Monday, 2022-01-24

kata-irc-bot<nike21oct> Hi all I wanted to understand the function of kata container , how I can setup/create a kata container on kubernetes cluster can anyone help me to achieve this?12:18
kata-irc-bot<jakob.naucke> if you have a running k8s cluster, probably start at https://github.com/kata-containers/kata-containers/blob/main/tools/packaging/kata-deploy/README.md12:19
kata-irc-bot<fidencio> How familiar with Containers, in general, you're .. and what's the usecase you want to use with Kata Containers.12:34
kata-irc-bot<nike21oct> @fidencio I have just started exploring kata container to see how it works and can have a comparison where I can see the difference between normal container and kata container , as of now there is no specific use case in mind12:48
kata-irc-bot<nike21oct> I have created my kubernetes cluster on bare metal and using containerd as a conatiner run time and install kata-deploy into the cluster and also I created the runtime class as kata-qemu and this runtime class i have given into my manifest file to create normal nginx container as a kata container but I was not able to create a container as it was giving me error failed to create containerd task: failed to create shim: open12:51
kata-irc-bot/dev/vhost-vsock: no such device: unknown,  so i checked and found that the kubernetes cluster created on ubuntu vm does not support nested virtualisation/ virtualisation is not using12:51
kata-irc-bot<nike21oct> root@ubuntuserver:~# kvm-ok INFO: Your CPU does not support KVM extensions KVM acceleration can NOT be used12:51
kata-irc-bot<fidencio> Hmmm.13:00
kata-irc-bot<fidencio> But let's take a step back.13:00
kata-irc-bot<fidencio> Your cluster is running on baremetal, right?13:00
kata-irc-bot<fidencio> Then you don't need nested, as the kata-containers VM will be on the baremetal, so you'd only need virtualization13:01
kata-irc-bot<fidencio> Ubuntu should provide you a kernel that's KVM capable, I assume13:02
kata-irc-bot<nike21oct> yes my cluster is on baremetal not on cloud13:14
kata-irc-bot<nike21oct> yes but i think on my ubuntu vm virtualisation is not enabled13:14
kata-irc-bot<nike21oct> In my environment I have setup a vmware from where I have taken two vm and on these two vm i have created the kubernetes cluster13:17
kata-irc-bot<fidencio> So, the k8s cluster is not running on BM13:22
kata-irc-bot<fidencio> It's running on a VMWare VM13:22
kata-irc-bot<fidencio> https://github.com/kata-containers/kata-containers/blob/main/docs/design/VSocks.md#with-vmware-guest13:23
kata-irc-bot<fidencio> The second one is that you'll need nested.  Although the vanilla ubuntu kernel should provide support for that13:24
kata-irc-bot<nike21oct> I followed the doc which you have shared but I am getting below error: root@ubuntuserver:~# modprobe -i vhost_vsock modprobe: ERROR: could not insert 'vhost_vsock': Device or resource busy16:47
kata-irc-bot<nike21oct> any idea for this?16:47
kata-irc-bot<nike21oct> Also when I run kata-runtime kata-check I am getting the below error: root@ubuntuserver:~# kata-runtime kata-check WARN[0000] Not running network checks as super user      arch=amd64 name=kata-runtime pid=64560 source=runtime ERRO[0000] CPU property not found                        arch=amd64 description="Virtualization support" name=vmx pid=64560 source=runtime type=flag WARN[0000] modprobe insert module failed                17:16
kata-irc-botarch=amd64 error="exit status 1" module=kvm_intel name=kata-runtime output="modprobe: ERROR: could not insert 'kvm_intel': Operation not supported\n" pid=64560 source=runtime ERRO[0000] kernel property not found                     arch=amd64 description="Intel KVM" name=kvm_intel pid=64560 source=runtime type=module ERRO[0000] ERROR: System is not capable of running Kata Containers  arch=amd64 name=kata-runtime pid=64560 source=runtime ERROR:17:16
kata-irc-botSystem is not capable of running Kata Containers17:16

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!