[kata-dev] Regarding, Kata 2.0.0, kata-runtime

Hunt, James O james.o.hunt at intel.com
Mon Jan 4 15:36:11 UTC 2021


Hi Sandeep,

Correct - Docker doesn't support shimv2 yet. However, getting Kata 2.x running with containerd is very simple and the CLI for containerd is reasonably similar to docker:

# Kata 1.x

$ docker run --runtime=kata-runtime ...

# Kata 2.x

$ ctr run --runtime io.containerd.kata.v2 ...


See [1] for further details.

Cheers,

James

[1] - https://github.com/kata-containers/kata-containers/blob/2.0-dev/docs/install/container-manager/containerd/containerd-install.md#test-the-installation
---
https://katacontainers.io/ | https://github.com/kata-containers
Open Source Technology Center
Intel Corporation (UK) Ltd. - Co. Reg. #1134945 - Pipers Way, Swindon SN3 1RJ.

________________________________________
From: Gupta, Sandeep <Sandeep.Gupta at amd.com>
Sent: Monday, 4 January 2021 11:09
To: Fabiano FidĂȘncio; Gupta, Sandeep
Cc: kata-dev at lists.katacontainers.io
Subject: Re: [kata-dev] Regarding, Kata 2.0.0, kata-runtime

[AMD Official Use Only - Internal Distribution Only]

Thank you Fabiano,
Will try the deployed version first,
One more to check please - In my understanding - Docker doesn't yet support the containerd shimv2 architecture directly, Kata 2.0.0 won't work with Docker ?
Is this correct ?
Any workarounds.

--Best Regards
--Sandeep


-----Original Message-----
From: Fabiano FidĂȘncio <fidencio at redhat.com>
Sent: Sunday, January 3, 2021 11:38 PM
To: Gupta, Sandeep <Sandeep.Gupta at amd.com>
Cc: kata-dev at lists.katacontainers.io
Subject: Re: [kata-dev] Regarding, Kata 2.0.0, kata-runtime

[CAUTION: External Email]

Sandeep,

[...]

> Trying version-1 syntax:          (for /usr/local/bin/containerd -config /etc/containerd/config.toml),
>
> # cat /etc/containerd/config.toml
> [plugins.cri.containerd]
>       no_pivot = false
>
>     [plugins.cri.containerd.runtimes]
>       [plugins.cri.containerd.runtimes.runc]
>          runtime_type = "io.containerd.runc.v1"
>
>          [plugins.cri.containerd.runtimes.runc.options]
>            NoPivotRoot = false
>            NoNewKeyring = false
>            ShimCgroup = ""
>            IoUid = 0
>            IoGid = 0
>            BinaryName = "runc"
>            Root = ""
>            CriuPath = ""
>            SystemdCgroup = false
>
>       [plugins.cri.containerd.runtimes.kata]
>          runtime_type = "io.containerd.kata.v2"
>           [plugins.cri.containerd.runtimes.kata.options]
>            ConfigPath = "/etc/kata-containers/configuration.toml"
>
>       [plugins.cri.containerd.runtimes.katacli]
>          runtime_type = "io.containerd.runc.v1"
>          [plugins.cri.containerd.runtimes.katacli.options]
>            NoPivotRoot = false
>            NoNewKeyring = false
>            ShimCgroup = ""
>            IoUid = 0
>            IoGid = 0
>            BinaryName = "/usr/local/bin/kata-runtime"
>            Root = ""
>            CriuPath = ""
>            SystemdCgroup = false
>

[...]

> /# ctr run --runtime io.containerd.run.kata.v2 -t --rm
> docker.io/library/busybox:latest sh
>
> ctr: Failed to check if grpc server is working: unexpected EOF:
> unknown
>
>
>
> I can discuss this Issue in, Kata AC call in 2021 on January 5th.

We can, but I think it may be easier to debug this via e-mail or Slack.
So, I'd like to ask you a few questions that will help me (and hopefully others) to understand where the error is coming from.
* When you're using 2.x, you're only replacing the runtime binary, but also the image and the agent inside it, right?
  - The reason I'm asking is because 2.x runtime doesn't speak the same language as the 1.x agent.
* Is your agent built using musl or gnu libc?

If you want to give it a quick try just to ensure kata 2.0 works for you before you start hacking the code, I'd suggest using
https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fkata-containers%2Fpackaging%2Ftree%2Fmaster%2Fkata-deploy&data=04%7C01%7Csandeep.gupta%40amd.com%7C77df3c891c8a426c4e6208d8b083a31d%7C3dd8961fe4884e608e11a82d994e183d%7C0%7C0%7C637453426728389564%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=FhnMOeGRaH0sFtZ%2BhLwvfqm%2BPY2jUiVt6cdSHirE0Ro%3D&reserved=0

I hope that helps!

Best Regards,
--
Fabiano FidĂȘncio

_______________________________________________
kata-dev mailing list
kata-dev at lists.katacontainers.io
http://lists.katacontainers.io/cgi-bin/mailman/listinfo/kata-dev
---------------------------------------------------------------------
Intel Corporation (UK) Limited
Registered No. 1134945 (England)
Registered Office: Pipers Way, Swindon SN3 1RJ
VAT No: 860 2173 47

This e-mail and any attachments may contain confidential material for
the sole use of the intended recipient(s). Any review or distribution
by others is strictly prohibited. If you are not the intended
recipient, please contact the sender and delete all copies.




More information about the kata-dev mailing list