containerd + crun

Jbn1233
1 min readJun 29, 2023

--

I am a big fan of crun. now it’s time for containerd + crun

Install containerd and crun binary file and this /etc/containerd/config.toml:

version = 2
[plugins."io.containerd.runtime.v1.linux"]
shim_debug = false
[plugins."io.containerd.grpc.v1.cri".containerd]
default_runtime_name = "crun"
[plugins."io.containerd.grpc.v1.cri".containerd.runtimes]
[plugins."io.containerd.grpc.v1.cri".containerd.runtimes.crun]
runtime_type = "io.containerd.runc.v2"
[plugins."io.containerd.grpc.v1.cri".containerd.runtimes.crun.options]
BinaryName = "/usr/local/bin/crun"
SystemdCgroup = true
[plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runsc]
runtime_type = "io.containerd.runsc.v1"
[plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runsc.options]
SystemdCgroup = true
[plugins."io.containerd.grpc.v1.cri".registry.mirrors]
[plugins."io.containerd.grpc.v1.cri".registry.mirrors."docker.io"]
endpoint = ["https:///mirror.blabla.com"]
[plugins."io.containerd.grpc.v1.cri".registry.configs."https://mirror.blabla.com".tls]
insecure_skip_verify = true

How to verify ?

# crictl inspect f937078e32863|jq .info.runtimeOptions
{
"binary_name": "/usr/local/bin/crun",
"systemd_cgroup": true
}

that’s all

refer: https://github.com/containerd/containerd/discussions/6162

Update1:

you can get runtime name from “crictl pods”

$ sudo crictl pods
POD ID CREATED STATE NAME NAMESPACE ATTEMPT RUNTIME
8cac4a0328c65 20 seconds ago Ready echo-5748d9c654-bb749 nick2 0 crun
9155e163bb9b1 36 seconds ago Ready echo-65bd58d9d-bbrpf nick2 0 runc
26f202f3586eb 44 seconds ago Ready echo-65bd58d9d-55tfp nick1 0 runc
1b68827cedff3 2 minutes ago Ready echo-5d79b6f6f6-t8prb default 4 runsc

--

--

Jbn1233
Jbn1233

Written by Jbn1233

Very short and simple notes for CKA/SRE and may not works on your environment | jbn1233@gmail.com | Bangkok, Thailand |

No responses yet