Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Debian: switch to crun and cgroups v2 #22706

Merged
merged 1 commit into from
May 29, 2024

Conversation

edsantiago
Copy link
Collaborator

As agreed in Planning meeting of 2024-03-20, Podman 5.x will
drop support for cgroups v1 and for runc. Make it so.

CI images built in containers/automation_images#338

Signed-off-by: Ed Santiago [email protected]

Podman no longer supports runc nor cgroups v1 

@openshift-ci openshift-ci bot added release-note approved Indicates a PR has been approved by an approver from all required OWNERS files. labels May 14, 2024
Copy link

Ephemeral COPR build failed. @containers/packit-build please check.

Copy link

Cockpit tests failed for commit 4d0f63c. @martinpitt, @jelly, @mvollmer please check.

@@ -9,13 +9,10 @@ import (
. "github.com/onsi/gomega"
)

func isDebianRunc(pTest *PodmanTestIntegration) bool {
// FIXME 2024-05-14: "Debian" here is a proxy for "netavark < 1.10"
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

we could parse podman info to get the real version

At this point I seriously question if we should continue using the debian sid distro versions.
Netavark v1.5 has been released on Feb 2, 2023, yet SID is still on 1.4 somehow. Not for this PR of course but I really wonder if we have to consider alternatives.

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you for bringing this up, that's the broader question we need to address next. The entire purpose of testing in Debian was quick discovery of problems that would affect RHEL. This may be a good time to evaluate what testing gaps we have and how we can fill them.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

As we turn on zstd:chunked, composefs, and others for Fedora, we could continue with old checks for Debian.

Copy link

Ephemeral COPR build failed. @containers/packit-build please check.

Copy link

Cockpit tests failed for commit ee164a4. @martinpitt, @jelly, @mvollmer please check.

Copy link
Member

@Luap99 Luap99 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Copy link
Contributor

openshift-ci bot commented May 16, 2024

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: edsantiago, Luap99

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

As agreed in Planning meeting of 2024-03-20, Podman 5.x will
drop support for cgroups v1 and for runc. Make it so.

CI images built in containers/automation_images#338

Signed-off-by: Ed Santiago <[email protected]>
@edsantiago
Copy link
Collaborator Author

@containers/podman-maintainers PTAL. This has become a lot uglier than my last push, I really have no idea why. It has also become a little more pressing because the new systemd on debian no longer supports cgroups v1. (At this point we need to reconsider what purpose is served by testing on debian)

Copy link
Member

@Luap99 Luap99 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, please make sure to file a issue for the new debian/systemd skips so we can investigate them later and get them fixed hopefully.

The one main reason why debian might be needed is appamor, we have no knowledge of apparmor so having it as sanity check that podman at least works is good, i.e. pasta apparmor issues recently but also that the profile in c/common works.

@rhatdan
Copy link
Member

rhatdan commented May 29, 2024

/lgtm

@openshift-ci openshift-ci bot added the lgtm Indicates that a PR is ready to be merged. label May 29, 2024
@openshift-merge-bot openshift-merge-bot bot merged commit 3c244a9 into containers:main May 29, 2024
89 checks passed
@edsantiago edsantiago deleted the debian-modernize branch May 29, 2024 11:31
edsantiago added a commit to edsantiago/libpod that referenced this pull request May 29, 2024
Another new-VM import from

   containers/automation_images#338

...because the usual conflict dealio in that repo. This
should mostly be a NOP. All the major work was done in containers#22706.

Signed-off-by: Ed Santiago <[email protected]>
@edsantiago edsantiago mentioned this pull request May 29, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
approved Indicates a PR has been approved by an approver from all required OWNERS files. lgtm Indicates that a PR is ready to be merged. release-note
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants