Setting the nodefs for kubelet

Abstract: Resolve kubelet disk exhaustion by redirecting its root directory to a dedicated partition using the --root-dir flag.

Created: 2026-09-04 by
Kubelet does not have a standard --nodefs flag, so configuring disk space optimization requires adjusting the root-dir parameter or managing container runtime storage paths. By redirecting kubelet’s internal state and image storage to dedicated partitions, administrators can prevent host system exhaustion and ensure stable cluster performance without relying on non-existent command-line options.

Understanding Kubelet Storage Architecture

To effectively manage disk usage, it is crucial to understand where kubelet stores its data by default. The kubelet agent maintains local state, including pod manifests, secrets, and images, within a specific directory on the node’s filesystem. This default location is typically /var/lib/kubelet. When this partition runs out of space, pods may fail to start, and the node itself can become unhealthy. The confusion around nodefs often stems from a misunderstanding of how Kubernetes handles local storage versus network storage. While PersistentVolumes can use NFS or other remote protocols, the kubelet’s own operational files reside on the local node filesystem. Optimizing this area involves pointing kubelet to a different path that has sufficient capacity, rather than trying to set a virtual filesystem type that does not exist in the binary.

Configuring the Root Directory

The primary method for controlling kubelet’s local storage location is the --root-dir flag. This flag allows you to specify an alternative directory for kubelet’s root file system. If your server has multiple disks, you might want to move this data to a larger, faster drive to avoid filling up the root partition. To implement this change, you must modify the kubelet configuration file or systemd unit file. For most modern Linux distributions using systemd, the configuration is handled via environment variables or drop-in files. You need to locate the kubelet service definition, usually found at /etc/systemd/system/kubelet.service.d/10-kubeadm.conf or similar, depending on your setup. Add or modify the KUBELET_SYSTEM_PODS_ARGS environment variable to include the --root-dir argument followed by your desired path. For example:
KUBELET_SYSTEM_PODS_ARGS="--root-dir=/mnt/data/kubelet"
After making this change, you must reload the systemd daemon and restart the kubelet service to apply the new settings. This ensures that kubelet begins writing its state and cached images to the specified directory.

Verifying the Configuration

Once the service is restarted, verify that kubelet is using the new path. You can check the process arguments running on the node by inspecting the kubelet process details. Look for the --root-dir flag in the output to confirm it matches your intended directory. Additionally, monitor the disk usage of both the old and new directories to ensure data is being written correctly and that the old directory is no longer growing.

Managing Container Runtime Storage

While --root-dir handles kubelet’s internal state, the container runtime (such as containerd or CRI-O) also consumes significant disk space with images and layers. These runtimes often have their own configuration files where you can specify storage paths. For containerd, this is typically configured in /etc/containerd/config.toml. Adjusting the storage root for the container runtime complements the kubelet changes. Ensure that the partition hosting your container runtime storage has enough free space for image pulls and layer caching. If you are running low on disk space, consider cleaning up unused images regularly or implementing automated cleanup policies. For more insights on managing large disk images and hardware constraints, see How to Mount Large Disk Image on Small Hardware to Recover Files. This approach highlights general strategies for handling storage limitations that can be adapted for Kubernetes nodes.

Disk Space Monitoring and Cleanup

Even with proper configuration, disk space management requires ongoing attention. Implement monitoring alerts for disk usage thresholds on the partitions used by kubelet and the container runtime. Tools like Prometheus and Node Exporter are ideal for tracking these metrics across your cluster. Regularly clean up unused resources to maintain healthy disk levels. Use commands like docker system prune or crictl rmi --prune to remove dangling images. For persistent volumes, ensure that garbage collection policies are enabled if you are using dynamic provisioning. If you encounter issues with endless writes or high I/O on specific drives, such as USB devices in Linux environments, refer to Fixing Endless USB Drive Writes on Kali Linux. Although focused on Kali, the principles of identifying and stopping excessive write operations apply to troubleshooting kubelet-related I/O bottlenecks.

Frequently Asked Questions

What happens if I delete the old kubelet directory?

