<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Hi Stefano</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
> <font size="2"><span style="font-size:11pt">I tried it, but unfortunately, it doesn't work with the vsock modules<br>
> with netns support.<br>
</span></font></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
that's weird, because with these patches whole process (including threads) is moved to the net namespace</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Q. Do you know if this new implementation of vsock/netns supports persistent namespaces?<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
> <font size="2"><span style="font-size:11pt">With the old modules (vsock without netns) it works but looking at the<br>
> netns I'm still seeing only kata-shim and qemu:</span></font></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<font size="2"><span style="font-size:11pt"><br>
</span></font></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<font size="2"><span style="font-size:11pt">you don't see kata-runtime, because it's not running, it spawns to kata-shim and qemu
</span></font>and finish its execution</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
> <font size="2"><span style="font-size:11pt">Let me know if I can do other tests or if you want a VM with the vsock<br>
> modules with netns support.</span></font></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<font size="2"><span style="font-size:11pt"><br>
</span></font></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<font size="2"><span style="font-size:11pt">yes, please<br>
</span></font></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<font size="2"><span style="font-size:11pt"><br>
</span></font></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<font size="2"><span style="font-size:11pt">-</span></font></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<font size="2"><span style="font-size:11pt">Julio<br>
</span></font></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font style="font-size:11pt" face="Calibri, sans-serif" color="#000000"><b>From:</b> Stefano Garzarella <sgarzare@redhat.com><br>
<b>Sent:</b> Thursday, December 19, 2019 4:49 AM<br>
<b>To:</b> Montes, Julio <julio.montes@intel.com><br>
<b>Cc:</b> Boeuf, Sebastien <sebastien.boeuf@intel.com>; kata-dev@lists.katacontainers.io <kata-dev@lists.katacontainers.io>; Peng Tao <tao.peng@linux.alibaba.com><br>
<b>Subject:</b> Re: [kata-dev] vsock & network namespaces in Kata</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt">
<div class="PlainText">Hi Julio,<br>
<br>
On Tue, Dec 17, 2019 at 8:09 PM Montes, Julio <julio.montes@intel.com> wrote:<br>
><br>
> Hi Stefano<br>
><br>
> I think we'll need a more complex solution [1] (unless someone else has a better patch).<br>
><br>
> Here [1] you can find a version of kata-runtime that supports all namespaces (yes, including mnt namespace!!) unlike upstream kata-runtime<br>
><br>
> Since you want to use it for testing net ns, I just enabled it, but if you need other namespace, just uncomment it out from the list [2]<br>
><br>
> I only tested v1 (no netmom, no vmtemplating) with docker<br>
<br>
Thanks for the patches.<br>
I tried it, but unfortunately, it doesn't work with the vsock modules<br>
with netns support.<br>
<br>
This is the log, I don't know if can be useful: <a href="https://pastebin.com/mG7CfUrV">
https://pastebin.com/mG7CfUrV</a><br>
<br>
<br>
With the old modules (vsock without netns) it works but looking at the<br>
netns I'm still seeing only kata-shim and qemu:<br>
$ sudo ip netns pids cnitest-1939e49f-19af-3b72-625d-01db153a9fa9<br>
1308<br>
1321<br>
$ ps -p 1308 1321<br>
PID TTY STAT TIME COMMAND<br>
1308 ? Sl 0:05 /usr/bin/qemu-vanilla-system-x86_64 -name sandbox-efd90c46d5b8989886<br>
1321 pts/2 Ssl+ 0:00 /usr/libexec/kata-containers/kata-shim -agent vsock://357155431:1024<br>
<br>
This is the log with working kata and vsock modules without netns support:<br>
<a href="https://pastebin.com/cdHiV5ZV">https://pastebin.com/cdHiV5ZV</a><br>
<br>
Let me know if I can do other tests or if you want a VM with the vsock<br>
modules with netns support.<br>
<br>
Thanks,<br>
Stefano<br>
<br>
</div>
</span></font></div>
</body>
</html>