question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

failed to recover state: failed to reserve sandbox name

See original GitHub issue

Hello!

Yesterday I had to hard reboot my machine after an “unusual” startup of my system. Since then microk8s seemed to stop working as it did all the time before.

microk8s.inspect tells me:

Inspecting services
 FAIL:  Service snap.microk8s.daemon-containerd is not running
For more details look at: sudo journalctl -u snap.microk8s.daemon-containerd
  Service snap.microk8s.daemon-apiserver is running
  Service snap.microk8s.daemon-proxy is running
 FAIL:  Service snap.microk8s.daemon-kubelet is not running
For more details look at: sudo journalctl -u snap.microk8s.daemon-kubelet
  Service snap.microk8s.daemon-scheduler is running
  Service snap.microk8s.daemon-controller-manager is running
  Service snap.microk8s.daemon-etcd is running
  Copy service arguments to the final report tarball
Inspecting AppArmor configuration
Gathering system info
  Copy network configuration to the final report tarball
  Copy processes list to the final report tarball
  Copy snap list to the final report tarball
  Inspect kubernetes cluster

When checking the logs for snap.microk8s.daemon-containerd it says:

Jun 14 21:02:29 nico-notebook-acer systemd[1]: Started Service for snap application microk8s.daemon-containerd.
Jun 14 21:02:29 nico-notebook-acer microk8s.daemon-containerd[4832]: Using a default profile template
Jun 14 21:02:29 nico-notebook-acer microk8s.daemon-containerd[4832]: Reloading AppArmor profiles
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.002059679+02:00" level=info msg="starting containerd" revision=bb71b10fd8f58240ca47fbb579b9d1028eea7c84 version=v1.2.5
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.002282052+02:00" level=info msg="loading plugin "io.containerd.content.v1.content"..." type=io.containerd.content.v1
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.002303583+02:00" level=info msg="loading plugin "io.containerd.snapshotter.v1.btrfs"..." type=io.containerd.snapshotter.v1
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.002559688+02:00" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.btrfs" error="path /var/snap/microk8s/common/var/lib/containerd/io.containerd.snapshotter.v1.btrfs must be a btrfs filesystem to be used with the btrfs snapshotter"
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.002572117+02:00" level=info msg="loading plugin "io.containerd.snapshotter.v1.aufs"..." type=io.containerd.snapshotter.v1
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.004288896+02:00" level=info msg="loading plugin "io.containerd.snapshotter.v1.native"..." type=io.containerd.snapshotter.v1
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.004317420+02:00" level=info msg="loading plugin "io.containerd.snapshotter.v1.overlayfs"..." type=io.containerd.snapshotter.v1
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.004373348+02:00" level=info msg="loading plugin "io.containerd.snapshotter.v1.zfs"..." type=io.containerd.snapshotter.v1
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.004623497+02:00" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.zfs" error="path /var/snap/microk8s/common/var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter"
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.004635970+02:00" level=info msg="loading plugin "io.containerd.metadata.v1.bolt"..." type=io.containerd.metadata.v1
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.004648578+02:00" level=warning msg="could not use snapshotter btrfs in metadata plugin" error="path /var/snap/microk8s/common/var/lib/containerd/io.containerd.snapshotter.v1.btrfs must be a btrfs filesystem to be used with the btrfs snapshotter"
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.004654682+02:00" level=warning msg="could not use snapshotter zfs in metadata plugin" error="path /var/snap/microk8s/common/var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter"
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.004740932+02:00" level=info msg="loading plugin "io.containerd.differ.v1.walking"..." type=io.containerd.differ.v1
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.004754452+02:00" level=info msg="loading plugin "io.containerd.gc.v1.scheduler"..." type=io.containerd.gc.v1
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.004798373+02:00" level=info msg="loading plugin "io.containerd.service.v1.containers-service"..." type=io.containerd.service.v1
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.004819425+02:00" level=info msg="loading plugin "io.containerd.service.v1.content-service"..." type=io.containerd.service.v1
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.004828658+02:00" level=info msg="loading plugin "io.containerd.service.v1.diff-service"..." type=io.containerd.service.v1
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.004844319+02:00" level=info msg="loading plugin "io.containerd.service.v1.images-service"..." type=io.containerd.service.v1
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.004854334+02:00" level=info msg="loading plugin "io.containerd.service.v1.leases-service"..." type=io.containerd.service.v1
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.004866624+02:00" level=info msg="loading plugin "io.containerd.service.v1.namespaces-service"..." type=io.containerd.service.v1
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.004878312+02:00" level=info msg="loading plugin "io.containerd.service.v1.snapshots-service"..." type=io.containerd.service.v1
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.004887543+02:00" level=info msg="loading plugin "io.containerd.runtime.v1.linux"..." type=io.containerd.runtime.v1
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.004958929+02:00" level=info msg="loading plugin "io.containerd.runtime.v2.task"..." type=io.containerd.runtime.v2
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.004995811+02:00" level=info msg="loading plugin "io.containerd.monitor.v1.cgroups"..." type=io.containerd.monitor.v1
