sniff on RKE2 fails to create the ksniff pod

[ulfaric]

I am trying to do a packet inspection for a pod wit ksniff on RKE2 cluster. The Ksniff always fails to create the pod due to:

MountVolume.SetUp failed for volume "container-socket" : hostPath type check failed: /run/containerd/containerd.sock is not a socket file

I tried --socket /run/k3s/containerd/containerd.sock, still does not work.

[ulfaric]

• chroot /host ctr -a /run/k3s/containerd/containerd.sock task kill -s SIGKILL ksniff-container-JoyJCGGE
  chroot: can't execute 'ctr': No such file or directory

this is the error when using --socket /run/k3s/containerd/containerd.sock

[MHDarkside]

Hi i have the same issue.
And i find the problem. K3s has his ctr not in a path included directory.

for the troubleshooting i just created a link:
sudo ln -s /var/lib/rancher/rke2/data/v1.25.13-rke2r1-91117bcc8901/bin/ctr /usr/local/bin/ctr

the path depends on the k3s Version you use.
find / -name ctr

hope that helps anybody.