| kata-irc-bot | <anastassios.nanos> hi all (@fidencio or whoever else is familiar with the test process), is there a test workflow for kata-fc with jailer support? | 13:20 |
|---|---|---|
| kata-irc-bot | <fidencio> hey! I think so, from what I'm reading in the Ci code how firecracker is installed | 13:24 |
| kata-irc-bot | <fidencio> https://github.com/kata-containers/tests/blob/3264d0b37eed3eb82ecbd77075e074c270b347f7/.ci/install_firecracker.sh#L30-L36 | 13:24 |
| kata-irc-bot | <fidencio> Then the test that runs there is https://github.com/kata-containers/ci/blob/master/jenkins/jobs/kata-containers-2.0-firecracker-ubuntu-PR/config.xml | 13:25 |
| kata-irc-bot | <fidencio> I think either @gabriela.cervantes.te or @salvador.fuentes may have more info about the firecracker tests we're running. Anyways, do you see some test case that we're missing? | 13:26 |
| kata-irc-bot | <anastassios.nanos> wondering if something slipped during the fc upgrade v0.21->v0.23 | 13:26 |
| kata-irc-bot | <anastassios.nanos> there's an issue where when using k8s with kata-fc and the jailer, the pod never terminates, but before digging in deeper I thought I should ask ;) | 13:28 |
| kata-irc-bot | <fidencio> Hmm. The CIs have been green, but that may be a really good catch | 13:29 |
| kata-irc-bot | <fidencio> http://jenkins.katacontainers.io/job/kata-containers-2.0-firecracker-ubuntu-PR/ | 13:29 |
| kata-irc-bot | <fidencio> Here's a full log of a green CI: http://jenkins.katacontainers.io/job/kata-containers-2.0-firecracker-ubuntu-PR/903/consoleFull | 13:30 |
| kata-irc-bot | <fidencio> Hmmm. | 13:30 |
| kata-irc-bot | <fidencio> ```14:16:39 # Path for the jailer specific to firecracker 14:16:39 # If the jailer path is not set kata will launch firecracker 14:16:39 # without a jail. If the jailer is set firecracker will be 14:16:39 # launched in a jailed enviornment created by the jailer 14:16:39 # This is disabled by default as additional setup is required 14:16:39 # for this feature today. 14:16:39 #jailer_path = "/usr/bin/jailer"``` | 13:30 |
| kata-irc-bot | <fidencio> Do you see the jailer_path commented there? | 13:31 |
| kata-irc-bot | <anastassios.nanos> yeap | 13:31 |
| kata-irc-bot | <fidencio> That's the moment when one realise his convictions are wrong | 13:31 |
| kata-irc-bot | <fidencio> It clearly seems that we should be running two tests with firecracker, with & without the jailer, and we're missing the latter | 13:32 |
| kata-irc-bot | <anastassios.nanos> heh, OK, I'll try to test the jailer setup, see what's going on there and then we can add that to the test | 13:33 |
| kata-irc-bot | <fidencio> Coming back to your question .... > is there a test workflow for kata-fc with jailer support? No, we don't have, and we should. :slightly_smiling_face: | 13:34 |
| kata-irc-bot | <fidencio> Thanks, let us know if we can help with something | 13:34 |
| kata-irc-bot | <fidencio> And I can guide you through our CIs (I've been guided before, just passing along the courtesy) in order to have a test for that | 13:35 |
| kata-irc-bot | <salvador.fuentes> seems that you already figured out. you're right, we are installing jailer on CI, but not modifying the default kata configuration, which doesn't enable jailer | 13:55 |
| *** ricolin_ is now known as ricolin | 18:02 | |
| kata-irc-bot | <fidencio> @chen.bo, around? Finally we have a green CI for stable-2.1. Would you mind rebasing your cloud-hypervisor bumps to the latest stable-2.1 branch and updating your PRs? | 19:45 |
| kata-irc-bot | <fidencio> And a huge thanks to those who helped this long fight. :slightly_smiling_face: | 19:54 |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!