Load container images phase fails with permission denied

[xagent003]

The load container images phase is failing with permission denied. Error is coming from the external containerd package where it tries to load the client:

nodelet/nodelet/pkg/utils/container_runtime/utils.go

Line 63 in 8ee16c0

client, err := containerd.New(constants.ContainerdSocket, containerd.WithDefaultPlatform(platform))

Is it a file permissions issue?

{"L":"INFO","T":"2022-06-06T21:08:50.227Z","C":"container_runtime/load_images.go:79","M":"Running Start of phase: Load user images to container runtime"}
{"L":"ERROR","T":"2022-06-06T21:08:50.230Z","C":"container_runtime/load_images.go:107","M":"could not load images from : /var/opt/pf9/images/images.tar.gz: failed to create container runtime client: failed to dial \"/run/containerd/containerd.sock\": connection error: desc = \"transport: error while dialing: dial unix /run/containerd/containerd.sock: connect: permission denied\""}
{"L":"WARN","T":"2022-06-06T21:08:50.230Z","C":"nodelet/nodelet.go:410","M":"Sunpike communication is disabled; not sending an update to sunpike-conductor."}
{"L":"WARN","T":"2022-06-06T21:08:50.231Z","C":"nodelet/nodelet.go:410","M":"Sunpike communication is disabled; not sending an update to sunpike-conductor."}
{"L":"WARN","T":"2022-06-06T21:08:50.231Z","C":"nodelet/nodelet.go:210","M":"Failed to start kube service at step: Load user images to container runtime"}
{"L":"WARN","T":"2022-06-06T21:08:50.231Z","C":"nodelet/nodelet.go:410","M":"Sunpike communication is disabled; not sending an update to sunpike-conductor."}
{"L":"WARN","T":"2022-06-06T21:08:50.232Z","C":"nodelet/nodelet.go:428","M":"Sunpike communication is disabled; not sending an update to sunpike-conductor."}
{"L":"INFO","T":"2022-06-06T21:08:50.233Z","C":"nodelet/nodelet.go:170","M":"Reconcile completed."}
^C

[root@arjunairc7801 ~]# ls -alh /var/opt/pf9/images/images.tar.gz
-rw-r--r--. 1 pf9 pf9group 116M Jun  6 21:05 /var/opt/pf9/images/images.tar.gz
[root@arjunairc7801 ~]# ls -alh /run/containerd/containerd.sock
srw-rw----. 1 root root 0 Jun  6 21:06 /run/containerd/containerd.sock