VERSION="v1.30.0" curl -L https://github.com/kubernetes-sigs/cri-tools/releases/download/$VERSION/crictl-$VERSION-linux-amd64.tar.gz | sudo tar -xz -C /usr/local/bin crictl --version crictl info (shows runtime configuration) Part 2: Installing nerdctl (Full containerd Control) If your cluster runs containerd, nerdctl provides a Docker-like experience for filesystem inspection.
nerdctl images nerdctl inspect <image> nerdctl run --rm -it alpine ls / Part 3: Installing Snapshotter Tools (OverlayFS Utilities) To truly debug the CRI filesystem, you need host-level tools that understand overlayfs (the default snapshotter for 99% of clusters). cri file system tools install
# For containerd runtime-endpoint: "unix:///run/containerd/containerd.sock" image-endpoint: "unix:///run/containerd/containerd.sock" timeout: 10 debug: false # For CRI-O runtime-endpoint: "unix:///run/crio/crio.sock" Test config: crictl ps -a export CONTAINERD_ADDRESS=/run/containerd/containerd.sock export CONTAINERD_NAMESPACE=k8s.io # Critical for Kubernetes nerdctl ps Hands-On: Using CRI Filesystem Tools to Inspect Container Storage Now for the practical part. Assume a pod named my-app is consuming 10GB of disk space, but df -h inside the pod shows only 1GB. Where is the space? Let's investigate. Step 1: Find the Target Container ID crictl ps --name my-app --state Running # Output: CONTAINER ID: 3e8f2a1b9c0d Step 2: Inspect the Container's Root Filesystem Mounts crictl inspect 3e8f2a1b9c0d | jq .info.runtimeSpec.mounts Look for type: "overlay" . You'll see lowerdir , upperdir , workdir . VERSION="v1
With the installation steps and debugging workflows outlined above, you are now equipped to handle the most complex container storage issues on any CRI-compliant runtime. Assume a pod named my-app is consuming 10GB
In the rapidly evolving landscape of cloud-native development and container orchestration, the underlying infrastructure often becomes an opaque black box. For developers and system administrators working with Kubernetes, containerd, or CRI-O, one acronym repeatedly surfaces when debugging storage issues: CRI .