From d7a245fa48dc555d8f7912bfd860f60d51490974 Mon Sep 17 00:00:00 2001 From: Peter Hunt Date: Mon, 17 Aug 2026 12:39:25 -0400 Subject: [PATCH] crio: drop container restore support for one, it doesn't work with crun, which has been the default for a while. Also, upstream will be deprecating support And finally, there are some policy and security issues with the current implementation Maintain support for checkpointing as it's an official upstream feature and we have some usage downstream. Restore specifically was bolted on top of kubernetes and was more experimental than a supported feature Signed-off-by: Peter Hunt --- .../master/01-master-container-runtime/_base/files/crio.yaml | 3 +++ .../worker/01-worker-container-runtime/_base/files/crio.yaml | 5 ++++- 2 files changed, 7 insertions(+), 1 deletion(-) diff --git a/templates/master/01-master-container-runtime/_base/files/crio.yaml b/templates/master/01-master-container-runtime/_base/files/crio.yaml index 315172252d..357a5fc5b8 100644 --- a/templates/master/01-master-container-runtime/_base/files/crio.yaml +++ b/templates/master/01-master-container-runtime/_base/files/crio.yaml @@ -106,3 +106,6 @@ contents: "processes_defunct", "default_runtime" ] + + [crio.checkpoint_restore] + container_level_enabled = "checkpoint_only" diff --git a/templates/worker/01-worker-container-runtime/_base/files/crio.yaml b/templates/worker/01-worker-container-runtime/_base/files/crio.yaml index 7829a1c7a5..357a5fc5b8 100644 --- a/templates/worker/01-worker-container-runtime/_base/files/crio.yaml +++ b/templates/worker/01-worker-container-runtime/_base/files/crio.yaml @@ -17,12 +17,12 @@ contents: default_env = [ "NSS_SDB_USE_CACHE=no", ] + default_runtime = "crun" log_level = "info" cgroup_manager = "systemd" default_sysctls = [ "net.ipv4.ping_group_range=0 2147483647", ] - default_runtime = "crun" hooks_dir = [ "/etc/containers/oci/hooks.d", "/run/containers/oci/hooks.d", @@ -106,3 +106,6 @@ contents: "processes_defunct", "default_runtime" ] + + [crio.checkpoint_restore] + container_level_enabled = "checkpoint_only"