root 3525 1.6 3.0 4557956 120436 pts/1 Sl 22:45 0:01 /usr/local/bin/containerd-shim-nerdbox-v1 -namespace default -id test -address /run/containerd/containerd.sock
root@localhost:~# /usr/share/bcc/tools/execsnoop COMM PID PPID RET ARGSctr 3507 1080 0 /usr/local/bin/ctr run -t --rm --runtime io.containerd.nerdbox.v1 docker.io/library/busybox:latest test /bin/sh containerd-shim 3516 2856 0 /usr/local/bin/containerd-shim-nerdbox-v1 -namespace default -address /run/containerd/containerd.sock -publish-binary /usr/local/bin/containerd -id test start containerd-shim 3525 3516 0 /usr/local/bin/containerd-shim-nerdbox-v1 -namespace default -id test -address /run/containerd/containerd.sock