3
KubeAdm: v1.16.3
CoreDNS pods are in Error/CrashLoopBackOff state, and audit.log shows selinux…

Cyron
- 41
- 4
2
votes
1 answer
kubeadm compatibility between "--cri-socket" flag and "init phase" argument
I'm trying to set which cri-o socket to use by kubeadm !
To achieve this I should use the flag --cri-socket /var/run/crio/crio.sock
The current command is in the form kubeadm init phase . I must add the --cri-socket flag to it.
I…

Doctor
- 7,115
- 4
- 37
- 55
1
vote
0 answers
not showing kubernetes pods in podman
after installing the k8s 1.24 version, I would like to manage the container using cri-o and podman.
I installed podman to use the podman commit function, but I can see the image, but I can't see the containers. As far as I know, I need to change the…

ymir0916
- 11
- 2
1
vote
0 answers
How to install podman on top of docker (for build purposes)?
Question
How to install podman on top of docker (in general or in particular on CentOS Stream 8) on the same (bare metal) build server? First such installation attempt revealed incompatibles between their respective dependencies (containerd and…

mirekphd
- 4,799
- 3
- 38
- 59
1
vote
1 answer
How to get a pod name and namespace on a node running that pod?
A node have a plenty of info for metrics collection, under cgroups kubepods.slice for example. but to complete the metric you have to relate a pod metric to a pod name. a name and namespace itself are kind of static metric of a pod, so they are…

xakepp35
- 2,878
- 7
- 26
- 54
1
vote
1 answer
kubeadm v1.18.2 with crio version 1.18.2 failing to start master node from private repo on Centos7 / RH7
Description
I am relatively new to kubernetes. I can run my cluster when using the default socket (/var/run/dockershim.sock) but when I tried the crio socket to pull the images from my private repo I noticed the speed is not even close to compare…

Thanos
- 1,618
- 4
- 28
- 49