You should not delete the old directory immediately after switching paths. Wait until you confirm that the new directory is fully functional and contains all necessary state files. Deleting it prematurely could lead to loss of pod information or required configurations.

Can I use a symbolic link for the root-dir?

Yes, you can use a symbolic link, but it is generally safer to point directly to the actual mount point. Symbolic links can sometimes cause issues with permission contexts or if the target mount becomes unavailable during boot sequences.

Does changing root-dir affect existing pods?

Changing the root directory affects new kubelet operations and future pod creations. Existing pods that are already running will continue to operate based on their current state, but their logs and status updates may behave unexpectedly if they rely on paths that have changed.

How do I recover if kubelet fails to start after the change?

If kubelet fails to start, revert the configuration changes in the systemd unit file or environment variables. Check the journal logs for errors related to permissions or missing directories. Ensure the new directory exists and has the correct ownership for the kubelet user.

Is there a limit to the size of the root-dir partition?

There is no hard limit imposed by kubelet itself, but practical limits depend on your underlying filesystem and available hardware. Ensure the partition is formatted with a filesystem that supports large files and directories, such as ext4 or xfs, to handle image layers efficiently.

Latest News

How to Display Output of xterm Command in Terminal Screen using Cron

Resolve the inability to display xterm output in a terminal screen from cron by redirecting logs or using wall instead of insecure X11 workarounds.

Read More
Expose Local Server on VPS Preserving Real Client IPs (OS Level)

Resolve VPS logging showing only gateway IPs by configuring reverse proxies to forward real client addresses via X-Forwarded-For headers.

Read More
How to Clear Recent Files History in Linux without Deleting Actual Files?

Clear recent files history in Linux by deleting ~/.local/share/recently-used.xbel without removing the actual files.

Read More
Best HDD Copy Strategy: Manually Syncing and Rewriting Scratch

Resolve data drift between two 4TB hard drives by using rsync with the --delete flag to manually sync and rewrite scratch data for an exact mirror.

Read More
Understanding Bash Prompt Abbreviations: An Overview

Resolve repetitive typing errors by creating and persisting Bash aliases in the .bashrc file for improved command-line efficiency.

Read More
Free Tools and Methods to Log Real-Time Performance Details in Task Manager

Log real-time CPU and memory metrics to CSV files using Windows Performance Monitor Data Collector Sets to troubleshoot system slowness.

Read More
Contact Qatar Airways Customer Service: Phone Number, Help Center, and More

Resolve urgent Qatar Airways reservation issues like flight changes and baggage claims using the US phone number +1801-855-5905 or online self-service tools.

Read More
Windows 11: Alt Codes Displaying Wrong Characters - Solutions

Resolve Windows 11 Alt codes showing wrong characters by verifying the US keyboard layout and enabling Num Lock.

Read More
Run Programs with Elevated Privileges: A Comprehensive Guide

Eliminates the need to type sudo for frequent administrative tasks by configuring .bashrc aliases or functions.

Read More
Dynamically Changing Dates in Excel Formulas Using Cells

Eliminate manual date updates in Excel by using cell references to create dynamic formulas that automatically adjust calculations when input dates change.

Read More
Granting Edit Access to a Specific Excel Sheet in an Office 365 User Email ID-Based Login

Excel Online lacks native sheet-level permissions, so users must split workbooks or use worksheet protection to isolate edit access for specific tabs.

Read More
Creating Network Load on Local Wi-Fi from One PC

Generate sustained Wi-Fi bandwidth load from a single PC using a VM SFTP server to test router stability and throughput.

Read More
Changing the Default Editor for Batch Files in Windows 11's File Explorer

Resolve the issue of batch files opening in Notepad by changing the default editor to a preferred application like VS Code.

Read More
Gain WiFi Connection Minutes Before Losing it by Changing MAC Address

Bypass MAC address filtering to restore WiFi connectivity temporarily when a device is blocked by network administrators.

Read More
Photos Folders Turned Black: Troubleshooting Picture Applications on Windows

Resolve black screens in Windows Photos by resetting the app, updating graphics drivers, and repairing system files.

Read More
Troubleshooting High CPU Temperature Values: A Step-by-Step Guide

Resolve high CPU temperatures and thermal throttling by monitoring with Speedfan, cleaning dust from cooling components, and replacing degraded thermal paste.

