June 2018 - kata-dev - lists.katacontainers.io

Container images for kata deployment - docker ID?
by Ernst, Eric 17 Jun '18

17 Jun '18

Hey ya’ll, I have a PR that I’m finishing testing on @ https://github.com/kata-containers/packaging/pull/65 which will help with deploying kata on k8s, and as a part of it I have a Dockerfile for creating container image with our artifacts for Kata. I think we should have this on Dockerhub, and I wanted to suggest we create an account there, katacontainers. First, is that sane? Second, do we have a general email already that we can use for creating / maintaining these kinds of accounts? -Eric

2 1

Call for volunteers: release and packaging team
by Ernst, Eric 13 Jun '18

13 Jun '18

Kata folk, I want to setup a release and packaging team. It’d be helpful to have a couple of people in each geography to help drive this, and will likely include helping maintain packages for consumption by Canonical/Ubuntu and Redhat/Fedora, as well as the infra/processes around release. Please volunteer yourself or a colleague! Thanks, Eric

3 3

ADP Users Contact List
by Sophie Randell 13 Jun '18

13 Jun '18

Hi, I would like to know if you are interested in acquiring ADP Users Contact List? List Contains: Name, Company's Name, Phone Number, Fax Number, Job Title, Email address, Complete Mailing Address, SIC code, Company revenue, size, Web address etc. All Technology / Companies Partners and Users List, IT decision Makers from Fortune 500 Companies, IT Decision Makers from SME as well. Let me know if you are interested and I will get back to you with the counts and pricing. Regards, Sophie Randell Marketing Executive to opt out, please reply with Leave Out in the Subject Line.

1 0

Call for volunteers: Kata CI / test team
by Ernst, Eric 12 Jun '18

12 Jun '18

Kata folks, I’m excited to have gotten interest for release/packaging. While I have positive momentum, I’ll put out same request with respect to CI / testing. A lot of testing is in place today, though we are scaling to more clouds and more hardware architectures today. Similarly, there’s plenty of work that can be done in the existing CI today to increase test coverage, add more functional tests, and reduce test-time. It’d be helpful to have a couple of people in each geography to help drive this. On the Intel side, I expect Salvador and Gaby to help (located in UTC-5). Please volunteer yourself or a colleague! Thanks, Eric

1 0

osbuilder/rootfs build with docker on native ubuntu host
by Liu, Changcheng 07 Jun '18

07 Jun '18

Hi all, I fail to build rootfs on ubuntu host after following the “rootfs-builder/README.md” guide. Could anyone give me some idea to do further check? Issue: sudo -E ./rootfs-builder/rootfs.sh -r "${PWD}/fedora_rootfs" fedora ~/LINUX/go_repo/osbuilder/rootfs-builder/fedora ~/LINUX/go_repo/osbuilder # # Copyright (c) 2018 Intel Corporation # # SPDX-License-Identifier: Apache-2.0 From fedora:27 RUN dnf -y update && dnf install -y git redhat-release systemd pkgconfig gcc coreutils # This will install the proper golang to build Kata components ADD https://storage.googleapis.com/golang/go1.9.2.linux-amd64.tar.gz /tmp RUN tar -C /usr/ -xzf /tmp/go1.9.2.linux-amd64.tar.gz ENV GOROOT=/usr/go ENV PATH=$PATH:$GOROOT/bin:$GOPATH/bin Dockerfile: /usr/share/man/man5/Dockerfile.5.gz ~/LINUX/go_repo/osbuilder Sending build context to Docker daemon 4.096kB Step 1/6 : From fedora:27 27: Pulling from library/fedora 2176639d844b: Pull complete Digest: sha256:ec588fc80b05e19d3006bf2e8aa325f0a2e2ff1f609b7afb39176ca8e3e13467 Status: Downloaded newer image for fedora:27 ---> 9110ae7f579f Step 2/6 : RUN dnf -y update && dnf install -y git redhat-release systemd pkgconfig gcc coreutils ---> Running in d367d5572325 Error: Failed to synchronize cache for repo 'updates' The command '/bin/sh -c dnf -y update && dnf install -y git redhat-release systemd pkgconfig gcc coreutils' returned a non-zero code: 1 Environment: 1. Host info: lsb_release -a LSB Version: core-9.20160110ubuntu0.2-amd64:core-9.20160110ubuntu0.2-noarch:security-9.20160110ubuntu0.2-amd64:security-9.20160110ubuntu0.2-noarch Distributor ID: Ubuntu Description: Ubuntu 16.04.1 LTS Release: 16.04 Codename: xenial 2. Docker info: sudo -E docker info 2>/dev/null | grep -i 'proxy\|runtime\|version' Server Version: 18.03.1-ce Runtimes: runc Default Runtime: runc containerd version: 773c489c9c1b21a6d78b5c538cd395416ec50f88 runc version: 4fc53a81fb7c994640722ac585fa9ca548971871 init version: 949e6fa Kernel Version: 4.4.0-31-generic HTTP Proxy: http://*********:913/ HTTPS Proxy: https://******:913/ No Proxy: localhost,127.0.0.0/8 sudo docker version Client: Version: 18.03.1-ce API version: 1.37 Go version: go1.9.5 Git commit: 9ee9f40 Built: Thu Apr 26 07:17:20 2018 OS/Arch: linux/amd64 Experimental: false Orchestrator: swarm Server: Engine: Version: 18.03.1-ce API version: 1.37 (minimum version 1.12) Go version: go1.9.5 Git commit: 9ee9f40 Built: Thu Apr 26 07:15:30 2018 OS/Arch: linux/amd64 Experimental: false Regards, Changcheng

