Thursday, 2018-06-14

*** eernst has quit IRC00:00
*** eernst has joined #kata-dev00:00
*** zerocoolback has joined #kata-dev00:09
*** zerocoolback has quit IRC00:14
*** zerocoolback has joined #kata-dev00:15
*** zerocoolback has quit IRC00:33
*** sameo has quit IRC01:02
*** dlw has joined #kata-dev01:30
*** zerocoolback has joined #kata-dev02:26
*** zerocoolback has quit IRC02:41
*** psuriset has quit IRC03:01
*** zerocoolback has joined #kata-dev03:22
*** eernst has quit IRC04:21
*** sjas has joined #kata-dev04:22
*** sjas_ has quit IRC04:25
*** psuriset has joined #kata-dev04:25
*** zerocoolback has quit IRC04:54
*** zerocoolback has joined #kata-dev04:55
*** zerocoolback has quit IRC04:58
*** zerocool_ has joined #kata-dev04:58
*** zerocool_ has quit IRC06:07
*** zerocoolback has joined #kata-dev06:07
*** zerocoolback has quit IRC06:08
*** zerocoolback has joined #kata-dev06:09
*** psuriset_ has joined #kata-dev06:27
*** psuriset__ has joined #kata-dev06:30
*** psuriset has quit IRC06:30
*** psuriset_ has quit IRC06:34
*** psuriset__ has quit IRC06:37
*** zerocoolback has quit IRC06:47
*** jodh has joined #kata-dev06:52
*** dtk has quit IRC07:10
*** dtk has joined #kata-dev07:10
*** zerocoolback has joined #kata-dev07:40
*** davidgiluk has joined #kata-dev07:57
*** gwhaley has joined #kata-dev08:09
*** sameo has joined #kata-dev08:09
*** psuriset__ has joined #kata-dev08:23
kata-irc-bot<zhangwei555> The CI is still keep failing, I think it should be a CI problem ``` panic: ERROR: docker daemon is not installed, not running, or not accessible to current user: Client:  Version:      18.03.1-ce  API version:  1.37  Go version:   go1.9.5  Git commit:   9ee9f40  Built:        Thu Apr 26 07:19:31 2018  OS/Arch:      linux/amd64  Experimental: false  Orchestrator: swarm Got permission denied while trying to connect to the Docker daemon08:38
kata-irc-botsocket at unix:///var/run/docker.sock: Get http://%2Fvar%2Frun%2Fdocker.sock/v1.37/version: dial unix /var/run/docker.sock: connect: permission denied (error exit status 1)  goroutine 1 [running, locked to thread]: github.com/kata-containers/runtime/cli.init.2() /tmp/jenkins/workspace/kata-containers-runtime-fedora-27-PR/go/src/github.com/kata-containers/runtime/cli/main_test.go:92 +0xe2c FAILgithub.com/kata-containers/runtime/cli0.097s make:08:38
kata-irc-bot*** [Makefile:386: go-test] Error 1 Build step 'Execute shell' marked build as failure Performing Post build task... Could not match :Build was aborted  : False Match found for :Build step 'Execute shell' marked build as failure : True Logical operation result is TRUE Running script  : #!/bin/bash ```  Maybe we are not giving enough permission to run the test, so the test program can't visit "/etc/docker/daemon.sock"08:38
kata-irc-bot<zhangwei555> Is anyone from our CI team online?08:38
kata-irc-bot<zhangwei555> See this error from PR: https://github.com/kata-containers/runtime/pull/30108:40
gwhaleyhi @zhangwei555 - so I see some bad docker errors there, and then some odd sudo errors as well.08:41
gwhaleybest thing I think is to copy out those errors and past a message on the PR, and copy in fuentess and mnaser08:42
gwhaleylooks like some glitch or mis-config with the CI VMs08:42
kata-irc-bot<zhangwei555> @graham.whaley Yes, I believe it should be related to mis-config. Will cc fuentess and @mnaser  in PR08:44
kata-irc-bot<zhangwei555> @graham.whaley What's fuentess and mo 's github account? Can't find it08:47
gwhaley@zhangwei555 - thx. I replied and pulled in fuentess (@chavafg) and mnaser :-)  They will wake up in 6h or so - fingers crossed!09:03
gwhaleythanks for reporting - yes, we all rely on CI - I know those guys are working hard to get it ironed out...09:03
kata-irc-bot<niteshkonkar007> Can we disable 9pfs and ask kata to use block device instead for rootfs for containers? Is there a document which tells us how to choose between the both.09:09
