January 2021 - kata-dev - lists.katacontainers.io

Weekly Kata Herders
by Hunt, James O 11 Jan '21

11 Jan '21

Hi All, This week's Kata PR and issue herders are: - Carlos (https://github.com/jcvenegas) - Zhihong Yu (https://github.com/tedyu) # Statistics ## Issues Issues opened last week: 27 Issues closed last week: 17 Open issues: 1122 Issue backlog project board: https://github.com/orgs/kata-containers/projects/23 ## PRs PRs opened last week: 20 PRs closed last week: 32 Open PRs: 131 Open PRs (excluding dnm+wip): 96 # Get involved If you'd like to help get the open PRs merged and open issues resolved (or get involved in other ways with Kata), take a look at the contributing guide [2] and the rota process [3]. Any problems, just ask us [4]. Cheers, James [1] - https://github.com/kata-containers/community/wiki/Review-Team-Rota [2] - https://github.com/kata-containers/community/blob/master/CONTRIBUTING.md [3] - https://github.com/kata-containers/community/blob/master/Rota-Process.md [4] - https://github.com/kata-containers/community/blob/master/README.md#join-us --- https://katacontainers.io/ | https://github.com/kata-containers Open Source Technology Center Intel Corporation (UK) Ltd. - Co. Reg. #1134945 - Pipers Way, Swindon SN3 1RJ. --------------------------------------------------------------------- Intel Corporation (UK) Limited Registered No. 1134945 (England) Registered Office: Pipers Way, Swindon SN3 1RJ VAT No: 860 2173 47 This e-mail and any attachments may contain confidential material for the sole use of the intended recipient(s). Any review or distribution by others is strictly prohibited. If you are not the intended recipient, please contact the sender and delete all copies.

1 0

Booting OVMF with -bios?
by Christophe de Dinechin 07 Jan '21

07 Jan '21

Hello Laszlo, Happy New Year! I may need to pick your brain a little regarding an issue someone testing AMD SEV ran into with Kata. Basically, here are the questions I have: 1) Is it OK to pass an OVMF firmware to the -boot option of qemu? What about SecureBoot in that case? 2) Are there any expected behavioral differences between booting with the -bios option and using a -drive if=pflash option? In particular, anything that could prevent SEV from activating in the guest kernel? 3) Knowing that in the Kata case, we don't care about anything persisting across reboots, is there any problem passing only the OVMF_CODE.fd image readonly using the -drive option, without having an OVMF_VARS.fd? Asking to see if we need to create an OVMF_VARS.fd for each container. If you need a bit of context: https://github.com/kata-containers/kata-containers/issues/1231 and http://lists.katacontainers.io/pipermail/kata-dev/2021-January/001638.html Thanks! -- Cheers, Christophe de Dinechin (IRC c3d)

4 12

Kata Containers Glossary
by helena＠openstack.org 07 Jan '21

07 Jan '21

Greetings Kata Community! About 6 months ago we began an initiative to support SEO tactics, by creating a Kata Containers glossary. By creating this glossary, we are hoping to have greater visibility to potential contributors, users, and supporting organizations. The terms have been decided on and defined, however, now we must figure out where to have the glossary exist within [ https://katacontainers.io/ ]( https://katacontainers.io/ ). Feel free to view and edit the drafted glossary [ here ]( https://etherpad.opendev.org/p/Kata_Glossary ). Most other Open Infrastructure Foundation supported projects have their glossaries exist under “docs” (see example from [ Zuul ]( https://zuul-ci.org/docs/zuul/reference/glossary.html )). I am hoping to get community feedback on where the glossary should exist. As always, feel free to reach out with any questions. Cheers, Helena

