Demystifying CRI - Writing a CRI from Scratch
Talkat ContainerCon @ Open Source Summit Europe 2024 · on Monday, 2024-09-16· at 16:20· Room 0.14 (Level 0)·
summary
A minimal CRI is implemented in Go against the kube CRI protobuf API using gRPC over a Unix socket gRPC listener, parsing the proto to expose a version RPC and runtime methods, pulling images as tarballs, unpacking the pause image to create a sandbox network namespace, and using runC to create containers that share that namespace. The result actually runs: kubelet shows image pulling, creates a sandbox plus app container, and HTTPd responds via nsenter, but lifecycle teardown and robust error handling are omitted.
AI-written summary · about
chapters (8)
- 0:00Intro
- 0:42Overview
- 1:43CRI Container Runtime
- 4:15GRPC
- 9:29Linux namespaces
- 16:35Sandbox
- 23:57Testing
- 27:45Outro
