Tuesday, 2019-04-30

*** igordc has quit IRC00:28
*** sgarzare has joined #kata-general06:25
kata-irc-bot2<haosdent> Naive question, how to use custom image in katacontainer06:28
kata-irc-bot2<haosdent> `HypervisorConfig` seems could not pass a custom image06:29
*** tmhoang has joined #kata-general06:47
kata-irc-bot2<dangot> Hey guys, I haven’t been able to get the networking when running in AWS EKS with their CNI https://github.com/aws/amazon-vpc-cni-k8s06:49
kata-irc-bot2<dangot> my config works with flannel - not with VPC-CNI06:50
kata-irc-bot2<dangot> anything I should look at ? I tried switching the `internetworking_model` , no luck06:50
kata-irc-bot2<dangot> this is how the cni works https://github.com/aws/amazon-vpc-cni-k8s/blob/master/docs/cni-proposal.md07:35
kata-irc-bot2<mvedovati> @haosdent  You can specify a custom image in `/etc/kata-containers/configuration.toml`. E.g.: ``` [hypervisor.qemu]                                                                                                                                                                                                image = "/home/kata/custom.img" ```07:53
*** gwhaley has joined #kata-general08:02
kata-irc-bot2<mvedovati> @taimoorbhatti one way to do that could be specifying multiple runtimes configuration in your container, e.g. for docker: ``` "runtimes": {   "kata-kernel1": {     "path": "/usr/bin/kata-runtime",     "runtimeArgs": [       "--kata-config /tmp/kata-kernel1.toml"     ]   },   "kata-kernel2": {     "path": "/usr/bin/kata-runtime",     "runtimeArgs": [       "--kata-config /tmp/kata-kernel2.toml"     ]   } }08:11
kata-irc-bot2<graham.whaley> @haosdent @taimoorbhatti - you can also specify the image or kernel to use on a per-pod (in k8s at least) basis. Hmm, I asked for this to get documented v.recently - let me see if I can find the references..... as you are not the first to ask, and it is a *very nice feature* of kata... that is under-documented at present....08:45
kata-irc-bot2<graham.whaley> @haosdent - I'm presuming you have also found our tools to build images? https://github.com/kata-containers/osbuilder08:46
kata-irc-bot2<graham.whaley> Aha, I knew I had this somewhere - @haosdent @taimoorbhatti - have a look at this Issue and see if that gives you some more info on how to set up per-pod kernel and images :slightly_smiling_face: https://github.com/kata-containers/documentation/issues/29408:57
kata-irc-bot2<taimoor.imtiaz> @graham.whaley aww, cool!! But we shouldn't limit it to Kubernetes (I think).. what if I'm interested in testing linux kernels with Kata? This is apparently a kata feature which k8s makes use of! I'm too new to both atm to say anything but this is awesome!!09:08
kata-irc-bot2<graham.whaley> @taimoor.imtiaz - sure - kata itself can work with a different kernel per container/pod. The key is how the orchestration (docker, k8s) tells kata which pod wants which kernel/image - that can be done with k8s via its yaml, but I don't think Docker has a built in way of doing it on a per-container basis, hence.09:09
kata-irc-bot2<graham.whaley> The way to 'fudge' it in docker, as @mvedovati said, would be to either:09:10
kata-irc-bot2<graham.whaley> 1) set up multiple runtimes in docker, each with a different kata config file with a different kernel/image in it09:10
kata-irc-bot2<graham.whaley> 2) have one kata runtime set up, but dynamically edit the config file on the fly between container launches (but that is a very skanky hack - OK maybe if you are writing a test etc., but not something you'd want to do in production/deployment ;) :skull_and_crossbones:09:11
kata-irc-bot2<taimoor.imtiaz> I might want to try that for my usecase :slightly_smiling_face:09:21
kata-irc-bot2<taimoor.imtiaz> I am interested in launching Realtime and non-RT VMs in parallel but I'll start with the k8s trick ... thanks again.. this was awesome info!!09:22
kata-irc-bot2<taimoor.imtiaz> this is awesome... I'll try it. Thank you!!09:28
*** pvdp has joined #kata-general09:31
*** gwhaley has quit IRC10:59
*** altlogbot_2 has quit IRC12:43
*** altlogbot_1 has joined #kata-general12:45
*** pvdp has quit IRC13:17
kata-irc-bot2<haosdent> thank you very much13:36
kata-irc-bot2<haosdent> Awesome, many thx!13:37
kata-irc-bot2<eric.ernst> interesting - so you tried macvtap  and tcfilter?  This is in EKS, I assume?14:00
kata-irc-bot2<eric.ernst> @archana.m.shinde FYI14:01
kata-irc-bot2<eric.ernst> @manohar.r.castelino ^14:01
*** sameo has joined #kata-general15:05
kata-irc-bot2<haosdent> hi, kata masters. do katacontainer support limit disk size?15:23
kata-irc-bot2<haosdent> when i run `docker run --rm -it --cpus=3 --storage-opt size=120G busybox`, it return error15:23