1 0

Regarding, Kata 2.0.0, kata-runtime
by Gupta, Sandeep 04 Jan '21

04 Jan '21

[AMD Official Use Only - Internal Distribution Only] Hi Developers, 1. Trying version-1 syntax: (for /usr/local/bin/containerd -config /etc/containerd/config.toml), # cat /etc/containerd/config.toml [plugins.cri.containerd] no_pivot = false [plugins.cri.containerd.runtimes] [plugins.cri.containerd.runtimes.runc] runtime_type = "io.containerd.runc.v1" [plugins.cri.containerd.runtimes.runc.options] NoPivotRoot = false NoNewKeyring = false ShimCgroup = "" IoUid = 0 IoGid = 0 BinaryName = "runc" Root = "" CriuPath = "" SystemdCgroup = false [plugins.cri.containerd.runtimes.kata] runtime_type = "io.containerd.kata.v2" [plugins.cri.containerd.runtimes.kata.options] ConfigPath = "/etc/kata-containers/configuration.toml" [plugins.cri.containerd.runtimes.katacli] runtime_type = "io.containerd.runc.v1" [plugins.cri.containerd.runtimes.katacli.options] NoPivotRoot = false NoNewKeyring = false ShimCgroup = "" IoUid = 0 IoGid = 0 BinaryName = "/usr/local/bin/kata-runtime" Root = "" CriuPath = "" SystemdCgroup = false 1. kata-runtime version 1.1.0 is successful as follows : /usr/local/bin/kata-runtime --version kata-runtime : 1.1.0 commit : 292786890bd4792226c4fbf9b5268a92c27fe0f1-dirty OCI specs: 1.0.1 1. kata-runtime ver 1.1.0 works, as follows : # ctr run --runtime io.containerd.run.kata.v2 -t --rm docker.io/library/busybox:latest sh / # / # ps -eaf PID USER TIME COMMAND 1 root 0:00 sh 6 root 0:00 ps -eaf / # / # uname -a Linux kata-container 5.6.0-sev-sev-es-5.6-v3.container #3 SMP Tue Nov 3 06:38:40 UTC 2020 x86_64 GNU/Linux / # 1. For kata-runtime, ver 1.1.0 : # ps -eaf | grep -i container root 98257 1 0 03:52 ? 00:00:19 /usr/local/bin/containerd root 98329 1 0 03:52 ? 00:00:33 /usr/local/bin/containerd-shim-kata-v2 -namespace default -address /run/containerd/containerd.sock -publish-binary /usr/local/bin/containerd -id bash root 98347 1 0 03:52 ? 00:00:51 /usr/local/bin/qemu-system-x86_64 -name sandbox-bash -uuid 27d16f68-1fc9-483f-a33b-e6224772273e -machine q35,accel=kvm,kernel_irqchip -cpu host, -qmp unix:/run/vc/vm/bash/qmp.sock,server,nowait -m 512M,slots=10,maxmem=129755M -device pci-bridge,bus=pcie.0,id=pci-bridge-0,chassis_nr=1,shpc=on,addr=2,romfile= -device virtio-serial-pci,disable-modern=false,id=serial0,romfile= -device virtconsole,chardev=charconsole0,id=console0 -chardev socket,id=charconsole0,path=/run/vc/vm/bash/console.sock,server,nowait -object rng-random,id=rng0,filename=/dev/urandom -device virtio-rng-pci,rng=rng0,romfile= -device virtserialport,chardev=charch0,id=channel0,name=agent.channel.0 -chardev socket,id=charch0,path=/run/vc/vm/bash/kata.sock,server,nowait -device virtio-9p-pci,disable-modern=false,fsdev=extra-9p-kataShared,mount_tag=kataShared,romfile= -fsdev local,id=extra-9p-kataShared,path=/run/kata-containers/shared/sandboxes/bash/shared,security_model=none,multidevs=remap -rtc base=utc,driftfix=slew,clock=host -global kvm-pit.lost_tick_policy=discard -vga none -no-user-config -nodefaults -nographic --no-reboot -daemonize -object memory-backend-ram,id=dimm1,size=512M -numa node,memdev=dimm1 -kernel /usr/share/kata-containers/vmlinuz-sev-es-5.6-v3.container -initrd /usr/share/kata-containers/kata-containers-initrd_alpine_1.12.0-rc0_agent_5cfb8ec960.initrd -append tsc=reliable no_timer_check rcupdate.rcu_expedited=1 i8042.direct=1 i8042.dumbkbd=1 i8042.nopnp=1 i8042.noaux=1 noreplace-smp reboot=k console=hvc0 console=hvc1 cryptomgr.notests net.ifnames=0 pci=lastbus=0 iommu=off debug panic=1 nr_cpus=240 agent.use_vsock=false root=/dev/vda1 rootflags=data=ordered,errors=remount-ro agent.log=debug initcall_debug -pidfile /run/vc/vm/bash/pid -D /run/vc/vm/bash/qemu.log -smp 1,cores=1,threads=1,sockets=240,maxcpus=240 root 99602 99593 0 07:55 pts/1 00:00:00 grep --color=auto -i container 1. Exactly the same (above) environment, kata-runtime ver 2.0.0 is failing as follows: # /usr/local/bin/kata-runtime --version : 2.0.0 commit : <<unknown>> OCI specs: 1.0.1-dev /# ctr run --runtime io.containerd.run.kata.v2 -t --rm docker.io/library/busybox:latest sh ctr: Failed to check if grpc server is working: unexpected EOF: unknown 1. I can discuss this Issue in, Kata AC call in 2021 on January 5th. --Thanking You --Best Regards, --Sandeep Gupta

