Hands-on Lab·Kubernetes and Cloud Native Associate
Pod Sandboxes and Pause Containers
Ten Pods on this node means ten pause containers doing nothing at all. That is the point: the pause container owns the network namespace so the containers that come and go can share it without losing the Pod IP.
Containers and Runtimes Guide 12 of 46 Intermediate
- Kubernetes1.36.4
- containerdv2.2.6
- runc1.3.6
- crictlv1.36.0
- TimeAbout 15 min
- Reviewed22 August 2026
Written against the versions above. containerd 2.x moved its configuration layout. Paths below are 2.x; on 1.x the same settings live under different table names.
| Server Name | IP Address | OS | Roles | CPU | RAM | HDD |
|---|---|---|---|---|---|---|
| CKA1001 | 192.168.0.175 | Ubuntu 26.04 LTS | Control Plane Node | 2 Core | 4 GB | 50 GB |
| CKA1001-NODE01 | 192.168.0.176 | Ubuntu 26.04 LTS | Worker Node | 2 Core | 4 GB | 50 GB |
Before you start
- The runtime guide, for
crictland a working/etc/crictl.yaml. - The Pod concept. A Pod is a group of containers sharing a network namespace.
-
A Pod is a sandbox plus containers
-
Ten Pods, ten pause containers
-
Where the sandbox lives on disk