containerd
Files
SKILL.mdagentsreferences
Install
Install only this skill with npx skills
npx skills add alisonaquinas/llm-ci-dev --skill 'containerd' -g -y
Install the containing skill bundle
/plugin install ci-cd@llm-skills
This skill is bundled inside ci-cd. Use
npx skills when you only want this skill, or install the bundle once to make every included skill available through the plugin marketplace flow. Browse the full skill bundle repository at github.com/alisonaquinas/llm-ci-dev.Invoke
Invoke this skill after installation
/ci-cd:containerd
SKILL.md
name: containerd description: Manage containers and images with containerd using ctr and nerdctl. Use when tasks mention containerd, ctr, nerdctl, /etc/containerd/config.toml, containerd snapshotter, or containerd as container runtime.
containerd
Use this skill to manage containers and images using containerd's CLI tools safely and effectively.
Quick Start
- Run
ctr versionto verify containerd is running and accessible. - Use
nerdctlfor Docker-compatible container operations — it supports the same flags. - Use
ctronly for low-level debugging; it bypasses higher-level abstractions. - Inspect
/etc/containerd/config.tomlbefore modifying; back it up first.
Intent Router
references/install-and-setup.md— install containerd, nerdctl, CNI plugins, BuildKitreferences/command-cookbook.md— nerdctl and ctr commands for containers, images, tasksreferences/containerd-config.md— config.toml structure, CRI plugin, snapshotters, registry mirrorsreferences/kubernetes-integration.md— containerd as Kubernetes CRI, crictl debugging, image GC
Workflow
Run a Container with nerdctl
# Pull and run a container
nerdctl run --rm -it alpine:latest sh
# Run in background
nerdctl run -d --name myapp -p 8080:80 nginx:latest
# Build an image
nerdctl build -t myapp:latest .
Inspect Kubernetes Containers via ctr
# List containers in the k8s.io namespace
ctr --namespace k8s.io containers list
# List running tasks (processes)
ctr --namespace k8s.io tasks list
Use nerdctl Compose
nerdctl compose up -d
nerdctl compose logs -f
nerdctl compose down
Safety Guardrails
- Use
nerdctlfor day-to-day operations andctronly for low-level debugging —ctrbypasses containerd's higher-level abstractions. - Always specify the namespace with
--namespace k8s.iowhen inspecting Kubernetes-managed containers viactrto avoid confusion with default namespace containers. - Run
systemctl restart containerd(not stop/start) to minimize downtime when reloading configuration changes. - Back up
/etc/containerd/config.tomlbefore modifying; a bad config prevents containerd from starting. - Test registry mirror and TLS configuration in a non-production cluster before applying to production nodes.
- Rootless containerd requires user namespace support — verify kernel capabilities before enabling in production.
Related Skills
docker, podman, cri-o, kubectl