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.005392978+02:00" level=info msg="loading plugin "io.containerd.service.v1.tasks-service"..." type=io.containerd.service.v1
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.005418880+02:00" level=info msg="loading plugin "io.containerd.internal.v1.restart"..." type=io.containerd.internal.v1
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.005458810+02:00" level=info msg="loading plugin "io.containerd.grpc.v1.containers"..." type=io.containerd.grpc.v1
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.005475579+02:00" level=info msg="loading plugin "io.containerd.grpc.v1.content"..." type=io.containerd.grpc.v1
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.005491001+02:00" level=info msg="loading plugin "io.containerd.grpc.v1.diff"..." type=io.containerd.grpc.v1
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.005504903+02:00" level=info msg="loading plugin "io.containerd.grpc.v1.events"..." type=io.containerd.grpc.v1
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.005517467+02:00" level=info msg="loading plugin "io.containerd.grpc.v1.healthcheck"..." type=io.containerd.grpc.v1
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.005530616+02:00" level=info msg="loading plugin "io.containerd.grpc.v1.images"..." type=io.containerd.grpc.v1
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.005543661+02:00" level=info msg="loading plugin "io.containerd.grpc.v1.leases"..." type=io.containerd.grpc.v1
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.005556939+02:00" level=info msg="loading plugin "io.containerd.grpc.v1.namespaces"..." type=io.containerd.grpc.v1
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.005571956+02:00" level=info msg="loading plugin "io.containerd.internal.v1.opt"..." type=io.containerd.internal.v1
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.007146330+02:00" level=info msg="loading plugin "io.containerd.grpc.v1.snapshots"..." type=io.containerd.grpc.v1
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.007258122+02:00" level=info msg="loading plugin "io.containerd.grpc.v1.tasks"..." type=io.containerd.grpc.v1
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.007285781+02:00" level=info msg="loading plugin "io.containerd.grpc.v1.version"..." type=io.containerd.grpc.v1
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.007299836+02:00" level=info msg="loading plugin "io.containerd.grpc.v1.cri"..." type=io.containerd.grpc.v1
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.007443939+02:00" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntime:{Type:io.containerd.runtime.v1.linux Engine: Root: Options:<nil>} UntrustedWorkloadRuntime:{Type: Engine: Root: Options:<nil>} Runtimes:map[] NoPivot:false} CniConfig:{NetworkPluginBinDir:/snap/microk8s/608/opt/cni/bin NetworkPluginConfDir:/var/snap/microk8s/608/args/cni-network NetworkPluginConfTemplate:} Registry:{Mirrors:map[docker.io:{Endpoints:[https://registry-1.docker.io]} local.insecure-registry.io:{Endpoints:[http://localhost:32000]}] Auths:map[]} StreamServerAddress:127.0.0.1 StreamServerPort:0 EnableSelinux:false SandboxImage:k8s.gcr.io/pause:3.1 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384} ContainerdRootDir:/var/snap/microk8s/common/var/lib/containerd ContainerdEndpoint:/var/snap/microk8s/common/run/containerd.sock RootDir:/var/snap/microk8s/common/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/var/snap/microk8s/common/run/containerd/io.containerd.grpc.v1.cri}"
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.007463392+02:00" level=info msg="Connect containerd service"
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.007588718+02:00" level=info msg="Get image filesystem path "/var/snap/microk8s/common/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs""
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.007938620+02:00" level=info msg="loading plugin "io.containerd.grpc.v1.introspection"..." type=io.containerd.grpc.v1
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.008033469+02:00" level=info msg="Start subscribing containerd event"
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.008073539+02:00" level=info msg="Start recovering state"
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.008125886+02:00" level=info msg=serving... address="127.0.0.1:1338"
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.008283570+02:00" level=info msg=serving... address="/var/snap/microk8s/common/run/containerd.sock"
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.008307407+02:00" level=info msg="containerd successfully booted in 0.006902s"
Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.018788431+02:00" level=fatal msg="Failed to run CRI service" error="failed to recover state: failed to reserve sandbox name "organization-7d749879c7-q9kgq_default_acc9a3e8-8aff-11e9-861d-9829a631c5d3_8": name "organization-7d749879c7-q9kgq_default_acc9a3e8-8aff-11e9-861d-9829a631c5d3_8" is reserved for "af18314a8fd1ca2470dfe2a59df6ac0cbf05a2fb620530353223434b78b5c7d7""
Jun 14 21:02:30 nico-notebook-acer systemd[1]: snap.microk8s.daemon-containerd.service: Main process exited, code=exited, status=1/FAILURE
Jun 14 21:02:30 nico-notebook-acer systemd[1]: snap.microk8s.daemon-containerd.service: Failed with result 'exit-code'.
Jun 14 21:02:30 nico-notebook-acer systemd[1]: snap.microk8s.daemon-containerd.service: Service RestartSec=100ms expired, scheduling restart.
Jun 14 21:02:30 nico-notebook-acer systemd[1]: snap.microk8s.daemon-containerd.service: Scheduled restart job, restart counter is at 5.
Jun 14 21:02:30 nico-notebook-acer systemd[1]: Stopped Service for snap application microk8s.daemon-containerd.
Jun 14 21:02:30 nico-notebook-acer systemd[1]: snap.microk8s.daemon-containerd.service: Start request repeated too quickly.
Jun 14 21:02:30 nico-notebook-acer systemd[1]: snap.microk8s.daemon-containerd.service: Failed with result 'exit-code'.
Jun 14 21:02:30 nico-notebook-acer systemd[1]: Failed to start Service for snap application microk8s.daemon-containerd.