3 5

Weekly Kata Herders
by Hunt, James O 04 Jan '21

04 Jan '21

Hi All, This week's Kata PR and issue herders are -- tentatively: - Eric (https://github.com/egernst) - Fabiano (https://github.com/fidencio) - Salvador (https://github.com/chavafg) I say tentatively since I've only just updated the rota [1], so if this week doesn't work for folk, feel free to switch around. Related: since the backlog is rather high at the moment due to the Christmas and New Year break (106 PRs and 1,113 issues) [5][6], if anyone has spare cycles, please feel free to get involved and help out ;-) # Get involved If you'd like to help get the open PRs merged and open issues resolved (or get involved in other ways with Kata), take a look at the contributing guide [2] and the rota process [3]. Any problems, just ask us [4]. # Note An advance warning: herding activity over the next two weeks may be somewhat disrupted by the Christmas and New Year holidays. But don't let that stop you from raising issues and PRs folks! ;-) Cheers, James [1] - https://github.com/kata-containers/community/wiki/Review-Team-Rota [2] - https://github.com/kata-containers/community/blob/master/CONTRIBUTING.md [3] - https://github.com/kata-containers/community/blob/master/Rota-Process.md [4] - https://github.com/kata-containers/community/blob/master/README.md#join-us [5] - https://github.com/issues?q=is%3Aissue+is%3Aopen+org%3Akata-containers+ [6] - https://github.com/pulls?page=1&q=is%3Aopen+is%3Apr+org%3Akata-containers+-… James --- https://katacontainers.io/ | https://github.com/kata-containers Open Source Technology Center Intel Corporation (UK) Ltd. - Co. Reg. #1134945 - Pipers Way, Swindon SN3 1RJ. --------------------------------------------------------------------- Intel Corporation (UK) Limited Registered No. 1134945 (England) Registered Office: Pipers Way, Swindon SN3 1RJ VAT No: 860 2173 47 This e-mail and any attachments may contain confidential material for the sole use of the intended recipient(s). Any review or distribution by others is strictly prohibited. If you are not the intended recipient, please contact the sender and delete all copies.

1 0

Architecture Committee meetings for 2021 (please, add your topics to the agenda!)
by Fabiano Fidêncio 04 Jan '21

04 Jan '21

Kata folks, I've created a new etherpad for 2021 meetings [0], as we keep one etherped per year. Our next meeting, and the first one of the year, is happening Tomorrow (January 5th, 2021), in case we have topics to be discussed. So, please, if you have something that you want to cover during the meetings, please, add it to our agenda (our etherpad [0]). [0]: https://etherpad.opendev.org/p/Kata_Containers_2021_Architecture_Committee_… Best Regards, -- Fabiano Fidêncio

1 0