Blog

Thoughts on engineering, design, and building great products.

SeriesAll postscontainerdAIAPFAPIAPI GatewayARPAWSAdmissionAffinityAggregationAnsibleAppArmorArchitectureAuthenticationAuthorization
Container Runtime and CRI: Installing co...
DevOpscontainerd

Container Runtime and CRI: Installing containerd on the Workers

The kubelet doesn't run containers itself — it delegates that to a container runtime through a standard interface called CRI. This article explains what CRI is, who does what in the kubelet → containerd → runc stack, then installs containerd v2.3 and runc on the two workers, sets the cgroup driver to match the kubelet, and verifies it all with crictl.

K
KaiMay 24, 2026· 31 views
Docker Architecture: Client, Daemon, con...
DevOpsDocker

Docker Architecture: Client, Daemon, containerd and runc

A deep dive into Docker architecture: the client and daemon talk over a REST API, and beneath dockerd sit containerd and runc. Understand what really happens when you type docker run, with diagrams and commands you can verify yourself.

K
KaiMay 23, 2026· 74 views