When checking the logs for snap.microk8s.daemon-kubelet it tells me:

Jun 14 21:02:29 nico-notebook-acer systemd[1]: Started Service for snap application microk8s.daemon-kubelet.
Jun 14 21:02:29 nico-notebook-acer microk8s.daemon-kubelet[4623]: Flag --fail-swap-on has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.
Jun 14 21:02:29 nico-notebook-acer microk8s.daemon-kubelet[4623]: Flag --pod-cidr has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.
Jun 14 21:02:29 nico-notebook-acer microk8s.daemon-kubelet[4623]: Flag --non-masquerade-cidr has been deprecated, will be removed in a future version
Jun 14 21:02:29 nico-notebook-acer microk8s.daemon-kubelet[4623]: Flag --feature-gates has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.
Jun 14 21:02:29 nico-notebook-acer microk8s.daemon-kubelet[4623]: Flag --eviction-hard has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.
Jun 14 21:02:29 nico-notebook-acer microk8s.daemon-kubelet[4623]: Flag --cluster-domain has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.
Jun 14 21:02:29 nico-notebook-acer microk8s.daemon-kubelet[4623]: Flag --cluster-dns has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.
Jun 14 21:02:29 nico-notebook-acer microk8s.daemon-kubelet[4623]: I0614 21:02:29.492914    4623 server.go:417] Version: v1.14.2
Jun 14 21:02:29 nico-notebook-acer microk8s.daemon-kubelet[4623]: I0614 21:02:29.493260    4623 plugins.go:103] No cloud provider specified.
Jun 14 21:02:29 nico-notebook-acer microk8s.daemon-kubelet[4623]: I0614 21:02:29.525599    4623 server.go:625] --cgroups-per-qos enabled, but --cgroup-root was not specified.  defaulting to /
Jun 14 21:02:29 nico-notebook-acer microk8s.daemon-kubelet[4623]: I0614 21:02:29.525937    4623 container_manager_linux.go:261] container manager verified user specified cgroup-root exists: []
Jun 14 21:02:29 nico-notebook-acer microk8s.daemon-kubelet[4623]: I0614 21:02:29.525951    4623 container_manager_linux.go:266] Creating Container Manager object based on Node Config: {RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: ContainerRuntime:remote CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:cgroupfs KubeletRootDir:/var/snap/microk8s/common/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:<nil>} {Signal:nodefs.available Operator:LessThan Value:{Quantity:1Gi Percentage:0} GracePeriod:0s MinReclaim:<nil>} {Signal:imagefs.available Operator:LessThan Value:{Quantity:1Gi Percentage:0} GracePeriod:0s MinReclaim:<nil>}]} QOSReserved:map[] ExperimentalCPUManagerPolicy:none ExperimentalCPUManagerReconcilePeriod:10s ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms}
Jun 14 21:02:29 nico-notebook-acer microk8s.daemon-kubelet[4623]: I0614 21:02:29.526008    4623 container_manager_linux.go:286] Creating device plugin manager: true
Jun 14 21:02:29 nico-notebook-acer microk8s.daemon-kubelet[4623]: I0614 21:02:29.526031    4623 state_mem.go:36] [cpumanager] initializing new in-memory state store
