Access containerd.sock from host

[simonhoss]

Hey

I want to access containerd.sock from the host.

I tried the following settings:

portForwards:
 - guestSocket: "/run/containerd/containerd.sock"
   hostSocket: containerd.sock

When I try to connect to the containerd.sock on my host. It doesn't work.

rpc error: code = Unavailable desc = connection closed before server preface received

Any ideas?

Thanks

[afbjorklund]

The /run/containerd/containerd.sock file is only accessible to the root user.

If you are using the default, there is normally a "rootless" containerd installation.
It is accessible through nerdctl, usually in e.g. /run/user/1000/containerd-rootless

So you need to set up a ssh tunnel for the root user, or allow access to containerd.
Both are considered avanced topics, and normally sudo nerdctl is used instead.

Note that most containerd commands don't work remote, they need file access...

[afbjorklund]

It would be possible to make it "easier" (shorter), to use it from the host:

• Ability to choose container daemon in nerdctl.lima #311

Currently there is no shortcut like nerdctl.lima, for accessing system containerd.

#!/bin/sh
set -eu
exec lima sudo nerdctl "$@"