Friday, 2021-12-10

kata-irc-bot<zeroping> I'm trying to get started, and I can tell that the preferred setup is Fedora/Centos or to use snap on x86_64. I'm straying off that path, and am trying to figure out which of the non-preferred options is best.15:50
kata-irc-bot<zeroping> How baked is the aarch64/arm64 support?15:51
kata-irc-bot<zeroping> Likewise, how screwed am I if I don't stick to https://github.com/kata-containers/kata-containers/blob/main/versions.yaml?15:52
kata-irc-bot<zeroping> My preferred system is Debian stable on ARMv8, but that's cgroups v2 and containerd 1.4.5 by default. My first couple of attempts haven't gone well...15:56
kata-irc-bot<jakob.naucke> We distribute in a number of ways. Not claiming an exhaustive list: • Packages on Fedora (x86_64 & aarch64 supported since 34 I think, ppc64le & s390x on rawhide) • kata-deploy, where you `kubectl apply` a file on your cluster and it installs Kata into `/opt/kata`. x86_64 only at this time if I'm not mistaken. • GitHub releases, which have the same `/opt/kata` tarball, dto. x86_64. • Snaps for all platforms So to get bac16:17
kata-irc-botyour question about ARM without Snaps and Fedora: I think you will have to build it yourself, but a normal `make` (which builds the tarball mentioned above) might just work? I guess you'll have to continue from the containerd guide after building it, untarring it to `/`, and linking to `/opt/kata/bin/containerd-shim-kata-v2` somewhere in your PATH.  > How baked is the aarch64 support? I don't have hardware to test personally, but packaging16:17
kata-irc-botaside, it is a tested platform. cc @jianyong.wu  > not sticking to `versions.yaml` Depends.  > cgroups v2 Might need to disable.  > containerd 1.4.5 Might not work. cc @fupan16:17
kata-irc-bot<zeroping> That's quite helpful, and I had vaguely known much of it. Glad to hear that aarch64 doesn't sound too unusual - that's hard to change :slightly_smiling_face:16:26
kata-irc-bot<zeroping> I've attempted some hybrid of the manual install and compiling from source. I was getting into the weeds with error messages that Google had never seen before.16:28
kata-irc-bot<zeroping> I ran into issues that smelled like a problem with cgroups v2, so set the kernel args to use v1 for now16:28
kata-irc-bot<zeroping> I can also say that fedora 34 binaries were not happy running with the older debian stable glibc, so that was out (else, converting packages with alien might be a clean route)16:30
kata-irc-bot<zeroping> Current issue looks like it starts QEMU, but quickly stops hearing from it via QMP.16:37
kata-irc-bot<zeroping> (Not that I know what QMP is yet, but I gather it's the communication channel used to chat with QEMU, so perhaps QEMU has died?)16:38
kata-irc-bot<zeroping> Debian Stable is QEMU 5.2, and it looks like 5.1 might be the recommended for aarch64, while 6.1 is recommended for x86_64?16:38
kata-irc-bot<zeroping> Based on your comments though, I'm guessing my issues are less "user is on funny ARM system" and more "user didn't install the recommended versions of the dependencies".16:40
kata-irc-bot<zeroping> So maybe I'll give Debian testing (containerd 1.5.8) a quick try.16:42
kata-irc-bot<jakob.naucke> > error messages that Google had never seen before If you're unsuccessful in resolving, feel free to post here or on GitHub. > Fedora 34 binaries were not happy running with the older debian stable glibc yeah no, I generally would expect that to not work > looks like it starts QEMU, but quickly stops hearing from it via QMP if it's something like "timed out connecting to vsock", that's unfortunetaly just the generic "something17:31
kata-irc-botwent wrong, I can't reach the agent" error > Not that I know what QMP is yet, but I gather it's the communication channel used to chat with QEMU the QEMU Machine Protocol, yes > Debian Stable is QEMU 5.2, and it looks like 5.1 might be the recommended for aarch64, while 6.1 is recommended for x86_64? I'm not sure but it might work at this point, see https://github.com/kata-containers/kata-containers/pull/273217:31
kata-irc-bot<zeroping> re fedora binaries via alien: I though maybe they might work on Debian testing, but no luck - Fedora 34 is 2.33, while Debian testing is still 2.32. I had to try tho - it was a quick experiment.17:38
kata-irc-bot<zeroping> I think the specific error is along the lines of: `scanner return error: read unix @->/run/vc/vm/test-kata/qmp.sock: use of closed network connection`  right after reading QMP capabilities. Probably best if I try the correct containerd before chasing it too far.17:44
kata-irc-bot<jakob.naucke> Hmm, that narrows it down... a little. Yes, please do try containerd 1.5 if you can. Debug messages can help (yay, we've hit the developer guide already), at a certain point of certainty on your side it's also worth an issue. I take it you're using `ctr`/`nerdctl`?17:47
kata-irc-bot<zeroping> Yep, ctr. Definitely not at any level of certainty yet, and trying not to bother people too much until I am.17:49
kata-irc-bot<zeroping> (hilariously, I have an installation of containerd 1.5.8ish on the host already, from playing with firecracker-containerd, so maybe I'll test with that before trying bits from Debian testing)17:51
kata-irc-bot<zeroping> I'll get to trying it in a day or two. Thanks for the help and suggestions, and pointing out my most likely places to look. That intuition is hard to acquire.17:54

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!