k8s-best-practices-container-runtime.adoc

Container runtime

OpenShift uses CRI-O as a CRI interface for Kubernetes. CRI-O manages runC for container image execution. CRI-O is an open-source container engine that provides a stable, performant platform for running OCI compatible runtimes. CRI-O is developed, tested and released in tandem with Kubernetes major and minor releases.

Note	Images should be OCI compliant. Red Hat recommends that you build images using Red Hat’s open Universal Base Image (UBI). See [k8s-best-practices-ubi] for additional information about UBI and support. See test case platform-alteration-isredhat-release

For more information about CRI-O, see the following:

• Add a Layer of Security to OpenShift/Kubernetes with CRI-O in Read Only Mode

• CRI-O docs

This environment is maintained with the following open source tools:

• runc

• skopeo

• buildah

• podman

• CRI-O