关于收集cri容器不生效问题

[kailongapple]

ilogtail 收集cri容器 ，按照官方的例子
https://github.com/alibaba/ilogtail/blob/main/docs/cn/getting-started/k8s-daemonset-to-kafka.md
我发现不行

以下是日志信息

[yyuuttaaoo]

想问一下，你的说的cri是指cri-o运行时吗？cri的sock是否在/var/run/crio/crio.sock？
可以尝试给ilogtail容器配置CONTAINERD_SOCK_PATH=/var/run/crio/crio.sock的环境变量试试

[kailongapple]

指定了容器运行时还是不行，但是没看到报错
cri discover:false 还是提示这个
####DaemonSets
containers:
- env:
- name: CONTAINERD_SOCK_PATH
value: /var/run/containerd/containerd.sock

#####################logtail_plugin.LOG

[linrunqi08]

USE_CONTAINERD=true 环境变量配置下这个看下

[kailongapple]

提示有报错，还是有问题
[ERR] [logger.go:363] [1] AlarmType:CATCH_STANDARD_OUTPUT_ALARM err:read |0: file already closed

####DaemonSets
containers:

• env:
• name: USE_CONTAINERD
  value: 'true'
• name: CONTAINERD_SOCK_PATH
  value: /var/run/containerd/containerd.sock

###logtail_plugin.LOG

[yyuuttaaoo]

这个错误没什么关系，可以看到container_discover_controller:250 的日志，cri已经生效了

[kailongapple]

但是它还是不能正常采集
观察日志没有什么error ，有什么好的调试方式吗

以下是我的配置文件

apiVersion: v1
kind: ConfigMap
metadata:
  name: ilogtail-user-cm
  namespace: ilogtail
data:
  nginx_stdout.yaml: |
    enable: true
    inputs:
      - Type: service_docker_stdout
        Stderr: false
        Stdout: true                # only collect stdout
        IncludeK8sLabel:
          app: nginx                # choose containers with this label
    processors:
      - Type: processor_regex       # structure log
        SourceKey: content
        Regex: '([\d\.:]+) - (\S+) \[(\S+) \S+\] \"(\S+) (\S+) ([^\\"]+)\" (\d+) (\d+) \"([^\\"]*)\" \"([^\\"]*)\" \"([^\\"]*)\"'
        Keys:
          - remote_addr
          - remote_user
          - time_local
          - method
          - url
          - protocol
          - status
          - body_bytes_sent
          - http_referer
          - http_user_agent
          - http_x_forwarded_for
    flushers:
      - Type: flusher_stdout
        OnlyStdout: true

apiVersion: apps/v1
kind: Deployment
metadata:
  name: nginx
  namespace: default
  labels:
    app: nginx
spec:
  replicas: 1
  selector:
    matchLabels:
      app: nginx
  template:
    metadata:
      labels:
        app: nginx
    spec:
      containers:
        - image: 'nginx:latest'
          name: nginx
          ports:
            - containerPort: 80
              name: http
              protocol: TCP
          resources:
            requests:
              cpu: 100m
              memory: 100Mi

apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: ilogtail-ds
  namespace: ilogtail
  labels:
    k8s-app: logtail-ds
spec:
  selector:
    matchLabels:
      k8s-app: logtail-ds
  template:
    metadata:
      labels:
        k8s-app: logtail-ds
    spec:
      tolerations:
        - operator: Exists # deploy on all nodes
      containers:
        - name: logtail
          env:
            - name: USE_CONTAINERD
              value: 'true'
            - name: CONTAINERD_SOCK_PATH
              value: '/var/run/containerd/containerd.sock'
            - name: ALIYUN_LOG_ENV_TAGS # add log tags from env
              value: _node_name_|_node_ip_
            - name: _node_name_
              valueFrom:
                fieldRef:
                  apiVersion: v1
                  fieldPath: spec.nodeName
            - name: _node_ip_
              valueFrom:
                fieldRef:
                  apiVersion: v1
                  fieldPath: status.hostIP
            - name: cpu_usage_limit # iLogtail's self monitor cpu limit
              value: "1"
            - name: mem_usage_limit # iLogtail's self monitor mem limit
              value: "512"
            - name: default_access_key_id # accesskey id if you want to flush to SLS
              valueFrom:
                secretKeyRef:
                  name: ilogtail-secret
                  key: access_key_id
                  optional: true
            - name: default_access_key # accesskey secret if you want to flush to SLS
              valueFrom:
                secretKeyRef:
                  name: ilogtail-secret
                  key: access_key
                  optional: true
          image: >-
            sls-opensource-registry.cn-shanghai.cr.aliyuncs.com/ilogtail-community-edition/ilogtail:latest
          imagePullPolicy: IfNotPresent
          resources:
            limits:
              cpu: 1000m
              memory: 1Gi
            requests:
              cpu: 400m
              memory: 384Mi
          volumeMounts:
            - mountPath: /var/run # for container runtime socket
              name: run
            - mountPath: /logtail_host # for log access on the node
              mountPropagation: HostToContainer
              name: root
              readOnly: true
            - mountPath: /usr/local/ilogtail/checkpoint # for checkpoint between container restart
              name: checkpoint
            - mountPath: /usr/local/ilogtail/user_yaml_config.d # mount config dir
              name: user-config
              readOnly: true
          lifecycle:
            preStop:
              exec:
                command:
                  - /usr/local/ilogtail/ilogtail_control.sh
                  - stop
                  - "3"
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /liveness
              port: 7953
              scheme: HTTP
            initialDelaySeconds: 3
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
      dnsPolicy: ClusterFirstWithHostNet
      hostNetwork: true
      volumes:
        - hostPath:
            path: /var/run
            type: Directory
          name: run
        - hostPath:
            path: /
            type: Directory
          name: root
        - hostPath:
            path: /etc/ilogtail-ilogtail-ds/checkpoint
            type: DirectoryOrCreate
          name: checkpoint
        - configMap:
            defaultMode: 420
            name: ilogtail-user-cm
          name: user-config

[linrunqi08]

inputs:
- Type: service_docker_stdout
Stderr: true
Stdout: true # only collect stdout
IncludeK8sLabel:
app: nginx # choose containers with this label

这样配置下看看Stderr设置成true

[kailongapple]

我的是k3s 部署的环境 所以还没兼容到

[messixukejia]

如果有需要，欢迎来一起参与下兼容开发。

[crclz]

@messixukejia 所以目前ilogtail目前是不支持k3s的吗？我之前参考SLS的kubernetes配置文档，配置完成后，标准输出和容器文件都无法采集。使用社区版（参考的本仓库的github），发现也无法跑通入门教程。

[messixukejia]

#985 可以使用这次的合入看看是否可以做到K3s采集

[kailongapple]

v1.7 可以了收集
只需要在demo的ilogtail-daemonset.yaml 追加
- name: USE_CONTAINERD #使用containerd
value: 'true'
- name: CONTAINERD_SOCK_PATH #套字节
value: /run/k3s/containerd/containerd.sock