Kubelet speaks CRI to containerd, which speaks OCI to runc (or crun).

Docker can be wedged in there between Kubernetes and containerd (which was originally part of Docker).

The OCI implementation is the lowest-level component in the “container stack”.