The container runtime the kubelet actually uses, and how to configure and debug it now that the Docker shim is gone