nestybox/kindestnode repository overview

⁠Nestybox Kindestnode Image

This image can be used to deploy K8s.io KinD⁠ inside a Sysbox⁠ container.

NOTE: this is not the image for the Sysbox container. This is an image for the containers that the KinD tool will create inside the Sysbox container. The KinD tool is itself running inside the Sysbox container, and uses this image to create the K8s nodes that form the KinD cluster.

⁠Why is this image needed?

Normally KinD uses its own kindest/node image, but older versions of that image carry a version of the OCI runc (< 1.0.0-rc92) that does not work well inside rootless environments (i.e., inside the Linux user-namespace), as is the case when running inside Sysbox containers.

In addition, some versions of kindest/node have a requirement for cgroups v2 to be enabled on the host when a rootless environment is detected. This requirement is not applicable for Sysbox containers, as Sysbox uses a technique to ensure proper cgroup delegation using cgroups v1 (or v2).

To work-around this, the nestybox/kindestnode image (this repo) incorporates the required fixes.

We expect nestybox/kindestnode to be a temporary image: once the official kindest/node image picks up the patches (soon), the need for this image will disappear.

The Dockerfiles can be found here: https://github.com/nestybox/dockerfiles/tree/master/kindestnode⁠.

⁠Usage:

1. Launch a Sysbox container (or pod) that has the K8s.io KinD tool inside of it.

For example, there is another image called nestybox/kindind⁠ that you can use for the Sysbox container. It comes with Ubuntu + Docker + KinD:

$ docker run --runtime=sysbox-runc -it --rm -P --name=syscont --hostname=syscont nestybox/kindind

1. Inside the Sysbox container / pod, use the K8s.io KinD tool to create a K8s-in-Docker cluster with the nestybox/kindestnode image:

admin@syscont:~$ kind create cluster --image=nestybox/kindestnode:v1.18.19

That's it! With this you'll get a full K8s cluster (thanks to KinD) deployed in Docker containers, all of which are running inside a single, well isolated (rootless) Sysbox container or pod.

More info at www.nestybox.com⁠.