Wednesday, 2021-11-03

kata-irc-bot<eric.ernst> I’m working through some refactoring for sandbox sizing, and in the process taking notes on a few things that I think are technical debt :thread: below…01:02
kata-irc-bot<eric.ernst> @bergwolf @liubin0329 - I was looking at https://github.com/kata-containers/kata-containers/tree/main/src/runtime/pkg/katautils <-- since we just have shim-v2, it seems this pkg is unecessary? In particular, I was questioning katautils.CreateSandbox being here instead of shim-v2?01:03
kata-irc-bot<eric.ernst> i.e.: ```The katautils package contains useful functions that are shared by various parts of the codebase, including the runtime and the container v2 shim.```01:03
kata-irc-bot<eric.ernst> just one more level if abstraction between shim, and the actual handling (ie, shimv2, katautils, vc.implementation, vc.api, vc sandbox ….)01:04
kata-irc-bot<dgibson> anyone know where to find AC meeting recordings?  the last link I can see in the etherpad is from september01:33
kata-irc-bot<bergwolf> Totally agreed. Maybe we can just move its contents to `src/runtime/pkg/utils` ?02:03
kata-irc-bot<bergwolf> btw, @liubin0329 hurt his foot and is less responsive recently.02:03
kata-irc-bot<liubin0329> Moving katautils to containerd-shim-v2 will make codes simple. The good news is virtcontainers only use katatrace of katautils, and we can simply move katatrace to a separated package. And sandbox creation related can be moved to containerd-shim-v2 package. Others used by pkg/cmd can be merged into pkg/utils.02:59
kata-irc-bot<eric.ernst> I think there are also utils pkg under vc. Some of that could probably move to the top level utils as well.03:12
kata-irc-bot<eric.ernst> Does Bin type with his feet normally? :)03:12
kata-irc-bot<eric.ernst> just kidding — sorry to hear Bin — I hope it is getting better.03:12
kata-irc-bot<liubin0329> Thanks, gradually recovering.03:15
kata-irc-bot<fidencio> @dgibson, it usually takes some time for Sunny to update the links there.  Thanks for the reminder06:51
kata-irc-bot<fidencio> In any case, summing up, your demo was not presented as I think @aadam had a conflicting meeting.  And for the kata-containers + podman discussion, @bergwolf suggested, we all agreed, and it also seems aligned with your suggestion, that *if* we bring it back, we do it via a wrapper, instead of bringing back the old code.06:54
kata-irc-bot<fidencio> Last but not least, the discussion starts around 16 minutes in, as the first 15 minutes we were just chatting while waiting for @aadam and @christophe to join.06:55
kata-irc-bot<fidencio> (you know, DST change in Europe usually causes chaos for 1 or 2 weeks, till US also changes)06:56
kata-irc-bot<christophe> @dgibson You will be happy to learn that overall, the arch committee largely prefers the wrapper approach :slightly_smiling_face:10:58
kata-irc-bot<christophe> I'd like to start with `runk` as a basis, in order to prepare for the dual control-plane scenario we will need in the future for confidential containers10:58
kata-irc-bot<bergwolf> I'm confused @christophe. Are you trying to add OCI cli to test vm based container or namespace based container? It seems that yesterday we mostly thought you were targeting the former one.12:51
kata-irc-bot<fgiudici> Hey @fidencio, sorry for the late reply, nothing pending from me, thanks! :pray: Glad to have you back full time :)13:43
kata-irc-bot<christophe> Whether it's a code fork or a runtime dispatch, I don't know yet, I have not really looked in depth at the code yet.13:50
kata-irc-bot<christophe> vm-based, but the idea is to leverage the OCI-half of runk, and dispatch the other side to either target the agent directly (current runk), target the shim v2 (podman compatibility) or target the agent over a secure channel (future dual-control-plane model for confidential containers)13:51
kata-irc-bot<christophe> (sorry, the above two replies are out of order, network gone, am on unreliable 4G ATM)13:52
kata-irc-bot<bergwolf> Ah, now I see it. And it makes sense to me. Thanks for the explanation!14:02
kata-irc-bot<sunny> @dgibson thanks for flagging! The recordings are in: https://etherpad.opendev.org/p/Kata_Containers_2021_Architecture_Committee_Mtgs\21:35

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!