3 9

Re: [kata-dev] osbuilder/rootfs build with docker on native ubuntu host
by Liu, Changcheng 07 Jun '18

07 Jun '18

Hi Eric, It seems there's something wrong with DNS. There's one step in creating the centos rootfs: sudo -E docker build --build-arg http_proxy=${http_proxy} --build-arg https_proxy=${https_proxy} -t centos-rootfs-osbuilder rootfs-builder/centos I have to give the proxy address explicitly (e.g. 10.239.0.11:911 instead of abc.xyz.com) or it will fail. Do you know how to check whether this is my server issue or docker-self issue? B.R. Changcheng From: Liu, Changcheng Sent: Thursday, June 7, 2018 12:34 AM To: Ernst, Eric <eric.ernst(a)intel.com>; Hunt, James O <james.o.hunt(a)intel.com> Cc: kata-dev(a)lists.katacontainers.io Subject: RE: [kata-dev] osbuilder/rootfs build with docker on native ubuntu host Hi Eric, I'll give your feedback in the morning (It's a little late in PRC). --Thanks Changcheng From: Ernst, Eric Sent: Wednesday, June 6, 2018 8:59 PM To: Hunt, James O <james.o.hunt(a)intel.com<mailto:james.o.hunt@intel.com>> Cc: Liu, Changcheng <changcheng.liu(a)intel.com<mailto:changcheng.liu@intel.com>>; kata-dev(a)lists.katacontainers.io<mailto:kata-dev@lists.katacontainers.io> Subject: Re: [kata-dev] osbuilder/rootfs build with docker on native ubuntu host Can you see if you can start an Ubuntu container and run apt-get update within the container? It sounds like connectivity to me as well. Docker needs proxy settings separately for inside the container connectivity. Eric On Jun 6, 2018, at 5:32 AM, Hunt, James O <james.o.hunt(a)intel.com<mailto:james.o.hunt@intel.com>> wrote: Hi Changcheng, It looks like it might be a network issue or (possibly?) you happened to run the command when the Fedora repo was being updated (I'm not sure if their repo updates are atomic). Could you try re-running and if that doesn't work, raising an issue with the output of `sudo kata-collect-data.sh` pasted into the github issue? - https://github.com/kata-containers/osbuilder/issues/new Cheers, James 2018-06-06 13:12 GMT+01:00 Liu, Changcheng <changcheng.liu(a)intel.com<mailto:changcheng.liu@intel.com>>: Hi all, I fail to build rootfs on ubuntu host after following the "rootfs-builder/README.md<http://rootfs-builder/README.md>" guide. Could anyone give me some idea to do further check? Issue: sudo -E ./rootfs-builder/rootfs.sh -r "${PWD}/fedora_rootfs" fedora ~/LINUX/go_repo/osbuilder/rootfs-builder/fedora ~/LINUX/go_repo/osbuilder # # Copyright (c) 2018 Intel Corporation # # SPDX-License-Identifier: Apache-2.0 >From fedora:27 RUN dnf -y update && dnf install -y git redhat-release systemd pkgconfig gcc coreutils # This will install the proper golang to build Kata components ADD https://storage.googleapis.com/golang/go1.9.2.linux-amd64.tar.gz /tmp RUN tar -C /usr/ -xzf /tmp/go1.9.2.linux-amd64.tar.gz ENV GOROOT=/usr/go ENV PATH=$PATH:$GOROOT/bin:$GOPATH/bin Dockerfile: /usr/share/man/man5/Dockerfile.5.gz ~/LINUX/go_repo/osbuilder Sending build context to Docker daemon 4.096kB Step 1/6 : From fedora:27 27: Pulling from library/fedora 2176639d844b: Pull complete Digest: sha256:ec588fc80b05e19d3006bf2e8aa325f0a2e2ff1f609b7afb39176ca8e3e13467 Status: Downloaded newer image for fedora:27 ---> 9110ae7f579f Step 2/6 : RUN dnf -y update && dnf install -y git redhat-release systemd pkgconfig gcc coreutils ---> Running in d367d5572325 Error: Failed to synchronize cache for repo 'updates' The command '/bin/sh -c dnf -y update && dnf install -y git redhat-release systemd pkgconfig gcc coreutils' returned a non-zero code: 1 Environment: 1. Host info: lsb_release -a LSB Version: core-9.20160110ubuntu0.2-amd64:core-9.20160110ubuntu0.2-noarch:security-9.20160110ubuntu0.2-amd64:security-9.20160110ubuntu0.2-noarch Distributor ID: Ubuntu Description: Ubuntu 16.04.1 LTS Release: 16.04 Codename: xenial 2. Docker info: sudo -E docker info 2>/dev/null | grep -i 'proxy\|runtime\|version' Server Version: 18.03.1-ce Runtimes: runc Default Runtime: runc containerd version: 773c489c9c1b21a6d78b5c538cd395416ec50f88 runc version: 4fc53a81fb7c994640722ac585fa9ca548971871 init version: 949e6fa Kernel Version: 4.4.0-31-generic HTTP Proxy: http://*********:913/ HTTPS Proxy: https://******:913/ No Proxy: localhost,127.0.0.0/8<http://127.0.0.0/8> sudo docker version Client: Version: 18.03.1-ce API version: 1.37 Go version: go1.9.5 Git commit: 9ee9f40 Built: Thu Apr 26 07:17:20 2018 OS/Arch: linux/amd64 Experimental: false Orchestrator: swarm Server: Engine: Version: 18.03.1-ce API version: 1.37 (minimum version 1.12) Go version: go1.9.5 Git commit: 9ee9f40 Built: Thu Apr 26 07:15:30 2018 OS/Arch: linux/amd64 Experimental: false Regards, Changcheng _______________________________________________ kata-dev mailing list kata-dev(a)lists.katacontainers.io<mailto:kata-dev@lists.katacontainers.io> http://lists.katacontainers.io/cgi-bin/mailman/listinfo/kata-dev -- James --- https://katacontainers.io/ | https://github.com/clearcontainers Open Source Technology Center Intel Corporation (UK) Ltd. - Co. Reg. #1134945 - Pipers Way, Swindon SN3 1RJ. _______________________________________________ kata-dev mailing list kata-dev(a)lists.katacontainers.io<mailto:kata-dev@lists.katacontainers.io> http://lists.katacontainers.io/cgi-bin/mailman/listinfo/kata-dev