kata-irc-bot<niteshkonkar007> `#disable_block_device_use = false` and `block_device_driver = "virtio-scsi"` should suffice in `/usr/share/defaults/kata-containers/configuration.toml`?09:20
gwhaley@niteshkonkar007 - yes, I think that is the basis. I think you may also need to use devicemapper as the graph driver, rather than overlay[2] iirc (anybody?). There is a little info in https://github.com/kata-containers/documentation/blob/master/architecture.md#storage09:21
gwhaleybuy, yes, it would be great if we had a nice document for that - if you don't want to write it ;-), then could you at least open an issue on kata-containers/documentation repo and /cc amshinde on it pls ? ;-)09:22
gwhaleys/buy/but/09:22
kata-irc-bot<niteshkonkar007> @graham.whaley: Yes I had read that part. However, I was wondering why its not part of dev-guide, just like we have an option for choosing initrd/rootfs we have option for 9pfs/block_device. Yes I shall open an issue.  I am trying non-9pfs way on my x86 block by making changed in the toml file. I am not sure what else I need to do. `graph driver` part I will check as u mentioned. Thnxs09:25
kata-irc-bot<zhangwei555> @niteshkonkar007 If you are using devicemapper as docker's graph driver, I think kata will use block device as default for you09:41
*** zerocoolback has quit IRC09:55
kata-irc-bot<james.o.hunt> @channel - The PR backlog is over 40 again (https://github.com/pulls?utf8=%E2%9C%93&q=is%3Aopen+is%3Apr+org%3Akata-containers). *Please* could folk review some of these, particularly if you are a member of a repo review team. We welcome all review feedback so if you haven't done it before, take a look at https://github.com/kata-containers/community/blob/master/PR-Review-Guide.md.10:24
kata-irc-bot<zhangwei555> And CI is blocking our PRs, we can't make a safe merge without CI's assurance.10:33
*** jugs has quit IRC10:40
*** jugs has joined #kata-dev10:40
*** gwhaley has quit IRC11:00
kata-irc-bot<niteshkonkar007> @zhangwei555: So I changed the config toml file to not use 9pfs  + set docker graph driver to devicemapper. I could see that rootfs has been passed as a block device. But I still see 9p in use in `ps -aux | grep qemu` and can also see files like hosts, hostname, resolv.conf being passed as 9pfs.11:00
kata-irc-bot<zhangwei555> Yes, currently 9pfs is still in use for "volume", and hosts, hostname and resolv.conf is passed by docker by default11:02
kata-irc-bot<zhangwei555> So you can't disable 9pfs currently in docker's use case11:02
*** jugs has quit IRC11:04
*** jugs has joined #kata-dev11:05
*** cdent has joined #kata-dev11:20
*** dlw1 has joined #kata-dev11:32
*** dlw has quit IRC11:34
*** dlw1 is now known as dlw11:34
*** devimc has joined #kata-dev11:53
*** gwhaley has joined #kata-dev12:03
*** fuentess has joined #kata-dev12:22
*** cdent has quit IRC12:29
*** dlw has quit IRC12:43
*** lamego has joined #kata-dev12:51
*** justJanne has quit IRC12:54
kata-irc-bot<mnaser> @salvador.fuentes jobs don't run under user 'jenkins'12:58
kata-irc-bot<mnaser> they actually run under the user that the os uses12:58
kata-irc-bot<mnaser> "centos" for centos, "fedora" for fedora, "ubuntu" for ubuntu12:58
kata-irc-bot<mnaser> maybe we need to change the init script to create a jenkins user and copy the ssh keys over to it12:58
*** justJanne has joined #kata-dev13:00
kata-irc-bot<salvador.fuentes> @mnaser, so later on, the whole CI also uses that users for running everything?13:01
kata-irc-bot<mnaser> @salvador.fuentes correct13:01
kata-irc-bot<mnaser> that's why i was using `${USER}`13:01
kata-irc-bot<mnaser> @salvador.fuentes is it the jobs for centos that are failing or all of them?13:02
kata-irc-bot<salvador.fuentes> hmm, then I am not sure why it is failing, it should be transparent to the CI13:02
kata-irc-bot<salvador.fuentes> it is actually failing on all distros13:02