kata-irc-bot2<graham.whaley> @haosdent - I've not seen that one before. I'll go have a peek at the docker docs. /cc @gabriela.cervantes.te @archana.m.shinde for any thoughts15:34
kata-irc-bot2<graham.whaley> From the docker run docs page, for ref,15:35
kata-irc-bot2<graham.whaley> ```This (size) will allow to set the container rootfs size to 120G at creation time. This option is only available for the devicemapper, btrfs, overlay2, windowsfilter and zfs graph drivers. For the devicemapper, btrfs, windowsfilter and zfs graph drivers, user cannot pass a size less than the Default BaseFS Size. For the overlay2 storage driver, the size option is only available if the backing fs is xfs and mounted with the15:35
kata-irc-bot2pquota mount option. Under these conditions, user can pass any size less than the backing fs size.```15:35
kata-irc-bot2<graham.whaley> First question then @haosdent is which docker graph (storage) driver are you using? That will then probably determine how that is mapped into kata, and thus if kata could support that option or not etc.15:36
*** tmhoang has quit IRC15:42
kata-irc-bot2<haosdent> currently i use etcd16:14
kata-irc-bot2<haosdent> another naive question, after I run `socat` to attach the vm that lauched by kata, seems could not see any output when I type some commands16:32
kata-irc-bot2<graham.whaley> @haosdent - were you trying to connect to the debug console like https://github.com/kata-containers/documentation/blob/master/Developer-Guide.md#connect-to-the-virtual-machine-using-the-debug-console ? - hmm, I have a feeling the console needs to be 'enabled' - @julio.montes - is that right?16:50
kata-irc-bot2<graham.whaley> we don't enable it by default iirc, as it would be a big security hole :slightly_smiling_face:16:51
kata-irc-bot2<gabriela.cervantes.te> @haosdent, I was able to run `docker run --rm -it --cpus=3 --storage-opt size=120G busybox` using `devicemapper`. It seem that the flag `--storage-opt` is not available for `overlay` or `overlay2` as it says `docker: Error response from daemon: --storage-opt is not supported for overlay`16:53
*** sgarzare has quit IRC17:05
*** sameo has quit IRC17:06
kata-irc-bot2<julio.montes> @graham.whaley yes, @haosdent you have to build a new image with custom packages, like bash, and then you have to modify the kata-container.target file to run the debug service17:18
kata-irc-bot2<julio.montes> @haosdent https://gist.github.com/devimc/f8e3373d8d8e6b3b5b56441d04875f2a#create-a-functional-clear-container-image-using-osbuilder17:22
*** igordc has joined #kata-general17:28
kata-irc-bot2<graham.whaley> ah, right, you have to follow all the steps from the first higher level stage: https://github.com/kata-containers/documentation/blob/master/Developer-Guide.md#set-up-a-debug-console @haosdent if you did not already.17:34
*** sameo has joined #kata-general17:37
kata-irc-bot2<sebastien.boeuf> Bravo @gabriela.cervantes.te  @jose.carlos.venegas.m @salvador.fuentes for the great work on Kata!17:39
kata-irc-bot2<salvador.fuentes> thank you17:39
kata-irc-bot2<sebastien.boeuf>17:40
kata-irc-bot2<sebastien.boeuf> And also a round of applause for @mvedovati  and @james.o.hunt17:42
kata-irc-bot2<mvedovati> awesome :) thanks guys!17:50
kata-irc-bot2<sebastien.boeuf> Someone else took yours @mvedovati so that he can give it to you in person :)17:50
kata-irc-bot2<gabriela.cervantes.te> thanks17:50
kata-irc-bot2<sebastien.boeuf> Thank y'all folks :+1:17:51
kata-irc-bot2<eric.ernst> for @mvedovati and @jose.carlos.venegas.m:17:53
kata-irc-bot2<eric.ernst>17:54
kata-irc-bot2<eric.ernst>17:54
kata-irc-bot2<gmmaharaj> Did Mike Rowe come and present it?17:54
kata-irc-bot2<eric.ernst> Yeah, it was incredible.  Great guy.17:54
kata-irc-bot2<eric.ernst> @gabriela.cervantes.te @salvador.fuentes:17:55
kata-irc-bot2<eric.ernst>17:55
kata-irc-bot2<gmmaharaj> I am making a note to work to get that title next time.17:55
kata-irc-bot2<eric.ernst>17:55
kata-irc-bot2<eric.ernst> And Dr James: @james.o.hunt17:56
kata-irc-bot2<eric.ernst>17:56
kata-irc-bot2<eric.ernst>17:56
kata-irc-bot2<eric.ernst> As background, in case you aren't familiar, these are put together based on anonymous nominations (including the text, etc).  So make sure you thank your anonymous colleagues!17:57
*** igordc has quit IRC18:05
kata-irc-bot2<graham.whaley> :100 :bananadance:18:13
*** igordc has joined #kata-general18:58
*** sameo has quit IRC19:03
*** sameo has joined #kata-general20:42
*** igordc has quit IRC20:54
*** igordc has joined #kata-general21:07
*** igordc has quit IRC21:58
*** sameo has quit IRC23:23
kata-irc-bot2<verytired1> Awesome work, y'all!23:50

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!