Questions concerning Dockershim Deprecation

[mrbobbytables]

@Gil_Shinar

If I understand correctly, deprecating the dockershim means that I’ll need to have a different container runtime installed on my nodes. If this is correct, Can I have dockerd and another container runtime installed on my node? I’m asking because I want to understand if I’ll still be able to use DooD (docker outside of docker) container on my cluster?

You can continue to use docker, but you’ll have to configure k8s to use cri-dockerd (essentially an external CRI for docker)

You can also have multiple runtimes on the same host if you like. Docker actually uses containerd under the hood.

@Gil_Shinar

If the answer for question number is no (and I’ll be glad to understand why), will I still be able to use DinD (docker inside of docker) on my cluster? I understand that privileged flag is not recommended (although I read that there’s an option to use with this flag) but still would like to know if it’ll still work and if not why

Not exactly DinD, but you can run a runtime within a runtime if you want to. It just takes some time to tease out what needs to be mounted into the container for it to work correctly.