kata-irc-bot<salvador.fuentes> because we need the user (on a unit test) that runs the CI to use docker without sudo13:03
kata-irc-bot<salvador.fuentes> I dont think we have hardcoded the jenkins user somewhere....13:03
kata-irc-bot<mnaser> i did do that13:04
kata-irc-bot<mnaser> as part of the init it adds that user to the jenkins group13:04
kata-irc-bot<mnaser> i was using `${USER}` but maybe that isnt working13:04
kata-irc-bot<mnaser> let me hardcode it13:05
kata-irc-bot<mnaser> fyi it is here http://jenkins.katacontainers.io/configfiles/13:05
kata-irc-bot<salvador.fuentes> yes, I actually modified them to also add jenkins user, but as you mention, it does not make sense to do that as we dont have a jenkins user13:06
kata-irc-bot<mnaser> @salvador.fuentes just updated it13:06
kata-irc-bot<mnaser> let me know what you think13:06
kata-irc-bot<salvador.fuentes> taking a look13:06
kata-irc-bot<salvador.fuentes> looks good, lets give it another go to the jobs13:07
*** eernst has joined #kata-dev13:09
*** zerocoolback has joined #kata-dev13:17
kata-irc-bot<eric.ernst> @niteshkonkar007 @zhangwei555 - we were investigating sending these files over gRPC to the agent instead of bind mounting at one point (in case we wanted to completely remove 9p).  It'd be a bit of work, and you'd need to monitor the files for changes on the host, since they aren't necessarily static.13:29
*** eernst has quit IRC13:29
*** eernst has joined #kata-dev13:30
*** eernst has quit IRC13:34
kata-irc-bot<zhangwei555> @eric.ernst This is a great idea, I like it.  What’s the scenario of modifying network files while container is running? Swarm use case?13:43
kata-irc-bot<salvador.fuentes> @mnaser your changes fixed the issue, thanks, @zhangwei555 @graham.whaley @james.o.hunt the CI should now be ok, let me know if you find something else that blocks you14:23
kata-irc-bot<zhangwei555> Thank you! @salvador.fuentes @mnaser @graham.whaley @james.o.hunt14:28
gwhaleyfingers crossed - let's hope we have a stable CI again now :-)14:30
*** sameo has quit IRC14:50
*** annabelleB has joined #kata-dev15:16
*** eernst has joined #kata-dev15:34
*** annabelleB has quit IRC15:45
*** lamego1 has joined #kata-dev15:53
*** lamego has quit IRC15:56
*** annabelleB has joined #kata-dev15:57
*** sameo has joined #kata-dev16:07
*** zerocoolback has quit IRC16:26
*** psuriset__ has quit IRC16:27
*** lamego has joined #kata-dev16:44
*** lamego1 has quit IRC16:47
*** jodh has quit IRC17:05
kata-irc-bot<mnaser> yay awesome re: ci17:16
*** gwhaley has quit IRC17:22
kata-irc-bot<salvador.fuentes> Hi @mnaser, I am debugging an issue that I am seeing a lot in the ubuntu 17.10 VMs. https://github.com/kata-containers/tests/issues/41817:25
kata-irc-bot<salvador.fuentes> is there a way you can provide me with a 17.10 VM similar to the ones that we use for the CI ?17:26
kata-irc-bot<salvador.fuentes> Tried to reproduce locally, but didnt have any luck17:26
kata-irc-bot<mnaser> @salvador.fuentes public key?17:26
kata-irc-bot<salvador.fuentes> @mnaser: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDA0GRn2YZWsyAfD001DPlvS9sqc2UAS629LFtHtYhVQwYTw4gMzcK+YXcd5uva5Bhiwnb1lOW6o1lLVDESi8T3AUUwzutK4LjWUJjRvop4L2Iquo7iV5HSvKuVysy+tXyzQENeelRUyb3bZKTGes+dGhiGd3AW/tOra1it1BOZEsc9OZImIVqkZSkpboU8ncDSA8rbE+C30bSgnCw9FnNYeC2TFxcXc/L43n9Q5cN2RcqihM1wzaVCTu9xF6f8r9c7LNPvLoDTL9PWHITT8hu8XppMgyPbL8jsuU+0wZ2F4WGIQ65pOxIsW53gI2J8c4jXMqzVD88bS4CNO6ry4D6L fuentess@fuentess-mobl1.amr.corp.intel.com17:26
kata-irc-bot<salvador.fuentes> thanks17:26
kata-irc-bot<mnaser> @salvador.fuentes ubuntu@162.253.55.17017:29
kata-irc-bot<salvador.fuentes> thank you very much, will let you know when you can destroy it17:29
*** annabelleB has quit IRC17:50
*** sameo has quit IRC18:02
*** annabelleB has joined #kata-dev18:31
*** annabelleB has quit IRC18:58
*** eernst has quit IRC19:09
*** eernst has joined #kata-dev19:11
*** davidgiluk has quit IRC19:14
*** eernst has quit IRC19:16
*** eernst has joined #kata-dev19:16
*** eernst has quit IRC19:45
*** eernst has joined #kata-dev19:54
*** eernst has quit IRC19:55
*** eernst has joined #kata-dev19:55
kata-irc-bot<salvador.fuentes> @mnaser, the VM got frozen, cannot access it anymore. Maybe this is what is happening on the CI jobs.19:58
