CRI-O: How To Check the CRIO Configuration And Information

CRI-O: How To Check the CRIO Configuration And Information

Below commands can be used.

sudo crio-status config

sudo crio-status info

Below are example outputs.

#sudo crio-status info

WARN[0000] Failed to decode the keys ["storage.options.override_kernel_check"] from "/etc/containers/storage.conf". 

cgroup driver: systemd

storage driver: overlay

storage root: /var/lib/containers/storage

default GID mappings (format <container>:<host>:<size>):

  0:0:4294967295

default UID mappings (format <container>:<host>:<size>):

  0:0:4294967295

#sudo crio-status config

WARN[0000] Failed to decode the keys ["storage.options.override_kernel_check"] from "/etc/containers/storage.conf". 

[crio]

  root = "/var/lib/containers/storage"

  runroot = "/var/run/containers/storage"

  storage_driver = "overlay"

  log_dir = "/var/log/crio/pods"

  version_file = "/var/run/crio/version"

  version_file_persist = "/var/lib/crio/version"

  clean_shutdown_file = "/var/lib/crio/clean.shutdown"

  internal_wipe = true

  [crio.api]

    grpc_max_send_msg_size = 83886080

    grpc_max_recv_msg_size = 83886080

    listen = "/var/run/crio/crio.sock"

    stream_address = "127.0.0.1"

    stream_port = "0"

    stream_enable_tls = false

    stream_tls_cert = ""

    stream_tls_key = ""

    stream_tls_ca = ""

    stream_idle_timeout = ""

  [crio.runtime]

    seccomp_use_default_when_empty = true

    no_pivot = false

    selinux = true

    log_to_journald = false

    drop_infra_ctr = true

    read_only = false

    hooks_dir = ["/usr/share/containers/oci/hooks.d"]

    default_capabilities = ["CHOWN", "DAC_OVERRIDE", "FSETID", "FOWNER", "SETGID", "SETUID", "SETPCAP", "NET_BIND_SERVICE", "KILL"]

    allowed_devices = ["/dev/fuse"]

    cdi_spec_dirs = ["/etc/cdi", "/var/run/cdi"]

    device_ownership_from_security_context = false

    default_runtime = "runc"

    decryption_keys_path = "/etc/crio/keys/"

    conmon = "/usr/libexec/crio/conmon"

    conmon_cgroup = "system.slice"

    seccomp_profile = ""

    apparmor_profile = "crio-default"

    blockio_config_file = ""

    irqbalance_config_file = "/etc/sysconfig/irqbalance"

    rdt_config_file = ""

    cgroup_manager = "systemd"

    default_mounts_file = ""

    container_exits_dir = "/var/run/crio/exits"

    container_attach_socket_dir = "/var/run/crio"

    bind_mount_prefix = ""

    uid_mappings = ""

    minimum_mappable_uid = -1

    gid_mappings = ""

    minimum_mappable_gid = -1

    log_level = "info"

    log_filter = ""

    namespaces_dir = "/var/run"

    pinns_path = "/usr/bin/pinns"

    pids_limit = 0

    log_size_max = -1

    ctr_stop_timeout = 30

    separate_pull_cgroup = ""

    infra_ctr_cpuset = ""

    [crio.runtime.runtimes]

      [crio.runtime.runtimes.kata]

        runtime_config_path = ""

        runtime_path = "/usr/bin/kata-runtime"

        runtime_type = "oci"

        runtime_root = ""

        DisallowedAnnotations = ["io.kubernetes.cri-o.ShmSize", "cpu-load-balancing.crio.io", "cpu-quota.crio.io", "io.kubernetes.cri.rdt-class", "io.kubernetes.cri-o.TrySkipVolumeSELinuxLabel", "io.kubernetes.cri-o.UnifiedCgroup", "io.kubernetes.cri-o.cgroup2-mount-hierarchy-rw", "io.kubernetes.cri-o.Devices", "irq-load-balancing.crio.io", "io.containers.trace-syscall", "io.kubernetes.cri-o.userns-mode"]

        monitor_path = "/usr/libexec/crio/conmon"

        monitor_cgroup = "system.slice"

      [crio.runtime.runtimes.runc]

        runtime_config_path = ""

        runtime_path = "/usr/bin/runc"

        runtime_type = "oci"

        runtime_root = ""

        DisallowedAnnotations = ["io.kubernetes.cri-o.userns-mode", "io.kubernetes.cri-o.cgroup2-mount-hierarchy-rw", "io.kubernetes.cri-o.UnifiedCgroup", "io.kubernetes.cri-o.ShmSize", "io.kubernetes.cri-o.Devices", "cpu-load-balancing.crio.io", "io.containers.trace-syscall", "cpu-quota.crio.io", "irq-load-balancing.crio.io", "io.kubernetes.cri.rdt-class", "io.kubernetes.cri-o.TrySkipVolumeSELinuxLabel"]

        monitor_path = "/usr/libexec/crio/conmon"

        monitor_cgroup = "system.slice"

  [crio.image]

    default_transport = "docker://"

    global_auth_file = ""

    pause_image = "container-registry.oracle.com/olcne/pause:3.7"

    pause_image_auth_file = ""

    pause_command = "/pause"

    signature_policy = ""

    image_volumes = "mkdir"

    big_files_temporary_dir = ""

  [crio.network]

    cni_default_network = ""

    network_dir = "/etc/cni/net.d/"

    plugin_dirs = ["/opt/cni/bin"]

  [crio.metrics]

    enable_metrics = false

    metrics_collectors = ["operations", "operations_latency_microseconds_total", "operations_latency_microseconds", "operations_errors", "image_pulls_by_digest", "image_pulls_by_name", "image_pulls_by_name_skipped", "image_pulls_failures", "image_pulls_successes", "image_pulls_layer_size", "image_layer_reuse", "containers_oom_total", "containers_oom", "processes_defunct", "operations_total", "operations_latency_seconds", "operations_latency_seconds_total", "operations_errors_total", "image_pulls_bytes_total", "image_pulls_skipped_bytes_total", "image_pulls_failure_total", "image_pulls_success_total", "image_layer_reuse_total", "containers_oom_count_total"]

    metrics_port = 9090

    metrics_socket = ""

    metrics_cert = ""

    metrics_key = ""

  [crio.tracing]

    enable_tracing = false

    tracing_endpoint = "0.0.0.0:4317"

    tracing_sampling_rate_per_million = 0

  [crio.stats]

    stats_collection_period = 0