crictl 遇到报错 /run/containerd/containerd.sock: connect: permission denied

报错内容

crictl --runtime-endpoint unix:///run/containerd/containerd.sock logs CONTAINERID FATA[0000] validate service connection: validate CRI v1 runtime API for endpoint "unix:///run/containerd/containerd.sock": rpc error: code = Unavailable desc = connection error: desc = "transport: Error while dialing: dial unix /run/containerd/containerd.sock: connect: permission denied"

使用root账号运行, 但实际的账号是 user账号

通过命令 getent group user 获取用户的 group id = 1000

通过修改 /etc/containerd/config.toml

grpc

address = "/run/containerd/containerd.sock"

gid = 1000 # Replace with your desired group ID (e.g., `containerd` group)

重启 sudo systemctl restart containerd

解决问题

相关推荐
gs801408 小时前
crictl 拉取镜像报错 Unimplemented desc = unknown service runtime.v1.ImageService
crictl
SilentCodeY6 个月前
containerd配置私有仓库registry
容器·kubernetes·containerd·镜像·crictl
岳来9 个月前
docker-cli & nerdctl & ctr & crictl容器命令比较
docker·容器·crictl·nerdctl·ctr
岳来9 个月前
k8s 容器环境下的镜像如何转换为docker 使用
docker·kubernetes·crictl·ctr·容器镜像
昕光xg1 年前
docker笔记14--docker-nerdctl-crictl-ctr使用对比
docker·kubernetes·containerd·crictl·nerdctl·ctr
东城绝神2 年前
《Kubernetes部署篇:Ubuntu20.04基于二进制安装安装cri-containerd-cni》
kubernetes·containerd·cni·crictl