Nodes using Docker's containerd snapshotter (storage driver 'overlayfs') make the cadvisor exporter open a containerd client to read container info; without /run/containerd/containerd.sock it fails to register existing containers, so no per-container metrics appear (only the machine root). Mount the socket read-only — harmless on overlay2 nodes, required on containerd-snapshotter ones.