<div class="__aliyun_email_body_block"><div  style="clear:both;"><span  style="font-family:Tahoma,Arial,STHeiti,SimSun;font-size:14.0px;color:#000000;">Thanks <span  style="color:#000000;font-family:Tahoma,Arial;font-size:14.0px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;text-align:start;text-indent:.0px;text-transform:none;widows:2;background-color:#ffffff;text-decoration-style:initial;text-decoration-color:initial;float:none;display:inline;">Christophe for raising the issues</span></span></div><div  style="clear:both;"><span  style="font-family:Tahoma,Arial,STHeiti,SimSun;font-size:14.0px;color:#000000;"><span  style="color:#000000;font-family:Tahoma,Arial;font-size:14.0px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;text-align:start;text-indent:.0px;text-transform:none;widows:2;background-color:#ffffff;text-decoration-style:initial;text-decoration-color:initial;float:none;display:inline;"><br ></span></span></div><div  style="clear:both;"><span  style="font-family:Tahoma,Arial,STHeiti,SimSun;font-size:14.0px;color:#000000;"><span  style="color:#000000;font-family:Tahoma,Arial;font-size:14.0px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;text-align:start;text-indent:.0px;text-transform:none;widows:2;background-color:#ffffff;text-decoration-style:initial;text-decoration-color:initial;float:none;display:inline;">Will look into the packaging status and filed issues.</span></span></div><div  style="clear:both;"><span  style="font-family:Tahoma,Arial,STHeiti,SimSun;font-size:14.0px;color:#000000;"><span  style="color:#000000;font-family:Tahoma,Arial;font-size:14.0px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;text-align:start;text-indent:.0px;text-transform:none;widows:2;background-color:#ffffff;text-decoration-style:initial;text-decoration-color:initial;float:none;display:inline;"><br ></span></span></div><div  style="clear:both;"><span  style="font-family:Tahoma,Arial,STHeiti,SimSun;font-size:14.0px;color:#000000;"><span  style="color:#000000;font-family:Tahoma,Arial;font-size:14.0px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;text-align:start;text-indent:.0px;text-transform:none;widows:2;background-color:#ffffff;text-decoration-style:initial;text-decoration-color:initial;float:none;display:inline;">Cheers</span></span></div><div  style="clear:both;"><span  style="font-family:Tahoma,Arial,STHeiti,SimSun;font-size:14.0px;color:#000000;"><span  style="color:#000000;font-family:Tahoma,Arial;font-size:14.0px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;text-align:start;text-indent:.0px;text-transform:none;widows:2;background-color:#ffffff;text-decoration-style:initial;text-decoration-color:initial;float:none;display:inline;"><br ></span></span></div><blockquote  style="margin-right:.0px;margin-top:.0px;margin-bottom:.0px;"><div  style="clear:both;"><span  style="font-family:Tahoma,Arial,STHeiti,SimSun;font-size:14.0px;color:#000000;">------------------------------------------------------------------</span></div><div  style="clear:both;"><span  style="font-family:Tahoma,Arial,STHeiti,SimSun;font-size:14.0px;color:#000000;">From:Christophe de Dinechin <dinechin@redhat.com></span></div><div  style="clear:both;"><span  style="font-family:Tahoma,Arial,STHeiti,SimSun;font-size:14.0px;color:#000000;">Send Time:2019年11月21日(星期四) 00:24</span></div><div  style="clear:both;"><span  style="font-family:Tahoma,Arial,STHeiti,SimSun;font-size:14.0px;color:#000000;">To:kata-dev <kata-dev@lists.katacontainers.io></span></div><div  style="clear:both;"><span  style="font-family:Tahoma,Arial,STHeiti,SimSun;font-size:14.0px;color:#000000;">Subject:[kata-dev] Fedora packaging for Kata Containers - Release 1.9.0</span></div><div  style="clear:both;"><span  style="font-family:Tahoma,Arial,STHeiti,SimSun;font-size:14.0px;color:#000000;"><br ></span></div>Hello,<br ><br ><br >TL;DR: Status of Kata Containers packaging in Fedora<br ><br ><br >I’ve been working on improving packaging for Kata Containers in Fedora.<br ><br >Presently, there are 5 different packages:<br ><br >https://src.fedoraproject.org/rpms/kata-runtime<br >https://src.fedoraproject.org/rpms/kata-osbuilder (which includes the agent)<br >https://src.fedoraproject.org/rpms/kata-proxy<br >https://src.fedoraproject.org/rpms/kata-shim<br >https://src.fedoraproject.org/rpms/kata-ksm-throttler<br ><br >You can click on the “Build status” icon to get access to the various rpms.<br ><br >If you have time, I would appreciate your help to:<br >1/ Review the packaging and build procedure<br >2/ Install and test the packages<br ><br >The intent of the osbuilder is to use the host kernel by default,<br >although there is some ongoing work to use a kata-optimized kernel.<br >Notably, we have been discussing a kernel with virtualization<br >drivers configured, and booting it uncompressed so that qemu<br >can simply mmap it.<br ><br >KNOWN ISSUES:<br ><br >Fedora 31 only:<br >Building go packages on Fedora relies on “go-rpm-macros”, which is a<br >new package in Fedora 31. While I have private builds that do not use<br >these macros, for the moment, the focus is Fedora 31 only.<br ><br >Packaging errors:<br >There are a number of errors and warnings reported by rpmlint and<br >rpmgrill. Nothing that should prevent anybody from using / testing<br >the packages AFAICT. FYI:<br ><br >https://bugzilla.redhat.com/show_bug.cgi?id=1773629<br >https://bugzilla.redhat.com/show_bug.cgi?id=1773635<br >https://bugzilla.redhat.com/show_bug.cgi?id=1773638<br >https://bugzilla.redhat.com/show_bug.cgi?id=1773639<br ><br >As far as I can tell, all this is “Fedora internal cuisine”, so unless you<br >are familiar with Fedora packaging, there is probably no need to<br >look into these ;-)<br ><br >cgroupsv2 errors:<br >If you run on a recent kernel (post 5.3.x), you will run into<br >https://github.com/kata-containers/runtime/issues/2107.<br >Workaround 1: downgrade to kernel 5.2<br >Workaround 2:<br >   $ sudo mkdir -p /run/cgroupv1;<br >   $ sudo mount -t cgroup -o cpu,cpuacct cgroup /run/cgroupv1/<br ><br ><br >WISH LIST (items that would matter for Fedora):<br ><br >IPv6 support:<br >This is tracked at https://github.com/kata-containers/runtime/issues/147.<br ><br >Security-related concerns:<br >- Avoid running qemu as root<br >- libvirt integration (would address the above, I opened<br >https://github.com/kata-containers/runtime/issues/2227 to discuss this)<br >- cgroupv2 (https://github.com/kata-containers/runtime/issues/2107)<br >- SElinux (https://github.com/kata-containers/runtime/issues/784)<br ><br ><br >Thank you in advance for your help,<br >Christophe<br ><br ><br >_______________________________________________<br >kata-dev mailing list<br >kata-dev@lists.katacontainers.io<br >http://lists.katacontainers.io/cgi-bin/mailman/listinfo/kata-dev<br ></blockquote><div ><br ></div></div>