Warning FailedMount on containerd

[darshanh]

I am trying to run my application which is working fine for docker but failing on containerd . below is the error
Can you please suggest what exactly should i do for containerd to make this working and getrid of below erro
Error :
Type Reason Age From Message

---

Warning FailedMount 9m30s (x178 over 5h55m) kubelet MountVolume.SetUp failed for volume "docker-sock" : hostPath type check failed: /var/run/docker.sock is not a socket file
Warning FailedMount 4m3s (x155 over 5h53m) kubelet Unable to attach or mount volumes: unmounted volumes=[docker-sock], unattached volumes=[], failed to process volumes=[]: timed out waiting for the condition

[estesp]

You are trying to run a pod which is trying to mount the Docker engine API socket, most likely because some software inside the container wants to execute Docker commands against the Docker API.

First, containerd is not Docker, and therefore you won't be able to mount the Docker API socket because containerd does not provide the Docker API. Second, this practice (mounting the Docker socket) is poor security practice and should be replaced by more secure models of performing whatever activity this container is doing using the Docker API; for one example (of many) see here: https://rules.sonarsource.com/kubernetes/RSPEC-6429/

[darshanh]

@estesp I would like to do this for containerd runtime . The same was working for docker runtime . How can i mount in case of containerD

[darshanh]

@estesp I am actually looking for the corresponding way of doing the same in containerD. or any other alternative way to do so in containerD
Thank you

[darshanh]

@fuweid Could you please help me on this ! Thank you

[darshanh]

@fuweid I am also using operator

[fuweid]

Please check my previous comments.

hostPath:
path: /var/run/docker.sock
type: Socket
name: docker-sock

containerd doesn't provide docker.sock and even if you use containerd.sock, containerd doesn't provide any docker API to the application.

[darshanh]

@fuweid Yes i got you . But could you please suggest what i can use as a alternative to achieve the same in containerd
Thank you

[fuweid]

@darshanh it's unlikely right now. maybe you can try to use nerdctl as docker command. For the docker API, there is no such an alternative

[darshanh]

@fuweid Can we access containerd api's via unix:///var/run/conatinerd/containerd.sock?

[cpuguy83]

@darshanh some things on the API will be useful, but the containerd API expects the client to be at least in the same mount namespace so somethings just won't.