kata-irc-bot<mnaser> @salvador.fuentes let me look at the console log19:59
kata-irc-bot<mnaser> maybe kernel panic19:59
kata-irc-bot<salvador.fuentes> thanks19:59
*** annabelleB has joined #kata-dev20:01
*** annabelleB has quit IRC20:04
*** annabelleB has joined #kata-dev20:05
kata-irc-bot<mnaser> @salvador.fuentes http://paste.openstack.org/show/723506/20:26
kata-irc-bot<salvador.fuentes> ups, kernel panic :S20:29
kata-irc-bot<mnaser> @salvador.fuentes is fedora working ok?20:30
kata-irc-bot<salvador.fuentes> yes, fedora is pretty stable20:31
kata-irc-bot<salvador.fuentes> the only one I see unstable is ubuntu 17.1020:31
kata-irc-bot<mnaser> i wonder if its just a kernel issue20:35
kata-irc-bot<salvador.fuentes> maybe, I think I can try updating the VM and see if it happens again20:38
kata-irc-bot<mnaser> the image should be pretty new but would you like me to rebuild the vm, and then you can apt-get dist-upgrade && reboot ?20:42
kata-irc-bot<salvador.fuentes> yes, please20:44
*** eernst has quit IRC20:45
kata-irc-bot<mnaser> https://git.kernel.org/pub/scm/virt/kvm/kvm.git/commit/?id=8eb3f87d903168bdbd1222776a6b1e281f50513e20:47
kata-irc-bot<mnaser> looks like that might be a cause but we'll see20:47
*** eernst has joined #kata-dev20:47
*** eernst has quit IRC20:47
*** eernst has joined #kata-dev20:47
kata-irc-bot<mnaser> @salvador.fuentes rebuilt, please let me know if updating lands you a newer kernel...20:50
*** devimc has quit IRC20:52
kata-irc-bot<salvador.fuentes> thanks, but as you said, there is no new kernel available20:59
*** eernst has quit IRC21:00
*** eernst has joined #kata-dev21:00
*** eernst has quit IRC21:02
kata-irc-bot<salvador.fuentes> I am comparing the kernel version that the azure machines provide, but it is the same. Thought there might be a difference, since I couldn't reproduce the issue there21:04
*** annabelleB has quit IRC21:04
*** eernst has joined #kata-dev21:06
*** eernst has quit IRC21:10
*** annabelleB has joined #kata-dev21:11
*** eernst has joined #kata-dev21:23
*** eernst has quit IRC21:27
*** eernst has joined #kata-dev21:31
*** eernst has quit IRC21:35
*** eernst has joined #kata-dev21:37
*** annabelleB has quit IRC21:40
*** eernst has quit IRC21:42
*** eernst has joined #kata-dev21:43
*** eernst has quit IRC21:48
kata-irc-bot<salvador.fuentes> @mnaser, you can delete the VM, it is already hanged21:48
*** fuentess has quit IRC21:48
*** eernst has joined #kata-dev21:49
*** eernst has quit IRC21:51
*** eernst has joined #kata-dev21:53
*** eernst has quit IRC21:55
*** eernst has joined #kata-dev21:55
kata-irc-bot<mnaser> aw damn22:17
kata-irc-bot<mnaser> that's annoying22:17
kata-irc-bot<mnaser> and it didn't hang running on azure?22:17
kata-irc-bot<mnaser> @salvador.fuentes i have a redhat kvm person who i can refer this too.. is it possible for you to make this down to small reproducer?22:18
*** annabelleB has joined #kata-dev22:41
*** dklyle has quit IRC22:56
*** dklyle has joined #kata-dev22:57
*** lamego has quit IRC23:16
kata-irc-bot<salvador.fuentes> @mnaser I think I can try to make a script that installs kata-containers and launch containers using docker, I think we could reproduce it23:28
kata-irc-bot<salvador.fuentes> I'll make the script and let you know when I have it. will ask you again for another machine and see if that reproduces the issue23:29
*** zerocoolback has joined #kata-dev23:35
*** zerocoolback has quit IRC23:38
kata-irc-bot<mnaser> @salvador.fuentes thanks. That would be a win for everyone. A very simple small reproducer as t seems to happen all the time23:38

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!