Skip to content
This repository has been archived by the owner on May 12, 2021. It is now read-only.

Evaluate Kata + Podman #1358

Closed
egernst opened this issue Mar 12, 2019 · 11 comments · Fixed by #1875
Closed

Evaluate Kata + Podman #1358

egernst opened this issue Mar 12, 2019 · 11 comments · Fixed by #1875
Assignees
@gabibeyer

Comments

@egernst
Copy link
Member

egernst commented Mar 12, 2019

I'm confident integration of Kata into podman is feasible, and we should have a "how-to" guide and some level of automated testing available to ensure the 'how-to' guides' functionality.

Futher, it would be good to evaluate this in the context of running kata rootless. This should be feasible with overlay2, though there would likely be complications wrt devicemapper.
@egernst
Copy link
Member Author

egernst commented Mar 12, 2019

/cc @mcastelino @gabibeyer

@egernst
Copy link
Member Author

egernst commented Mar 28, 2019

Any progress on this front? @gabibeyer can you summarize your findings thus far?

@gabibeyer
Copy link
Contributor

kata seems to work pretty seamlessly with podman as long as selinux is disabled (which already seems to be a reported issue within kata). I have gotten it running in fedora 28, trying ubuntu bionic currently just to see if there are differences.

@mcastelino
Copy link
Contributor

@gabibeyer can you describe your setup. Also the final goal is to run Kata as rootless with podman.

We need to ensure we do not create files with root uid/gid on the host side when using overlay. Also ensure that the other files like resolv.conf etc do not end up being root when modified.

@gabibeyer
Copy link
Contributor

@mcastelino right, that is not yet rootless,. Should I still describe my setup if it is not yet the rootless implementation?

@gabibeyer
Copy link
Contributor

https://gist.github.com/gabibeyer/ae3f8ee5e7ebc4e1db9d9c26119ca861

@gabibeyer gabibeyer self-assigned this Apr 22, 2019
@gabibeyer
Copy link
Contributor

Modifications to podman and slirp4netns are in progress for a rootless podman + kata integration

@gabibeyer
Copy link
Contributor

gabibeyer commented Jun 24, 2019 •
edited
Loading

@gabibeyer gabibeyer mentioned this issue Jun 24, 2019
Closed
5 tasks
gabibeyer pushed a commit to gabibeyer/runtime that referenced this issue Jun 25, 2019
cli: update ctrsMapTreePath to allow rootless dir
9f1871f 
Before using the default ctrsMapTrePath, check whether the runtime
is being ran rootlessly, and if so set the ctrsMapTreePath to the
rootlessRuntimeDir configured by the libpod rootless library.

Fixes: kata-containers#1358

Signed-off-by: Gabi Beyer <gabrielle.n.beyer@intel.com>
@gabibeyer gabibeyer mentioned this issue Jun 25, 2019
Closed
gabibeyer pushed a commit to gabibeyer/runtime that referenced this issue Jun 28, 2019
cli: update paths to be configurable for rootless execution
020051d 
Before using the default ctrsMapTrePath, check whether the runtime
is being ran rootlessly, and if so set the ctrsMapTreePath to the
rootlessRuntimeDir configured by the libpod rootless library.

Fixes: kata-containers#1358

Signed-off-by: Gabi Beyer <gabrielle.n.beyer@intel.com>
gabibeyer pushed a commit to gabibeyer/runtime that referenced this issue Jul 9, 2019
cli: update paths to be configurable for rootless execution
97abec2 
Before using the default ctrsMapTrePath, check whether the runtime
is being ran rootlessly, and if so set the ctrsMapTreePath to the
rootlessRuntimeDir configured by the libpod rootless library.

Fixes: kata-containers#1358

Signed-off-by: Gabi Beyer <gabrielle.n.beyer@intel.com>
@gabibeyer gabibeyer mentioned this issue Jul 11, 2019
Merged
@alicefr
Copy link

alicefr commented Oct 22, 2019

Any plans to add tests for podman?

@jodh-intel
Copy link
Contributor

@alicefr - we're hoping to convert kata-containers/documentation#565 into both a document and a test (by "executing" the document commands). However, if you have cycles to help write some more comprehensive tests, that would be great! 😄

@alicefr
Copy link

alicefr commented Oct 22, 2019

@jodh-intel thx!Nice! There are some tests in the podman repo at https://github.com/containers/libpod/tree/master/test. I'm not sure if they can be extended to be used with kata. I'm trying to check if podman+kata works on s390x. I'll have a look after to their testsuite.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees

@gabibeyer gabibeyer

Labels
None yet
Projects
None yet
Milestone
No milestone
5 participants
@mcastelino @gabibeyer @egernst @jodh-intel @alicefr