1 0

Vulnerability disclosure process and contacts for Kata
by Anne Bertucio 06 Jun '18

06 Jun '18

Hi all, There were some good talks at the Vancouver Summit about the kind of security work the Kata community should be doing. An easy one to cherry pick is having an easily discoverable vulnerability disclosure contact and a public process for how those are handled. In regards to process, an easy place to start would be the OpenStack VMT process[1], and using their assistance to make it applicable to how we work in Kata (specifics are strongly tied to the OpenStack project process right now, but the general process is still applicable to us). Are there people in our community who want to champion this and start up our vulnerability management team? [1] https://security.openstack.org/vmt-process.html <https://security.openstack.org/vmt-process.html> Anne Bertucio OpenStack Foundation anne(a)openstack.org | irc: annabelleB

1 0

Re: [kata-dev] osbuilder/rootfs build with docker on native ubuntu host
by Whaley, Graham 06 Jun '18

06 Jun '18

(sorry about the non-threaded copy - odd attachments messing up my email here...) I mentioned on irc - can you check what your env proxy settings are - it looks like the osbuilder scripts pass on (lower case) http_proxy etc.: https://github.com/kata-containers/osbuilder/blob/a12618811dd715c2d4438ce3c… Soo, if you are maybe using HTTP_PROXY, in your env, maybe this does not work? You could run that script (or whichever script you are running) with 'set -x', to see if those docker command line parameters make it through OK. (and, don't forget, this is a public list - don't post your actual proxy settings here - not the IP addresses/machine names at least ;-) Graham ----------- Hi Eric, I'll give your feedback in the morning (It's a little late in PRC). --Thanks Changcheng From: Ernst, Eric Sent: Wednesday, June 6, 2018 8:59 PM To: Hunt, James O <james.o.hunt(a)intel.com<mailto:james.o.hunt@intel.com>> Cc: Liu, Changcheng <changcheng.liu(a)intel.com<mailto:changcheng.liu@intel.com>>; kata-dev(a)lists.katacontainers.io<mailto:kata-dev@lists.katacontainers.io> Subject: Re: [kata-dev] osbuilder/rootfs build with docker on native ubuntu host Can you see if you can start an Ubuntu container and run apt-get update within the container? It sounds like connectivity to me as well. Docker needs proxy settings separately for inside the container connectivity. Eric On Jun 6, 2018, at 5:32 AM, Hunt, James O <james.o.hunt(a)intel.com<mailto:james.o.hunt@intel.com>> wrote: Hi Changcheng, It looks like it might be a network issue or (possibly?) you happened to run the command when the Fedora repo was being updated (I'm not sure if their repo updates are atomic). Could you try re-running and if that doesn't work, raising an issue with the output of `sudo kata-collect-data.sh` pasted into the github issue? - https://github.com/kata-containers/osbuilder/issues/new Cheers, James 2018-06-06 13:12 GMT+01:00 Liu, Changcheng <changcheng.liu(a)intel.com<mailto:changcheng.liu@intel.com>>: Hi all, I fail to build rootfs on ubuntu host after following the "rootfs-builder/README.md<http://rootfs-builder/README.md>" guide. Could anyone give me some idea to do further check? Issue: sudo -E ./rootfs-builder/rootfs.sh -r "${PWD}/fedora_rootfs" fedora ~/LINUX/go_repo/osbuilder/rootfs-builder/fedora ~/LINUX/go_repo/osbuilder # # Copyright (c) 2018 Intel Corporation # # SPDX-License-Identifier: Apache-2.0 From fedora:27 RUN dnf -y update && dnf install -y git redhat-release systemd pkgconfig gcc coreutils # This will install the proper golang to build Kata components ADD https://storage.googleapis.com/golang/go1.9.2.linux-amd64.tar.gz /tmp RUN tar -C /usr/ -xzf /tmp/go1.9.2.linux-amd64.tar.gz ENV GOROOT=/usr/go ENV PATH=$PATH:$GOROOT/bin:$GOPATH/bin Dockerfile: /usr/share/man/man5/Dockerfile.5.gz ~/LINUX/go_repo/osbuilder Sending build context to Docker daemon 4.096kB Step 1/6 : From fedora:27 27: Pulling from library/fedora 2176639d844b: Pull complete Digest: sha256:ec588fc80b05e19d3006bf2e8aa325f0a2e2ff1f609b7afb39176ca8e3e13467 Status: Downloaded newer image for fedora:27 ---> 9110ae7f579f Step 2/6 : RUN dnf -y update && dnf install -y git redhat-release systemd pkgconfig gcc coreutils ---> Running in d367d5572325 Error: Failed to synchronize cache for repo 'updates' The command '/bin/sh -c dnf -y update && dnf install -y git redhat-release systemd pkgconfig gcc coreutils' returned a non-zero code: 1 Environment: 1. Host info: lsb_release -a LSB Version: core-9.20160110ubuntu0.2-amd64:core-9.20160110ubuntu0.2-noarch:security-9.20160110ubuntu0.2-amd64:security-9.20160110ubuntu0.2-noarch Distributor ID: Ubuntu Description: Ubuntu 16.04.1 LTS Release: 16.04 Codename: xenial 2. Docker info: sudo -E docker info 2>/dev/null | grep -i 'proxy\|runtime\|version' Server Version: 18.03.1-ce Runtimes: runc Default Runtime: runc containerd version: 773c489c9c1b21a6d78b5c538cd395416ec50f88 runc version: 4fc53a81fb7c994640722ac585fa9ca548971871 init version: 949e6fa Kernel Version: 4.4.0-31-generic HTTP Proxy: http://*********:913/ HTTPS Proxy: https://******:913/ No Proxy: localhost,127.0.0.0/8<http://127.0.0.0/8> sudo docker version Client: Version: 18.03.1-ce API version: 1.37 Go version: go1.9.5 Git commit: 9ee9f40 Built: Thu Apr 26 07:17:20 2018 OS/Arch: linux/amd64 Experimental: false Orchestrator: swarm Server: Engine: Version: 18.03.1-ce API version: 1.37 (minimum version 1.12) Go version: go1.9.5 Git commit: 9ee9f40 Built: Thu Apr 26 07:15:30 2018 OS/Arch: linux/amd64 Experimental: false Regards, Changcheng _______________________________________________ kata-dev mailing list kata-dev(a)lists.katacontainers.io<mailto:kata-dev@lists.katacontainers.io> http://lists.katacontainers.io/cgi-bin/mailman/listinfo/kata-dev -- James --- https://katacontainers.io/ | https://github.com/clearcontainers Open Source Technology Center Intel Corporation (UK) Ltd. - Co. Reg. #1134945 - Pipers Way, Swindon SN3 1RJ. _______________________________________________ kata-dev mailing list kata-dev(a)lists.katacontainers.io<mailto:kata-dev@lists.katacontainers.io> http://lists.katacontainers.io/cgi-bin/mailman/listinfo/kata-dev --------------------------------------------------------------------- Intel Corporation (UK) Limited Registered No. 1134945 (England) Registered Office: Pipers Way, Swindon SN3 1RJ VAT No: 860 2173 47 This e-mail and any attachments may contain confidential material for the sole use of the intended recipient(s). Any review or distribution by others is strictly prohibited. If you are not the intended recipient, please contact the sender and delete all copies.

