Monday, 2021-07-05

kata-irc-bot<jakob.naucke> All the scripts or are you specifically thinking about any scripts in particular? I think Bash would work better e.g. for `tests/.ci/` stuff07:47
kata-irc-bot<samuel.ortiz> @julio.montes Good morning13:48
devimcHi Samuel, good morning 14:02
kata-irc-bot<samuel.ortiz> @julio.montes I’m looking at the host cgroups code for the runtime, when `sandbox_cgroup_only` is not set. It seems to me that the documentation (https://github.com/kata-containers/documentation/blob/master/design/host-cgroups.md) is not aligned with the code: IIUC we’re creating a new cgroup for each container (and each sandbox), and adding the shim process to that cgroup. And the only limit that we’re applying are CPU ones, 14:13
kata-irc-botmemory. Does that sound accurate?14:13
devimcyes, that's right14:23
kata-irc-bot<samuel.ortiz> @julio.montes So, e.g. `Move hypervisor and applicable threads to memory cgroup /kata` is incorrect?14:26
kata-irc-bot<samuel.ortiz> @julio.montes Or things like: `Per each container, move its kata-shim to its own containerCgroupHost` is also incorrect and applies to kata 1.x but not 2.x ?14:27
kata-irc-bot<samuel.ortiz> @julio.montes Just checking if my understanding is right :slightly_smiling_face:14:27
devimc"Move hypervisor and applicable threads to memory cgroup /kata" is correct 14:28
devimcwe move vcpus (threads) into cgroups with constraints.14:30
kata-irc-bot<samuel.ortiz> > “Move hypervisor and applicable threads to memory cgroup /kata” is correct14:30
kata-irc-bot<samuel.ortiz> >  we move vcpus (threads) into cgroups with constraints. With `sandbox_cgroup_only` is set to false?14:33
kata-irc-bot<samuel.ortiz> @julio.montes ^14:34
devimcyes14:47
devimc@samuel.ortiz14:47
kata-irc-bot<samuel.ortiz> @julio.montes Could you please point out where in the code that’s done?14:48
devimcsanbox.go:208014:48
kata-irc-bot<samuel.ortiz> @julio.montes So `constrainHypervisor` is only called when `s.state.CgrouPath` is set, and afaict `s.state.CgroupPath` is set from `setupSandboxCgroup`  The latter is only called from `createSandboxFromConfig` iff `s.Config.SandboxCgroupOnly` is true. That’s my analysis, but I may be wrong.14:58
kata-irc-bot<samuel.ortiz> What am I missing here?14:59
kata-irc-bot<samuel.ortiz> @julio.montes As I’m willing to fix this code if necessary, is there anything I’m missing here?15:52
devimc@samuel.ortiz after reading the code, I think you are right, something changed (bug was introduced ..?) and now vcpus threads are not constrained  :|15:57
kata-irc-bot<wmoschet> @jakob.naucke I would like to improve the way CI jobs can be reproduced locally. I was thinking in write new code in Python, if yet another language is acceptable16:39
kata-irc-bot<jakob.naucke> like `tests/integration/` and whatnot?16:44
kata-irc-bot<salvador.fuentes> @samuel.ortiz, devimc, seems like the irc-bot not working correctly as I do not see here (slack) last devimc's response. So pasting here: [10:57:26] <devimc> @samuel.ortiz after reading the code, I think you are right, something changed (bug was introduced ..?) and now vcpus threads are not constrained  :|17:08
kata-irc-bot<wmoschet> In a nutshell, I want to have a make target (e.g. `make job-cri_containerd_k8s`) which will run the Jenkins's `cri_containerd_k8s` job in a vm in my localhost.  It is the extension of this work: https://github.com/kata-containers/tests/pull/354718:50
kata-irc-bot<samuel.ortiz> @salvador.fuentes Thanks! I’ll open an issue for that bug, I wanted to rework a bit how we handle host cgroups anyways.21:02
kata-irc-bot<samuel.ortiz> @salvador.fuentes @julio.montes and I’ll get back to IRC as well ;)21:02

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!