How to enable ContainerCheckpoint feature

[binaryBard97]

GOAL: Checkpoint a container.

Local OS : MacOS

Created minikube cluster using following cmd: minikube start --driver=docker --container-runtime=cri-o \ --extra-config=kubelet.feature-gates=ContainerCheckpoint=true \ --cpus=4 --memory=4096

docker@minikube:~$ curl -v -X POST "https://localhost:10250/checkpoint/redis/redis-replicas-0/redis" \ --insecure \ --cert /var/run/kubernetes/client-admin.crt \ --key /var/run/kubernetes/client-admin.key

Gives the following error:

Trying 127.0.0.1:10250... Connected to localhost (127.0.0.1) port 10250 (#0) ALPN, offering h2 ALPN, offering http/1.1 could not load PEM client certificate, OpenSSL error error:8000000D:system library::Permission denied, (no key found, wrong pass phrase, or wrong file format?) Closing connection 0 curl: (58) could not load PEM client certificate, OpenSSL error error:8000000D:system library::Permission denied, (no key found, wrong pass phrase, or wrong file format?)

so, tried few things to resolve above errors, but none helped

1

sudo nano /var/lib/kubelet/config.yaml and added featureGates: ContainerCheckpoint: true but sudo journalctl -u kubelet | grep "ContainerCheckpoint" returns nothing.

2

sudo vi /etc/crio/crio.conf and added enable_criu_support = true to [crio.runtime] section

[binaryBard97]

/kind support