Introduction to CRI-O

on YouTube ↗38m

" summary

CRI-O implements the Kubernetes CRI with OCI compatibility, calls runtimes like runC and supports Kata and gVisor, uses containers/storage and containers/image, and plugs into CNI for networking. It runs the Kubernetes conformance suite on every PR, versions in lockstep with Kubernetes, and claims you can restart or upgrade the CRI-O binary without killing containers because each container is managed by a conmon monitor (written in C). Security features include SELinux per-pod labels and a default pids 1024 limit.

AI-written summary · about

" chapters (19)

1. 0:00Introduction
2. 0:36What is CRI
3. 3:21Why use CRIO
4. 5:55CRIO Components
5. 7:25Cryo
6. 9:22Security
7. 11:07Architecture
8. 14:20Demo
9. 20:05Behind the Scenes
10. 23:20What is CRIO
11. 24:39Difference between CRIO and Continuity
12. 26:33Stability and Scale
13. 28:45Copying Files
14. 29:31Container Crashes
15. 31:14Metrics
16. 31:57Podman vs Cryo
17. 32:57Upgrade without disruption
18. 34:05Config changes
19. 35:32Wipeout service

" related talks

• 29mCRI-O: All the Runtime Kubernetes Needs, and Nothing MoreMrunal Patel · KubeCon + CloudNativeCon North America 2017
• 31mCRI-O: The Runtime Control RoomSascha Grunert, Mrunal Patel, Peter Hunt, Urvashi Mohnani · KubeCon + CloudNativeCon North America 2020 Virtual
• 46mCRI-O: All the Runtime Kubernetes needAntonio Mudarca · QCon São Paulo 2018
• 33mCRI-O Still Loves KubernetesMrunal Patel, Peter Hunt, Urvashi Mohnani, Sasha Grunert · KubeCon + CloudNativeCon Europe 2021
• 19mCRI-O development: behind the scenesAntonio Murdaca · DevConf.CZ 2019
• 23mOCI, CRI, ??: Making Sense of the Container Runtime Landscape in Kubernetes - Phil Estes, IBMPhil Estes · Kubernetes Forum Sydney 2019
• 21mCRI-O: Secure, Performant, and Boring...Sascha Grunert, Mrunal Patel, Peter Hunt, Urvashi Mohnani · KubeCon + CloudNativeCon Europe 2022
• 26mWhat's New in CRI-O?Sascha Grunert, Mrunal Patel, Peter Hunt, Urvashi Mohnani · KubeCon + CloudNativeCon North America 2021