-
Notifications
You must be signed in to change notification settings - Fork 40k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update libcontainer to include PRs with fixes to systemd cgroup driver #61926
Conversation
/assign @sttts for OWNERS. |
35cf19c
to
41b4a6d
Compare
/ok-to-test |
/assign @sttts |
I'll probably want to include opencontainers/runc#1772 as well which has a better fix for this... Maybe we can hold this PR until that one is pushed upstream too. |
41b4a6d
to
fdb0005
Compare
@derekwaynecarr Please take another look, this includes all the fixes we pushed to libcontainer. (You might want to retest #61474 yet one more time, but I imagine everything should be fine.) We need approval from dep-approvers, so I'll assign the three of them here... /assign @cblecker Cheers! |
758cff2
to
32098f7
Compare
I can approve the dependency bump, but it should be reviewed by sig node first (@derekwaynecarr) and tests should pass. |
/test pull-kubernetes-e2e-gce |
Tests are all good... @derekwaynecarr you're next 😃 |
LGTM 👍 |
@vikaschoudhary16 @sjenning @mrunalp Can you please review opencontainers/runc#1781 ? If that looks good, then I'd like to include it here and then finally merge this into Kubernetes code base... Thanks! |
PR opencontainers/runc#1754 works around an issue in manager.Apply(-1) that makes Kubelet startup hang when using systemd cgroup driver (by adding a timeout) and further PR opencontainers/runc#1772 fixes that bug by checking the proper error status before waiting on the channel. PR opencontainers/runc#1776 checks whether Delegate works in slices, which keeps libcontainer systemd cgroup driver working on systemd v237+. PR opencontainers/runc#1781 makes the channel buffered, so if we time out waiting on the channel, the updater will not block trying to it since there are no longer any consumers.
32098f7
to
54d9382
Compare
Ok I updated this PR with all the fixes. Considering the current state is "broken" (as far as I can tell, Kubernetes upstream doesn't work at all on a system using systemd cgroup driver), I think we should really go ahead and submit this. If you want to take a short while to try to reproduce the issue (particularly the one when the systemd response to dbus times out) please go ahead, but let's try to figure this one quickly and merge it before new conflicts arise please 😄 Cheers, |
/retest |
/approve |
/assign @cblecker |
Existing dep bump, with no license changes. |
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: cblecker, derekwaynecarr, filbranden The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
/hold |
Just a quick note (mostly to self), based on #61474 (comment), Fedora 28 and rawhide now have patched systemd from https://bugzilla.redhat.com/show_bug.cgi?id=1568594 which allows the cluster to start without this patch to Kubernetes. |
/retest |
/test all [submit-queue is verifying that this PR is safe to merge] |
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions here. |
What this PR does / why we need it:
PR opencontainers/runc#1754 works around an issue in manager.Apply(-1) that makes Kubelet startup hang when using systemd cgroup driver (by adding a timeout) and further PR opencontainers/runc#1772 fixes that bug by checking the proper error status before waiting on the channel.
PR opencontainers/runc#1776 checks whether Delegate works in slices, which keeps libcontainer systemd cgroup driver working on systemd v237+.
Which issue(s) this PR fixes (optional, in
fixes #<issue number>(, fixes #<issue_number>, ...)
format, will close the issue(s) when PR gets merged):Fixes #61474
Special notes for your reviewer:
/assign @derekwaynecarr
cc @vikaschoudhary16 @sjenning @adelton @mrunalp
Release note: