ctr(8) ctr(8) (NAME) ctr - containerd (SYNOPSIS) ctr [--address|-a]=[value] [--connect-timeout]=[value] [--debug] [--namespace|-n]=[value] [--timeout]=[value] (DESCRIPTION) ctr containerd . containerd . (Usage): ctr [GLOBAL OPTIONS] command [COMMAND OPTIONS] [ARGUMENTS...] (GLOBAL OPTIONS) --address, -a="": GRPC containerd (: "/run/containerd/containerd.sock") --connect-timeout="": containerd (: 0s) --debug: --namespace, -n="": (: "default") --timeout="": ctr (: 0s) (COMMANDS) plugins, plugin containerd list, ls containerd --detailed, -d: --quiet, -q: inspect-runtime (runtime) --runc-binary="": runc --runc-root="": runc --runc-systemd-cgroup: runc systemd (cgroup) --runtime="": runtime (: "io.containerd.runc.v2") --runtime-config-path="": runtime (VERSION) containers, c, container create --allow-new-privs: NoNewPrivileges OCI --annotation="": OCI ( foo=bar) --apparmor-default-profile="": AppArmor "cri-containerd.apparmor.d" --apparmor-profile="": AppArmor --blockio-class="": blockio --blockio-config-file="": blockio. . --cap-add="": ( 'CAP_' ) --cap-drop="": ( 'CAP_' ) --config, -c="": --cpu-period="": CPU CFS (: 0) --cpu-quota="": CPU CFS (: -1) --cwd="": --device="": --env="": ( FOO=bar) --env-file="": ( FOO=bar ) --gpus="": (GPU) --hostname="": --label="": ( foo=bar) --memory-limit="": ( ) (: 0) --mount="": ( type=bind,src=/tmp,dst=/host,options=rbind:ro) --net-host: --no-pivot: pivot-root ( ) --pid-file="": (PID) --privileged: ( ) --rdt-class="": RDT . Class of Service (CLOS) . --read-only: --rootfs: snapshotter containerd --rootfs-propagation="": (propagation) --runc-binary="": runc --runc-root="": runc --runc-systemd-cgroup: runc cgroup systemd --runtime="": (: "io.containerd.runc.v2") --runtime-config-path="": runtime --sandbox="": --seccomp: () seccomp --seccomp-profile="": seccomp. seccomp-profile seccomp true --snapshotter="": snapshotter. . --snapshotter-label="": . --tty, -t: (TTY) --user, -u="": (: [:]) --with-ns="": ( ':') delete, del, remove, rm --keep-snapshot: info --spec: (spec) list, ls --quiet, -q: label checkpoint --image: --rw: / --task: (task) restore --live: --rw: / content active --root="": (: "/tmp/content") --timeout, -t="": (: 0s) delete, del, remove, rm blob edit blob --editor="": ( vim emacs ) --validate="": ( json mediatype ) fetch containerd --all-platforms: --hosts-dir="": --http-dump: HTTP --http-trace: HTTP --label="": --metadata-only: --plain-http: HTTP --platform="": --refresh="": --skip-metadata: ( push ) --skip-verify, -k: SSL --tlscacert="": TLS (CA) --tlscert="": TLS --tlskey="": TLS --user, -u="": [:] fetch-object (objects) --hosts-dir="": --http-dump: HTTP --http-trace: HTTP --plain-http: HTTP --refresh="": --skip-verify, -k: SSL --tlscacert="": CA TLS --tlscert="": TLS --tlskey="": TLS --user, -u="": [:] fetch-blob (blobs) --hosts-dir="": --http-dump: HTTP --http-trace: HTTP --media-type="": (mediatype) --plain-http: HTTP --refresh="": --skip-verify, -k: SSL --tlscacert="": CA TLS --tlscert="": TLS --tlskey="": TLS --user, -u="": [:] get ingest --expected-digest="": --expected-size="": (: 0) list, ls blob --quiet, -q: blob push-object (push) --hosts-dir="": --http-dump: HTTP --http-trace: HTTP --plain-http: HTTP --refresh="": --skip-verify, -k: SSL --tlscacert="": CA TLS --tlscert="": TLS --tlskey="": TLS --user, -u="": [:] label prune references ( ) --async: (garbage collection) --dry: ( ) events, event containerd images, image, i check --quiet, -q: ( ) --snapshotter="": snapshotter. . export --all-platforms: --local: API --platform="": --skip-manifest-json: manifest.json --skip-non-distributable: blob import () --all-platforms: false --base-name="": --compress-blobs: blob ( ) --digests: (: false) --discard-unpacked-layers: --no-unpack false --index-name="": --label="": --local: API --no-unpack: --discard-unpacked-layers false --platform="": --skip-digest-for-named: --digests ( --digests ) --snapshotter="": snapshotter. . --sync-fs: false inspect, i --content: JSON list, ls containerd --quiet, -q: mount (mount) --expiration, -x="": (: 1h0m0s) --hosts-dir="": --http-dump: HTTP --http-trace: HTTP --label="": --plain-http: HTTP --platform="": (: "linux/amd64") --refresh="": --rw: --skip-verify, -k: SSL --snapshotter="": snapshotter. . --sync-fs: false --tlscacert="": TLS (CA) --tlscert="": TLS --tlskey="": TLS --user, -u="": [:] unmount (unmount) --hosts-dir="": --http-dump: HTTP --http-trace: HTTP --label="": --plain-http: HTTP --refresh="": --rm: --skip-verify, -k: SSL --snapshotter="": snapshotter. . --tlscacert="": TLS (CA) --tlscert="": TLS --tlskey="": TLS --user, -u="": [:] pull (pull) --all-platforms: --hosts-dir="": --http-dump: HTTP --http-trace: HTTP --label="": --local: --max-concurrent-downloads="": pull (: 0) --plain-http: HTTP --platform="": --print-chainid: (chain ID) --refresh="": --skip-metadata: ( push ) --skip-verify, -k: SSL --snapshotter="": snapshotter. . --sync-fs: false --tlscacert="": TLS (CA) --tlscert="": TLS --tlskey="": TLS --user, -u="": [:] push (push) --allow-non-distributable-blobs: blob --hosts-dir="": --http-dump: HTTP --http-trace: HTTP --local: --manifest="": --manifest-type="": (mediatype) (: "application/vnd.oci.image.manifest.v1+json") --max-concurrent-uploaded-layers="": push (: 0) --plain-http: HTTP --platform="": --refresh="": --skip-verify, -k: SSL --tlscacert="": TLS (CA) --tlscert="": TLS --tlskey="": TLS --user, -u="": [:] prune --all: ( all ) delete, del, remove, rm --sync: tag ( ) --force: target_ref --local: API --skip-reference-check: label --replace-all, -r: convert --all-platforms: --erofs="": EROFS 'raw' 'zstd' ( --erofs raw, --erofs zstd) --erofs-compressors="": EROFS --erofs-mkfs-options="": mkfs EROFS ( '-Efragments,dedupe') --oci: OCI --platform="": --uncompress: tar.gz tar usage --snapshotter="": snapshotter. . leases (leases) list, ls --quiet, -q: blob create --expires, -x="": ( 0 ) (: 24h0m0s) --id="": delete, del, remove, rm --sync: namespaces, namespace, ns (namespaces) create, c list, ls --quiet, -q: remove, rm --cgroup, -c: cgroup label pprof pprof Go containerd --debug-socket, -d="": containerd (: "/run/containerd/debug.sock") block (Goroutine blocking profile) --debug="": pprof (: 0) goroutines (stack dump) --debug="": pprof (: 2) heap heap --debug="": pprof (: 0) profile (CPU profile) --debug="": pprof (: 0) --seconds, -s="": (: 30s) threadcreate --debug="": pprof (: 0) trace (execution trace) --debug="": pprof (: 0) --seconds, -s="": (: 5s) run --allow-new-privs: NoNewPrivileges OCI --annotation="": OCI ( foo=bar) --apparmor-default-profile="": AppArmor "cri-containerd.apparmor.d" --apparmor-profile="": AppArmor --blockio-class="": blockio --blockio-config-file="": blockio. . --cap-add="": ( 'CAP_' ) --cap-drop="": ( 'CAP_' ) --cgroup="": cgroup ( cgroup "" ) --cni: cni --config, -c="": --cpu-period="": CPU CFS (: 0) --cpu-quota="": CPU CFS (: -1) --cpu-shares="": (cpu shares) (: 1024) --cpus="": CPU CFS (: 0) --cpuset-cpus="": ( 1-2,4) --cpuset-mems="": ( 1-2,4) --cwd="": --detach, -d: --rm --device="": --dump-config="": OCI --env="": ( FOO=bar) --env-file="": ( FOO=bar ) --fifo-dir="": FIFO / --gidmap="": GID container-gid:host- gid:length --gpus="": (GPU) --hostname="": --label="": ( foo=bar) --log-uri="": URI --memory-limit="": ( ) (: 0) --mount="": ( type=bind,src=/tmp,dst=/host,options=rbind:ro) --net-host: --no-pivot: pivot-root ( ) --null-io: / dev/null/ --pid-file="": (PID) --platform="": --privileged: ( ) --privileged-without-host-devices: --rdt-class="": RDT . Class of Service (CLOS) . --read-only: --remap-labels: snapshotter snapshotter --rlimit-nofile="": RLIMIT_NOFILE (soft:hard) --rm: --detach --rootfs: snapshotter containerd --rootfs-propagation="": (propagation) --runc-binary="": runc --runc-root="": runc --runc-systemd-cgroup: runc cgroup systemd --runtime="": (: "io.containerd.runc.v2") --runtime-config-path="": runtime --sandbox="": --seccomp: () seccomp --seccomp-profile="": seccomp. seccomp-profile seccomp true --snapshotter="": snapshotter. . --snapshotter-label="": . --sync-fs: false --tty, -t: (TTY) --uidmap="": UID container-uid:host- uid:length --user, -u="": (: [:]) --with-ns="": ( ':') snapshots, snapshot --snapshotter="": snapshotter. . commit (commit) diff (diff) --keep: --label="": --media-type="": (: "application/vnd.oci.image.layer.v1.tar+gzip") --ref="": info list, ls mounts, m, mount --temp: bind mount prepare (committed) --mounts: JSON --target, -t="": delete, del, remove, rm label tree unpack --snapshotter="": snapshotter. . --sync-fs: false usage -b: view --mounts: JSON --target, -t="": tasks, t, task (tasks) attach / (IO) checkpoint --exit: --image-path="": criu --work-path="": criu delete, del, remove, rm --exec-id="": (PID) --force, -f: exec --cwd="": --detach, -d: --exec-id="": exec --fifo-dir="": FIFO / --log-uri="": URI shim --tty, -t: (TTY) --user="": list, ls --quiet, -q: kill (: SIGTERM) --all, -a: --exec-id="": --signal, -s="": metrics, metric --format="": "table" "json" (: "table") pause (pause) ps resume start --detach, -d: --fifo-dir="": FIFO / --log-uri="": URI --no-pivot: pivot-root ( ) --null-io: / dev/null/ --pid-file="": (PID) install --libs, -l: --path="": opt --replace, -r: opt oci OCI spec OCI --platform="": (: 'linux/arm64' 'windows/amd64') sandboxes, sandbox, sb, s run, create, c, r --runtime="": (: "io.containerd.runc.v2") list, ls --filters="": remove, rm --force, -f: info, i info containerd deprecations list --format="": (: 'default' 'json') shim shim --id="": shim --shim-address="": shim (: shim) delete exec --attach, -a: fifos --cwd="": --env, -e="": --spec="": (runtime spec) --stderr="": fifo stderr --stdin="": fifo stdin --stdout="": fifo stdout --tty, -t: TTY start state --api-version="": shim API {2,3} (: 3) --task-id, -t="": shutdown shim --api-version="": shim API {2,3} (: 3) pprof pprof Go containerd-shim block (Goroutine blocking profile) --debug="": 0: > 0: (: 0) goroutines --debug="": 0: > 0: (: 2) heap heap --debug="": 0: > 0: (: 0) profile (CPU profile) --debug="": 0: > 0: (: 0) --seconds, -s="": (: 30s) threadcreate --debug="": 0: > 0: (: 0) trace (execution trace) --debug="": 0: > 0: (: 0) --seconds, -s="": (: 5s) Containerd containerd ctr(8)