Hi Stefano
I tried it, but unfortunately, it doesn't work with the vsock modules with netns support.
that's weird, because with these patches whole process (including threads) is moved to the net namespace
Q. Do you know if this new implementation of vsock/netns supports persistent namespaces?
With the old modules (vsock without netns) it works but looking at the netns I'm still seeing only kata-shim and qemu:
you don't see kata-runtime, because it's not running, it spawns to kata-shim and qemu and finish its execution
Let me know if I can do other tests or if you want a VM with the vsock modules with netns support.
yes, please
- Julio
________________________________ From: Stefano Garzarella sgarzare@redhat.com Sent: Thursday, December 19, 2019 4:49 AM To: Montes, Julio julio.montes@intel.com Cc: Boeuf, Sebastien sebastien.boeuf@intel.com; kata-dev@lists.katacontainers.io kata-dev@lists.katacontainers.io; Peng Tao tao.peng@linux.alibaba.com Subject: Re: [kata-dev] vsock & network namespaces in Kata
Hi Julio,
On Tue, Dec 17, 2019 at 8:09 PM Montes, Julio julio.montes@intel.com wrote:
Hi Stefano
I think we'll need a more complex solution [1] (unless someone else has a better patch).
Here [1] you can find a version of kata-runtime that supports all namespaces (yes, including mnt namespace!!) unlike upstream kata-runtime
Since you want to use it for testing net ns, I just enabled it, but if you need other namespace, just uncomment it out from the list [2]
I only tested v1 (no netmom, no vmtemplating) with docker
Thanks for the patches. I tried it, but unfortunately, it doesn't work with the vsock modules with netns support.
This is the log, I don't know if can be useful: https://pastebin.com/mG7CfUrV
With the old modules (vsock without netns) it works but looking at the netns I'm still seeing only kata-shim and qemu: $ sudo ip netns pids cnitest-1939e49f-19af-3b72-625d-01db153a9fa9 1308 1321 $ ps -p 1308 1321 PID TTY STAT TIME COMMAND 1308 ? Sl 0:05 /usr/bin/qemu-vanilla-system-x86_64 -name sandbox-efd90c46d5b8989886 1321 pts/2 Ssl+ 0:00 /usr/libexec/kata-containers/kata-shim -agent vsock://357155431:1024
This is the log with working kata and vsock modules without netns support: https://pastebin.com/cdHiV5ZV
Let me know if I can do other tests or if you want a VM with the vsock modules with netns support.
Thanks, Stefano