Wednesday, 2019-08-28

*** kata-irc-bot5 has joined #kata-general00:03
*** kata-irc-bot has quit IRC00:04
*** lpetrut has joined #kata-general06:00
*** sgarzare has joined #kata-general06:40
*** gwhaley has joined #kata-general08:04
kata-irc-bot5<alsotoes> Thanks @cesar.lara @jose.carlos.venegas.m for attending the (first) Kata Meetup yesterday in Mexico City.... sorry about the massive list of questions :) ... and we really apreciate the stickers @denise thanks for the community support!!!!12:49
kata-irc-bot5<michael.zhao> Hello, I encountered an error when I tried to run a container with kata: docker run -it --runtime kata-runtime --privileged ubuntu bash14:06
kata-irc-bot5<michael.zhao> docker: Error response from daemon: OCI runtime create failed: rpc error: code = Internal desc = Could not add route dest()/gw(172.17.0.1)/dev(eth0): network is unreachable: unknown.14:07
kata-irc-bot5<michael.zhao> Anybody know what was wrong?14:07
kata-irc-bot5<graham.whaley> @michael.zhao - see https://github.com/kata-containers/documentation/blob/master/Limitations.md#docker-run---privileged - kata does not (fully at leastg) support `--priv` - I'm going to guess that is related14:16
kata-irc-bot5<michael.zhao> @graham.whaley, I tried without "--privileged", it was still the same14:27
kata-irc-bot5<graham.whaley> thx @michael.zhao - that at least rules `--priv` out ;) I did a search on the kata github, and turned up this: https://github.com/kata-containers/runtime/issues/736#issuecomment-421998526, which then links off to a maybe related issue - which is around IPV6 - would you happen to be using/have IPV6 enabled?14:31
kata-irc-bot5<graham.whaley> cc @eric.ernst @archana.m.shinde14:31
kata-irc-bot5<michael.zhao> Thanks, but it doesn't look the same with my case. I am not using IPV6. And the detailed reason of issue 736 was "Could not add route dest(10.244.0.0/24)/gw()/dev(eth1): file exists". But in my case it was "network is unreachable".14:41
kata-irc-bot5<michael.zhao> Does it mean the guest (Qemu VM) was not configured with a network?14:43
*** lpetrut has quit IRC14:52
*** igordc has joined #kata-general14:57
*** lpetrut has joined #kata-general15:15
*** sgarzare has quit IRC15:38
kata-irc-bot5<jose.carlos.venegas.m> @michael.zhao so ` docker run -it --runtime kata-runtime  ubuntu bash` fails due to a network error, is this a vanilla/fresh docker install or you are using  a custom docker network configuration ?15:43
kata-irc-bot5<niteshkonkar007> @jose.carlos.venegas.m: I have also faced this issue. When I debugged I realized there was no network in the VM when add network interface grpc request was taking place. Hence could not add route error.  I was on a kubeadm+crio+runtimeclass cluster with weave/flannel as CNI. I moved to calico and the issue was not seen.16:16
kata-irc-bot5<jose.carlos.venegas.m> @niteshkonkar007 yeah, I faced more network issues with some CNI configs. I am not sure if we have a list of "safe" cni pluings to use and documentation about limintations on some  cases where the runtime is no able to replicate the network in the guest16:20
kata-irc-bot5<jose.carlos.venegas.m> ^ @archana.m.shinde  @manohar.r.castelino16:22
kata-irc-bot5<jose.carlos.venegas.m> @michael.zhao could you open an issue to see if we are facing an issue like similar to something like that16:23
kata-irc-bot5<jose.carlos.venegas.m> would be nice to see the command you use, docker version and probable docker logs16:24
*** gwhaley has quit IRC17:00
*** igordc has quit IRC18:23
*** lpetrut has quit IRC19:02

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!