Jun 14 21:02:29 nico-notebook-acer microk8s.daemon-kubelet[4623]: I0614 21:02:29.526121    4623 state_mem.go:84] [cpumanager] updated default cpuset: ""
Jun 14 21:02:29 nico-notebook-acer microk8s.daemon-kubelet[4623]: I0614 21:02:29.526132    4623 state_mem.go:92] [cpumanager] updated cpuset assignments: "map[]"
Jun 14 21:02:29 nico-notebook-acer microk8s.daemon-kubelet[4623]: I0614 21:02:29.526239    4623 kubelet.go:304] Watching apiserver
Jun 14 21:02:29 nico-notebook-acer microk8s.daemon-kubelet[4623]: W0614 21:02:29.527986    4623 util_unix.go:77] Using "/var/snap/microk8s/common/run/containerd.sock" as endpoint is deprecated, please consider using full url format "unix:///var/snap/microk8s/common/run/containerd.sock".
Jun 14 21:02:29 nico-notebook-acer microk8s.daemon-kubelet[4623]: I0614 21:02:29.528055    4623 remote_runtime.go:62] parsed scheme: ""
Jun 14 21:02:29 nico-notebook-acer microk8s.daemon-kubelet[4623]: I0614 21:02:29.528068    4623 remote_runtime.go:62] scheme "" not registered, fallback to default scheme
Jun 14 21:02:29 nico-notebook-acer microk8s.daemon-kubelet[4623]: W0614 21:02:29.528088    4623 util_unix.go:77] Using "/var/snap/microk8s/common/run/containerd.sock" as endpoint is deprecated, please consider using full url format "unix:///var/snap/microk8s/common/run/containerd.sock".
Jun 14 21:02:29 nico-notebook-acer microk8s.daemon-kubelet[4623]: I0614 21:02:29.528107    4623 remote_image.go:50] parsed scheme: ""
Jun 14 21:02:29 nico-notebook-acer microk8s.daemon-kubelet[4623]: I0614 21:02:29.528117    4623 remote_image.go:50] scheme "" not registered, fallback to default scheme
Jun 14 21:02:29 nico-notebook-acer microk8s.daemon-kubelet[4623]: I0614 21:02:29.528206    4623 asm_amd64.s:1337] ccResolverWrapper: sending new addresses to cc: [{/var/snap/microk8s/common/run/containerd.sock 0  <nil>}]
Jun 14 21:02:29 nico-notebook-acer microk8s.daemon-kubelet[4623]: I0614 21:02:29.528219    4623 clientconn.go:796] ClientConn switching balancer to "pick_first"
Jun 14 21:02:29 nico-notebook-acer microk8s.daemon-kubelet[4623]: I0614 21:02:29.528284    4623 asm_amd64.s:1337] ccResolverWrapper: sending new addresses to cc: [{/var/snap/microk8s/common/run/containerd.sock 0  <nil>}]
Jun 14 21:02:29 nico-notebook-acer microk8s.daemon-kubelet[4623]: I0614 21:02:29.528311    4623 balancer_conn_wrappers.go:131] pickfirstBalancer: HandleSubConnStateChange: 0xc0002ccc90, CONNECTING
Jun 14 21:02:29 nico-notebook-acer microk8s.daemon-kubelet[4623]: I0614 21:02:29.528320    4623 clientconn.go:796] ClientConn switching balancer to "pick_first"
Jun 14 21:02:29 nico-notebook-acer microk8s.daemon-kubelet[4623]: I0614 21:02:29.528368    4623 balancer_conn_wrappers.go:131] pickfirstBalancer: HandleSubConnStateChange: 0xc0003f98d0, CONNECTING
Jun 14 21:02:29 nico-notebook-acer microk8s.daemon-kubelet[4623]: W0614 21:02:29.528427    4623 clientconn.go:1251] grpc: addrConn.createTransport failed to connect to {/var/snap/microk8s/common/run/containerd.sock 0  <nil>}. Err :connection error: desc = "transport: Error while dialing dial unix /var/snap/microk8s/common/run/containerd.sock: connect: connection refused". Reconnecting...
