Friday, 2021-12-10

kata-irc-bot<shuo.chen> hey guys, anyone familiar with SPDK? We find when using spdk with k8s pod, the kata vm hangs at the container creating stage. github issue is here: https://github.com/kata-containers/kata-containers/issues/3249. Let me know if anyone can provide me some help. Thanks03:55
kata-irc-bot<gkurz> is there an API, usable from the virtcontainers code, that tells whether a container is privileged ?10:35
kata-irc-bot<gkurz> @fidencio probably knows ^^ :slightly_smiling_face:10:37
kata-irc-bot<fidencio> I don' think we do, but I'd need to double check it.10:46
kata-irc-bot<gkurz> Yeah I couldn't find anything like that... I'm experimenting with privileged containers that fail to access HostPath when selinux is enabled on the host, while it works as a charm with runc. I'd like to be able to make some adjustments to the container setup path when it is privileged.11:13
kata-irc-bot<fidencio> I *think* CRI-O (as in, the CRI runtime) is the last instance where you have access to that.  It may be worth checking whether the info is sent down to kata-containers, you can dump the full OCI spec received for that.11:22
kata-irc-bot<fidencio> And we could check whether both containerd and CRI-O sends those down, and then take use such info accordingly11:22
kata-irc-bot<gkurz> you can dump the full OCI spec received for that> I'd be glad to do that when I know how :slightly_smiling_face:11:29

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!