Replies: 1 comment 2 replies
-
yes, the leases that we added a while back only protected the layer content, they did not protect the tags as hoped. We should rework our protections to use the CRI pinned label. |
Beta Was this translation helpful? Give feedback.
2 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Hello, I know there are several tickets about it but didn't find a clear view.
Accordingly to this ticket #3193 it seems working from k3s 1.24
but #7569 there is no possible way to protect images.
Accordingly to test It seems still not working.
But I have seen tickets in k8s/containerd :
containerd/containerd#6352 and containerd/containerd#6930
and did a small test:
Use ctr to load an image and add the pinning label
sudo ./ctr images label "my image" io.cri-containerd.pinned=pinned
Fill the disk using
xfs_mkfile
like the first ticketThe image with the pin tag is no more freed when GC is run (like the pause image :)).
I'm using k3s version v1.26.9+k3s1.
Isn't it a solution to protect some images from GC ?
Beta Was this translation helpful? Give feedback.
All reactions