Jun 14 21:02:29 nico-notebook-acer microk8s.daemon-kubelet[4623]: I0614 21:02:29.528472    4623 balancer_conn_wrappers.go:131] pickfirstBalancer: HandleSubConnStateChange: 0xc0002ccc90, TRANSIENT_FAILURE
Jun 14 21:02:29 nico-notebook-acer microk8s.daemon-kubelet[4623]: E0614 21:02:29.528495    4623 remote_runtime.go:85] Version from runtime service failed: rpc error: code = Unavailable desc = all SubConns are in TransientFailure, latest connection error: connection error: desc = "transport: Error while dialing dial unix /var/snap/microk8s/common/run/containerd.sock: connect: connection refused"
Jun 14 21:02:29 nico-notebook-acer microk8s.daemon-kubelet[4623]: W0614 21:02:29.528520    4623 clientconn.go:1251] grpc: addrConn.createTransport failed to connect to {/var/snap/microk8s/common/run/containerd.sock 0  <nil>}. Err :connection error: desc = "transport: Error while dialing dial unix /var/snap/microk8s/common/run/containerd.sock: connect: connection refused". Reconnecting...
Jun 14 21:02:29 nico-notebook-acer microk8s.daemon-kubelet[4623]: E0614 21:02:29.528552    4623 kuberuntime_manager.go:196] Get runtime version failed: rpc error: code = Unavailable desc = all SubConns are in TransientFailure, latest connection error: connection error: desc = "transport: Error while dialing dial unix /var/snap/microk8s/common/run/containerd.sock: connect: connection refused"
Jun 14 21:02:29 nico-notebook-acer microk8s.daemon-kubelet[4623]: F0614 21:02:29.528575    4623 server.go:265] failed to run Kubelet: failed to create kubelet: rpc error: code = Unavailable desc = all SubConns are in TransientFailure, latest connection error: connection error: desc = "transport: Error while dialing dial unix /var/snap/microk8s/common/run/containerd.sock: connect: connection refused"
Jun 14 21:02:29 nico-notebook-acer microk8s.daemon-kubelet[4623]: I0614 21:02:29.528579    4623 balancer_conn_wrappers.go:131] pickfirstBalancer: HandleSubConnStateChange: 0xc0003f98d0, TRANSIENT_FAILURE
Jun 14 21:02:29 nico-notebook-acer systemd[1]: snap.microk8s.daemon-kubelet.service: Main process exited, code=exited, status=255/EXCEPTION
Jun 14 21:02:29 nico-notebook-acer systemd[1]: snap.microk8s.daemon-kubelet.service: Failed with result 'exit-code'.
Jun 14 21:02:29 nico-notebook-acer systemd[1]: snap.microk8s.daemon-kubelet.service: Service RestartSec=100ms expired, scheduling restart.
Jun 14 21:02:29 nico-notebook-acer systemd[1]: snap.microk8s.daemon-kubelet.service: Scheduled restart job, restart counter is at 5.
Jun 14 21:02:29 nico-notebook-acer systemd[1]: Stopped Service for snap application microk8s.daemon-kubelet.
Jun 14 21:02:29 nico-notebook-acer systemd[1]: snap.microk8s.daemon-kubelet.service: Start request repeated too quickly.
Jun 14 21:02:29 nico-notebook-acer systemd[1]: snap.microk8s.daemon-kubelet.service: Failed with result 'exit-code'.
Jun 14 21:02:29 nico-notebook-acer systemd[1]: Failed to start Service for snap application microk8s.daemon-kubelet.

