CKA EXAM QS-3 2025

Question 3:

Setup cri-dockerd:

* 1. Install the Debian package

cri-dockerd_0.3.9.3-o.ubuntu-jammy_amd64.deb

Debian packages are installaed using dpkg

2. Enable and start the cri-docker service.

3. Configure these system parameters:

⦁ Set net.bridge.bridge-nf-call-iptables to 1

⦁ Set net.ipv6.conf.all.forwarding to 1

⦁ Set net.ipv4.ip.forward to 1

⦁ Set net.netfilter.nf.conntrack_max to 131072

Ensure these system parameter persist after a system restart and are applied to

the running system.

=======================================================

Step 1: Install cri-dockerd Debian package

#sudo dpkg -i cri-dockerd_0.3.9.3-o.ubuntu-jammy_amd64.deb

#sudo apt-get install -f -y

Step 2: Enable and Start the cri-dockerd Service

#sudo systemctl enable --now cri-docker.service cri-docker.socket

#sudo systemctl status cri-docker.service

#sudo systemctl status cri-docker.socket

Step 3: Configure System Parameters (sysctl)

#sudo sysctl -w net.bridge.bridge-nf-call-iptables=1

#sudo sysctl -w net.ipv6.conf.all.forwarding=1

#sudo sysctl -w net.ipv4.ip_forward=1

#sudo sysctl -w net.netfilter.nf_conntrack_max=131072

Step 4 — Make them permanent

sudo tee /etc/sysctl.d/99-k8s.conf <<EOF

net.bridge.bridge-nf-call-iptables=1

net.ipv6.conf.all.forwarding=1

net.ipv4.ip_forward=1

net.netfilter.nf_conntrack_max=131072

EOF

#sudo sysctl --system

Step 5 — Verify

#sysctl net.ipv4.ip_forward

#sysctl net.bridge.bridge-nf-call-iptables