Running kubectl debug node/metropolis-90e602968b04a8c60e8d107a1258088e -it --image=$IMAGE --profile=netadmin in a namespace with an appropriate PodSecurity admission label results in:
Warning FailedCreatePodSandBox 118s (x26 over 7m20s) kubelet Failed to create pod sandbox: rpc error: code = Unknown desc = failed to setup sandbox files: host "/dev/shm" is not available for host ipc: stat /dev/shm: no such file or directory
Running
kubectl debug node/metropolis-90e602968b04a8c60e8d107a1258088e -it --image=$IMAGE --profile=netadminin a namespace with an appropriate PodSecurity admission label results in:Presumably, we don't have a /dev/shm:
https://github.com/containerd/containerd/blob/c3bed76eeb24ab6671a8134ce32fd2b22b0af667/internal/cri/server/podsandbox/sandbox_run_linux.go#L290-L293