Hi Stefano
I tried it, but unfortunately, it doesn't work with the vsock modules with netns support.
that's weird, because with these patches whole process (including threads) is moved to the net namespace Q. Do you know if this new implementation of vsock/netns supports persistent namespaces?
With the old modules (vsock without netns) it works but looking at the netns I'm still seeing only kata-shim and qemu:
you don't see kata-runtime, because it's not running, it spawns to kata-shim and qemu and finish its execution
Let me know if I can do other tests or if you want a VM with the vsock modules with netns support.
yes, please - Julio ________________________________ From: Stefano Garzarella <sgarzare@redhat.com> Sent: Thursday, December 19, 2019 4:49 AM To: Montes, Julio <julio.montes@intel.com> Cc: Boeuf, Sebastien <sebastien.boeuf@intel.com>; kata-dev@lists.katacontainers.io <kata-dev@lists.katacontainers.io>; Peng Tao <tao.peng@linux.alibaba.com> Subject: Re: [kata-dev] vsock & network namespaces in Kata Hi Julio, On Tue, Dec 17, 2019 at 8:09 PM Montes, Julio <julio.montes@intel.com> wrote:
Hi Stefano
I think we'll need a more complex solution [1] (unless someone else has a better patch).
Here [1] you can find a version of kata-runtime that supports all namespaces (yes, including mnt namespace!!) unlike upstream kata-runtime
Since you want to use it for testing net ns, I just enabled it, but if you need other namespace, just uncomment it out from the list [2]
I only tested v1 (no netmom, no vmtemplating) with docker
Thanks for the patches. I tried it, but unfortunately, it doesn't work with the vsock modules with netns support. This is the log, I don't know if can be useful: https://pastebin.com/mG7CfUrV With the old modules (vsock without netns) it works but looking at the netns I'm still seeing only kata-shim and qemu: $ sudo ip netns pids cnitest-1939e49f-19af-3b72-625d-01db153a9fa9 1308 1321 $ ps -p 1308 1321 PID TTY STAT TIME COMMAND 1308 ? Sl 0:05 /usr/bin/qemu-vanilla-system-x86_64 -name sandbox-efd90c46d5b8989886 1321 pts/2 Ssl+ 0:00 /usr/libexec/kata-containers/kata-shim -agent vsock://357155431:1024 This is the log with working kata and vsock modules without netns support: https://pastebin.com/cdHiV5ZV Let me know if I can do other tests or if you want a VM with the vsock modules with netns support. Thanks, Stefano