kubespray/roles/container-engine/docker/files/cleanup-docker-orphans.sh

#!/bin/bash
list_descendants ()
{
  local children=$(ps -o pid= --ppid "$1")
  for pid in $children
  do
    list_descendants "$pid"
  done
  [[ -n "$children" ]] && echo "$children"
}

count_shim_processes=$(pgrep -f ^docker-containerd-shim | wc -l)
live_restore=$(docker info --format {{.LiveRestoreEnabled}} 2>/dev/null)

if [ ${count_shim_processes} -gt 0 ] && [ -n "${live_restore}" -a "${live_restore}" == "true" ]; then
        # Find all container pids from shims
        orphans=$(pgrep -P $(pgrep -d ',' -f ^docker-containerd-shim) |\
        # Filter out valid docker pids, leaving the orphans
        egrep -v $(docker ps -q | xargs docker inspect --format '{{.State.Pid}}' | awk '{printf "%s%s",sep,$1; sep="|"}'))

        if [[ -n "$orphans" ]]
        then
                # Get shim pids of orphans
                orphan_shim_pids=$(ps -o pid= $(ps -o ppid= $orphans))

                # Find all orphaned container PIDs
                orphan_container_pids=$(for pid in $orphan_shim_pids; do list_descendants $pid; done)

                # Recursively kill all child PIDs of orphan shims
                echo -e "Killing orphan container PIDs and descendants: \n$(ps -O ppid= $orphan_container_pids)"
                #kill -9 $orphan_container_pids || true

        else
                echo "No orphaned containers found"
        fi
else
        echo "Either live-restore is turned off or the node doesn't have any shim processes."
fi