U.S. Independence Day Deal! Unlock 25% OFF Today – Limited-Time Offer - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Linux Foundation CKS Exam - Topic 1 Question 41 Discussion

ContextThis cluster uses containerd as CRI runtime.Containerd's default runtime handler is runc. Containerd has been prepared to support an additional runtime handler, runsc (gVisor).TaskCreate a RuntimeClass named sandboxed using the prepared runtime handler named runsc.Update all Pods in the namespace server to run on gVisor.
A) Explanation:

Linux Foundation CKS Exam - Topic 1 Question 41 Discussion

Actual exam question for Linux Foundation's CKS exam
Question #: 41
Topic #: 1
[All CKS Questions]

Context

This cluster uses containerd as CRI runtime.

Containerd's default runtime handler is runc. Containerd has been prepared to support an additional runtime handler, runsc (gVisor).

Task

Create a RuntimeClass named sandboxed using the prepared runtime handler named runsc.

Update all Pods in the namespace server to run on gVisor.

Show Suggested Answer Hide Answer
Suggested Answer: A

by Devora at Aug 30, 2023, 05:21 AM

Limited Time Offer

25%

Off

Get Premium CKS Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Ressie
7 months ago
runc has been solid, why change it up?
upvoted 0 times
...
Pearlie
7 months ago
Wait, are we really switching all Pods to gVisor? Sounds risky.
upvoted 0 times
...
Bok
7 months ago
Just created a RuntimeClass named sandboxed. Easy peasy!
upvoted 0 times
...
Pok
7 months ago
Not sure if it's worth the performance hit, though.
upvoted 0 times
...
Rueben
8 months ago
gVisor is great for added security!
upvoted 0 times
...
Alfreda
8 months ago
I vaguely remember something about annotations in the RuntimeClass definition. Do we need to include those for gVisor?
upvoted 0 times
...
Iesha
8 months ago
I feel a bit uncertain about updating all Pods in the namespace. Did we cover how to do that with a command or a YAML file?
upvoted 0 times
...
Yuriko
8 months ago
This seems similar to a practice question we did on setting up different runtime handlers. I hope I can recall the steps correctly.
upvoted 0 times
...
Jacqueline
8 months ago
I think I remember how to create a RuntimeClass, but I'm not entirely sure about the exact syntax for using runsc.
upvoted 0 times
...
Lilli
8 months ago
This seems pretty straightforward. I'll create the RuntimeClass, then update the Pods in the server namespace to use the new RuntimeClass. Shouldn't be too difficult as long as I follow the steps carefully.
upvoted 0 times
...
Jacqueline
8 months ago
I'm a little confused by the context here. Does the cluster already have the runsc runtime handler configured, or do I need to set that up first? I'll need to double-check the requirements before proceeding.
upvoted 0 times
...
Galen
8 months ago
Okay, I think I've got this. First, I'll create the RuntimeClass resource with the runsc runtime handler. Then I'll update the Pod spec for the Pods in the server namespace to use that RuntimeClass.
upvoted 0 times
...
Nadine
8 months ago
Hmm, I'm a bit unsure about the steps here. I'll need to review the containerd documentation on how to set up and configure the additional runtime handler.
upvoted 0 times
...
Vallie
9 months ago
This looks straightforward. I'll start by creating the RuntimeClass for the runsc runtime handler, then update the Pods in the server namespace to use that RuntimeClass.
upvoted 0 times
...
Kristofer
9 months ago
Okay, let's see. The label of the object could have been changed, so that's definitely a possibility. And if it's a custom object, Data Loader may not be the best tool to use.
upvoted 0 times
...
Lucille
9 months ago
I'm a bit confused on this one. I'm not sure if the deficits should be reported as organization costs or capitalized and amortized. I'll have to review my notes.
upvoted 0 times
...
Izetta
9 months ago
I think I saw a question like this in our study materials. My gut says it's true, because minimizing software does help with security.
upvoted 0 times
...

Save Cancel