cri-o

Join #crio on Kubernetes Slack
CRI-O uses the same basic layout in OBS as Kubernetes project isv:kubernetes, but lives in a dedicated umbrella project called isv:cri-o.
This project contains a bunch of other subprojects.
We switched from https://pkgs.k8s.io/addons:/cri-o to a new subproject https://download.opensuse.org/repositories/isv:/cri-o to work independently from the pkgs.k8s.io CDN. Please switch over if you haven’t already (see the examples below).
All packages are based on the static binary bundles provided by the CRI-O CI.
Alternatively, the packages are available in the Fedora packaging system. As of Fedora 40 and later, CRI-O now only packages one version per version of fedora. These correspond to the version of the kubernetes, cri-tools, and golang packages.
For more information on installation, visit our install guide.
CRI-O is an implementation of the Kubernetes CRI (Container Runtime Interface) to enable using OCI (Open Container Initiative) compatible runtimes. It is a lightweight alternative to using Docker as the runtime for kubernetes. It allows Kubernetes to use any OCI-compliant runtime as the container runtime for running pods. Today it supports runc and Kata Containers as the container runtimes but any OCI-conformant runtime can be plugged in principle.
CRI-O supports OCI container images and can pull from any container registry. It is a lightweight alternative to using Docker, Moby or rkt as the runtime for Kubernetes.
CRI-O is developed by maintainers and contributors from these companies and others. It is a community-driven, open source project. Feedback, users, and of course, contributors, are always welcome via the cri-o/cri-o GitHub project.
The architectural components are as follows:
CRI-O is made up of several components that are found in different GitHub repositories.
CRI-O supports any OCI compatible runtime. We test with runc and Clear Containers today.
The containers/storage library is used for managing layers and creating root file-systems for the containers in a pod: Overlayfs, devicemapper, AUFS and btrfs are implemented, with Overlayfs as the default driver.
Support for network based file system images (NFS, GlusterFS, CephFS) is on the development roadmap.
The containers/image library is used for pulling images from registries. Currently, it supports Docker schema 2/version 1 as well as schema 2/version 2. It also passes all Docker and Kubernetes tests.
The Container Network Interface CNI is used for setting up networking for the pods. Various CNI plugins such as Flannel, Weave and OpenShift-SDN have been tested with CRI-O and are working as expected.
conmon is a utility within CRI-O that is used to monitor the containers, handle logging from the container process, serve attach clients and detects Out Of Memory (OOM) situations.
Container security separation policies are provided by a series of tools including SELinux, Capabilities, seccomp, and other security separation policies as specified in the OCI Specification.
CRI-O is a Cloud Native Computing Foundation graduated project.
2023 © CRI-O Project Authors. All rights reserved. The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see our Trademark Usage page: https://www.linuxfoundation.org/trademark-usage