So to me it looks like kubelet just expects containerd to be running, and containerd is failing to start because of

Jun 14 21:02:30 nico-notebook-acer microk8s.daemon-containerd[4832]: time="2019-06-14T21:02:30.018788431+02:00" level=fatal msg="Failed to run CRI service" error="failed to recover state: failed to reserve sandbox name "organization-7d749879c7-q9kgq_default_acc9a3e8-8aff-11e9-861d-9829a631c5d3_8": name "organization-7d749879c7-q9kgq_default_acc9a3e8-8aff-11e9-861d-9829a631c5d3_8" is reserved for "af18314a8fd1ca2470dfe2a59df6ac0cbf05a2fb620530353223434b78b5c7d7""

?

I tried kind of everything i found online, but nothing really helped, microk8s.reset hangs, probably cause those 2 services aren’t running, and reinstalling the snap package doesn’t work cause it tries to do a snapshot, but never finishes that one. So I’m kinda stuck with a broken microk8s here, but microk8s is my goto kube setup for local development, so actually I’m using it on a day to day basis. Could someone please help me fix this issue?

I attached the microk8s.inspect generated tarball, as well as the last 100 lines of both the kubelet log and the containerd log.

snap.microk8s.daemon-containerd.log snap.microk8s.daemon-kubelet.log

inspection-report-20190614_205925.tar.gz

Thanks in advance!

Nico

Issue Analytics

  • State:closed
  • Created 4 years ago
  • Reactions:1
  • Comments:14 (3 by maintainers)

github_iconTop GitHub Comments

11reactions
jjlakiscommented, Jun 30, 2020

I had the same problem. Unfortunately, when starting containerd without CRI plugin, I was unable to see any running container. My solution was:

microk8s.stop
mv /var/snap/microk8s/common/var/lib/containerd /var/snap/microk8s/common/var/lib/_containerd
microk8s.start

Then, apiserver took care on scheduling all the containers again.

5reactions
chmitcommented, Apr 22, 2020

Hello. Here is a script which fixed this issue without fully reinstall microk8s. To summarize, this script purge all container in containerd. Then kubelet is able to restart containers without conflicts.

#!/bin/bash
/snap/bin/microk8s.stop
kill $(pidof containerd)
echo 'disabled_plugins = ["cri"]'>/var/snap/microk8s/current/args/containerd.toml.orig
sed -i -e "s/containerd\.toml$/containerd.toml.orig/g" /var/snap/microk8s/current/args/containerd
nohup /usr/bin/snap run microk8s.daemon-containerd &
containers=$(/snap/bin/microk8s.ctr -n k8s.io containers list)

while IFS= read -r line; do
    container=$(echo $line|awk '{print $1}')
    echo kill ${container}
    /snap/bin/microk8s.ctr -n k8s.io containers rm $container --keep-snapshot
done <<< "$containers"

sed -i -e "s/containerd\.toml\.orig$/containerd.toml/g" /var/snap/microk8s/current/args/containerd
kill $(pidof containerd)
/snap/bin/microk8s.start
/snap/bin/microk8s.stop
/snap/bin/microk8s.start
/snap/bin/microk8s.inspect
Read more comments on GitHub >

github_iconTop Results From Across the Web

'failed to reserve sandbox name' error after hard reboot #1014
The container is stateless and should just be forcibly removed and re-added. At minimum, is there any workaround to recover from the above?...
Read more >
microk8s containerd - failed to reserve sandbox name
It seems the containerd data had got corrupted and so the way to resolve this issue was to recreate the containerd data by...
Read more >
containerd fails to start on windows with failed to recover state
The message from the containerd said failed to recover state: failed to reserve sandbox name .
Read more >
Failed to Reserve Sandbox Name - microk8s
My microk8s master node is no longer in Ready state. Looking in logs I can see: $ sudo journalctl -u snap.microk8s.daemon-containerd .
Read more >
Fun n' games breaking, and then fixing, containerd
FATA[2021-07-04T01:04:22.466954937-07:00] Failed to run CRI service error="failed to recover state: failed to reserve sandbox name ...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found