Read More
Make cURL establish TLS connection with CA unknown

Resolve cURL TLS connection failures with unknown or self-signed certificates by using the --insecure flag to bypass CA validation.

Read More
Troubleshooting Incorrect Network Metrics Values in Grafana, Prometheus, InfluxDB, and Telegraf

Fix incorrect network metrics in Grafana, Prometheus, InfluxDB, and Telegraf by verifying interface selection, resolving unit mismatches, and handling counter resets.

Read More
Start Another Terminal Window (cmd.exe) Windows Repair/Troubleshoot

Provides step-by-step instructions to access the Windows Command Prompt via bootable media for advanced system repair and troubleshooting.

Read More
Thinkpad P1 Gen 6: Sudden Thunderbolt 3 Dock USB-C Charging Stopped Working

Resolve sudden Thunderbolt 3 dock USB-C charging and internet failure on ThinkPad P1 Gen 6 by updating firmware, resetting the dock, and adjusting power settings.

Read More
ASUS Windows 11 Laptop: Internet Connection Issue with Hotspot

Resolve ASUS Windows 11 laptop spinning wheel issue when connecting to mobile hotspot by resetting network stack, disabling IPv6, and adjusting power settings.

Read More
Developing iOS Project with Firebase: Logging in and Sending Push Notifications

Integrates Firebase to enable secure user authentication and push notifications in iOS applications.

Read More
Troubleshooting Bash Script with Suspected Issues of Spaces, Dashes, Filenames and Quoting

Resolve Bash script failures caused by word splitting, globbing, and special characters in filenames by applying proper quoting techniques.

Read More
Populating OneDrive Folder for Local Backup without Affecting Remote Files

Prevent OneDrive from deleting remote files during Windows reinstallation by unlinking the account or using symbolic links to isolate local data.

Read More
Force First Frame as Keyframe Without Re-encoding: A Quick Solution

Resolve inaccurate seeking and playback glitches by re-encoding video to ensure the first frame is a valid keyframe.

Read More
Find Information in Database Using WSL (Ubuntu) on Windows-10

Resolve database connection issues from WSL Ubuntu on Windows 10 by configuring client tools and network access to query remote or local servers.

Read More
Configuring a New Router with Different Networks: One Family, One Guest

Resolve IP conflicts and isolate guest traffic by configuring a second router with a distinct subnet via its WAN port.

Read More
Quickly Open Multiple Stock Websites with a Single Command

Solve the problem of manually opening multiple stock research websites by creating a single command to launch them simultaneously on Windows, macOS, or Linux.

Read More
Improved Adobe Acrobat Search Experience: Access Advanced Search with Ease

Access advanced search filters like case sensitivity and regex in Adobe Acrobat by clicking More Options in the Find bar.

Read More
Port Forwarding VM via OpenVPN: A Comprehensive Guide

Configure OpenVPN server and iptables to forward specific ports from VPN clients to a virtual machine's internal IP address.

Read More
Understanding Partitions in the 1980s: A Look Back at MS-DOS and Master Boot Record

Explains how the Master Boot Record and partition table enabled MS-DOS to manage multiple disk volumes on a single physical drive.

Read More
Windows 10 Enterprise: Keyboard Not Detected in Managed Organization with Admin Privileges

Resolve Windows 10 Enterprise keyboard detection failures caused by Group Policy restrictions, driver corruption, or USB enumeration errors.

Read More
Can't Find x86_64 Versions of Applications on MacOS arm64 (M1)

Resolve missing x86_64 app issues on M1 Macs by installing Rosetta 2 and reinstalling apps as universal binaries.

Read More
How to Hide Installation Source for an Android App

Manage Android app installation source visibility by using USB transfers or file managers to reduce browser traces and isolate data via work profiles.

Read More
Connecting Momentus 4200.2 ST9808210A Hard Drive via USB Cable

Resolve inability to access Seagate Momentus 4200.2 ST9808210A hard drive by connecting it via USB using a compatible SATA-to-USB adapter and configuring the disk in Windows.

Read More