1 0

Re: [kata-dev] osbuilder/rootfs build with docker on native ubuntu host
by Liu, Changcheng 06 Jun '18

06 Jun '18

Hi Jcvenega, Have you hit this issue before? Is it related with proxy configuration? B.R. Changcheng From: Liu, Changcheng Sent: Wednesday, June 6, 2018 8:13 PM To: kata-dev(a)lists.katacontainers.io Subject: osbuilder/rootfs build with docker on native ubuntu host Hi all, I fail to build rootfs on ubuntu host after following the “rootfs-builder/README.md” guide. Could anyone give me some idea to do further check? Issue: sudo -E ./rootfs-builder/rootfs.sh -r "${PWD}/fedora_rootfs" fedora ~/LINUX/go_repo/osbuilder/rootfs-builder/fedora ~/LINUX/go_repo/osbuilder # # Copyright (c) 2018 Intel Corporation # # SPDX-License-Identifier: Apache-2.0 From fedora:27 RUN dnf -y update && dnf install -y git redhat-release systemd pkgconfig gcc coreutils # This will install the proper golang to build Kata components ADD https://storage.googleapis.com/golang/go1.9.2.linux-amd64.tar.gz /tmp RUN tar -C /usr/ -xzf /tmp/go1.9.2.linux-amd64.tar.gz ENV GOROOT=/usr/go ENV PATH=$PATH:$GOROOT/bin:$GOPATH/bin Dockerfile: /usr/share/man/man5/Dockerfile.5.gz ~/LINUX/go_repo/osbuilder Sending build context to Docker daemon 4.096kB Step 1/6 : From fedora:27 27: Pulling from library/fedora 2176639d844b: Pull complete Digest: sha256:ec588fc80b05e19d3006bf2e8aa325f0a2e2ff1f609b7afb39176ca8e3e13467 Status: Downloaded newer image for fedora:27 ---> 9110ae7f579f Step 2/6 : RUN dnf -y update && dnf install -y git redhat-release systemd pkgconfig gcc coreutils ---> Running in d367d5572325 Error: Failed to synchronize cache for repo 'updates' The command '/bin/sh -c dnf -y update && dnf install -y git redhat-release systemd pkgconfig gcc coreutils' returned a non-zero code: 1 Environment: 1. Host info: lsb_release -a LSB Version: core-9.20160110ubuntu0.2-amd64:core-9.20160110ubuntu0.2-noarch:security-9.20160110ubuntu0.2-amd64:security-9.20160110ubuntu0.2-noarch Distributor ID: Ubuntu Description: Ubuntu 16.04.1 LTS Release: 16.04 Codename: xenial 2. Docker info: sudo -E docker info 2>/dev/null | grep -i 'proxy\|runtime\|version' Server Version: 18.03.1-ce Runtimes: runc Default Runtime: runc containerd version: 773c489c9c1b21a6d78b5c538cd395416ec50f88 runc version: 4fc53a81fb7c994640722ac585fa9ca548971871 init version: 949e6fa Kernel Version: 4.4.0-31-generic HTTP Proxy: http://*********:913/ HTTPS Proxy: https://******:913/ No Proxy: localhost,127.0.0.0/8 sudo docker version Client: Version: 18.03.1-ce API version: 1.37 Go version: go1.9.5 Git commit: 9ee9f40 Built: Thu Apr 26 07:17:20 2018 OS/Arch: linux/amd64 Experimental: false Orchestrator: swarm Server: Engine: Version: 18.03.1-ce API version: 1.37 (minimum version 1.12) Go version: go1.9.5 Git commit: 9ee9f40 Built: Thu Apr 26 07:15:30 2018 OS/Arch: linux/amd64 Experimental: false Regards, Changcheng

1 0