Thursday, 2020-03-19

kata-irc-bot<emanaricua> is there a tutorial on how o run containers in kata using q35 machine ? https://github.com/kata-containers/runtime/commit/bb41b7248a9c06c22f6a6237ac89ec15975bb7c800:51
kata-irc-bot<emanaricua> I would like to use cri-o and kata to pass the intel IGD to a container using vfio04:18
*** sameo has quit IRC05:37
*** sameo has joined #kata-general07:31
*** sgarzare has joined #kata-general08:02
*** sameo has quit IRC08:49
*** sameo has joined #kata-general08:51
*** gwhaley has joined #kata-general09:02
kata-irc-bot<graham.whaley> Hi @emanaricua - there are probably a couple of relevant docs to read if you have not. There is an in-flight PR which is effectively the docs to go with that code you referenced: https://github.com/kata-containers/documentation/pull/615. And then there are documents around GPU and SRIOV, but maybe they are not exactly what you are looking for I guess. https://github.com/kata-containers/documentation/tree/master/use-cases  /cc09:43
kata-irc-bot@archana.m.shinde @julio.montes - do we have any other vfio k8s specific docs?09:43
kata-irc-bot<emanaricua> also I'm running a tekton taskrun using cri-o and ```  podTemplate:     runtimeClassName: 'kata-qemu'``` but the kata pod's git authenticator container doesn't have access to internet09:53
kata-irc-bot<emanaricua> is this something I should fix in kata configuration .toml or is it related to cri-o crio.conf?09:53
kata-irc-bot<emanaricua>09:55
kata-irc-bot<graham.whaley> do you know if that setup works when not using kata @emanaricua? That is one easy-ish way to determine if this is a kata specific issue or not... which might help narrow it down.09:56
kata-irc-bot<emanaricua> it works without kata using runc09:57
kata-irc-bot<graham.whaley> thx @emanaricua. Are you able to show the network details from within the (kata) container, so we can check if everything got set up OK? Maybe show both in the runc version and the kata version so we can compare. /cc @archana.m.shinde for some kata network expertise input. If we think there is an issue, then it might be best to open this on a github issue where we can gather details. thx!!10:10
kata-irc-bot<k.bouabene> hi there, I m having problem with kata-runtime+firecracker, I'm traying to make it work with containerd -> kata -> firecracker but I m having this error10:17
kata-irc-bot<k.bouabene> ```kata[29339]: time="2020-03-19T08:04:47.554282627Z" level=error msg="getting vm status failed" ID=cbe35b45bbabedede5f1b57440de0109d1b65a34c77a3f3c85b9296a44d38497 error="Get http://localhost/: dial unix /run/vc/firecracker/cbe35b45bbabedede5f1b57440de0109d1b65a34c77a3f3c85b9296a44d38497/root/api.socket: connect: no such file or directory" source=virtcontainers subsystem=firecracker```10:17
kata-irc-bot<k.bouabene> any ideas why there is no api.socket10:17
kata-irc-bot<graham.whaley> hi @k.bouabene - saw your irc message earlier (they get copied irc<->slack). I was trying to think who might be able to know. Also, many folks are in U.S. timezone, so the answer may come later.... but, @sebastien.boeuf @xu - any ideas, or who currently has `fc` knowledge...?10:19
kata-irc-bot<k.bouabene> @graham.whaley oh thinks for the reply, this problem is bugging me10:21
kata-irc-bot<k.bouabene> cause I have no clue how to fix it10:21
kata-irc-bot<k.bouabene> it's about vsock I guess10:22
kata-irc-bot<k.bouabene> but even when i disable vsock ```use_vsock = false``` it still  true ! ```/opt/kata/bin/kata-runtime kata-env | awk -v RS= '/\[Hypervisor\]/' [Hypervisor]   MachineType = ""   Version = "firecracker 0.19.1"   Path = "/opt/kata/bin/firecracker"   BlockDeviceDriver = "virtio-mmio"   EntropySource = "/dev/urandom"   Msize9p = 0   MemorySlots = 10   Debug = false   UseVSock = true   SharedFS = ""```10:23
kata-irc-bot<graham.whaley> iirc, `fc` requires `vsock`, and will not work without it. I'm not sure if we managed to get `kata fc` requirements into our main docs (we need to), but there is an old wiki page that lists a few details: https://github.com/kata-containers/documentation/wiki/Initial-release-of-Kata-Containers-with-Firecracker-support#pre-requisuites10:26
kata-irc-bot<k.bouabene> of course I have ```lsmod| grep vhost_vsock vhost_vsock            20480  0 vmw_vsock_virtio_transport_common    28672  1 vhost_vsock vhost                  45056  2 vhost_vsock,vhost_net vsock                  36864  2 vmw_vsock_virtio_transport_common,vhost_vsock```10:28
kata-irc-bot<k.bouabene> but this sentence is not clear : our container stack must provide a block based storage ('graph driver'), such as `devicemapper`10:29
kata-irc-bot<k.bouabene> my container stack is containerd runc/kata-runtime10:29
kata-irc-bot<emanaricua> @graham.whaley this is info about net ifaces of the container and10:30
kata-irc-bot<emanaricua> and this is actual config10:31
kata-irc-bot<emanaricua> how can I give net conectivity to the containers?10:32
kata-irc-bot<k.bouabene> _"The short answer is that containerd does not have graph drivers, but it does have snapshotters."_   https://blog.mobyproject.org/where-are-containerds-graph-drivers-145fc9b7255 :thinking_face:10:46
*** gwhaley has quit IRC12:02
*** gwhaley has joined #kata-general13:09
*** sameo has quit IRC13:21
*** devimc has joined #kata-general13:34
*** sameo has joined #kata-general13:44
*** pvdp665 has quit IRC14:03
*** devimc has quit IRC15:17
*** devimc has joined #kata-general15:20
*** sameo has quit IRC17:56
*** gwhaley has quit IRC18:02
*** sameo has joined #kata-general18:18
*** sgarzare has quit IRC18:29
*** pvdp665 has joined #kata-general20:24
*** th0din has quit IRC20:59
*** th0din has joined #kata-general21:01
*** sameo has quit IRC21:37
kata-irc-bot<emanaricua> can CoreOS (rktlet) be run in a kata container?21:57
kata-irc-bot<salvador.fuentes> clear21:59
*** devimc has quit IRC22:47
*** CeeMac has quit IRC22:50
*** CeeMac has joined #kata-general23:49

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!