This message was deleted.
# k3sa
adamant-kite-43734
11/15/2025, 5:21 AMThis message was deleted.
c
creamy-pencil-82913
11/15/2025, 5:26 AMK3s is Kubernetes so…
creamy-pencil-82913
11/15/2025, 5:27 AMThe error would appear to come from your crio config, have you looked at the docs there?
creamy-pencil-82913
11/15/2025, 5:27 AMWe don’t ship with it and don’t test with it so I’m not super familiar with it
a
adorable-portugal-58479
11/15/2025, 5:30 AMAppreciate for the quick response.
Yes, I checked the docs in crio and I'm following this doc to test checkpoint and restore functionality in kubernetes.
https://kubernetes.io/blog/2022/12/05/forensic-container-checkpointing-alpha/
c
creamy-pencil-82913
11/15/2025, 5:30 AMwhat version are you using?
a
adorable-portugal-58479
11/15/2025, 5:31 AM Copy code
$ k3s --version
k3s version v1.32.8+k3s1 (fe896f7e)
go version go1.23.11
$ crio --version
crio version 1.32.9c
creamy-pencil-82913
11/15/2025, 5:31 AMI don’t see anything in there about enabling container image signature verification, was that something you had configured previously?
creamy-pencil-82913
11/15/2025, 5:32 AMThe file referenced there would appear to be from https://kubernetes.io/blog/2023/06/29/container-image-signature-verification/
a
adorable-portugal-58479
11/15/2025, 5:32 AMThis is what the doc says, is there anything special I need to do in k3s to enable it?
The feature is behind a feature gate, so make sure to enable the ContainerCheckpoint gate before you can use the new feature.c
creamy-pencil-82913
11/15/2025, 5:32 AMyes, you need to enable the feature gate, as it says
a
adorable-portugal-58479
11/15/2025, 5:32 AMHow can I do it in k3s?
c
creamy-pencil-82913
11/15/2025, 5:33 AMsame as you would on any distro, with the --feature-gates arg for the component you want to enable the feature-gate on
creamy-pencil-82913
11/15/2025, 5:34 AM--kubelet-arg=feature-gates=MyExampleGate=truecreamy-pencil-82913
11/15/2025, 5:34 AMI don’t know if you need to enable it on just the kubelet, or also apiserver, scheduler, and so on. upstream docs may tell you that
a
adorable-portugal-58479
11/15/2025, 5:35 AMOkay, also I have a multi-node HA k3s cluster. If I enable it on a k3s-server, will the flags propagate to other masters and agent nodes as well?
c
creamy-pencil-82913
11/15/2025, 5:36 AMno, you need to set them everywhere you want them set.
a
adorable-portugal-58479
11/15/2025, 5:38 AMGot it, thanks for all the help!
18 Views