simple-gvisor Pod runsc systemd cgroup

elamin

Hi,
the pod in the gvisor class (runsc handler) giving this error:

8m14s Warning FailedCreatePodSandBox pod/simple-gvisor (combined from similar events): Failed to create pod sandbox: rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: creating container: configuring cgroup: open /sys/fs/cgroup/cpuset/kubepods-besteffort-podc831f70d_7dfb_4aa1_98bd_1fd26d84d093.slice:cri-containerd:a253c9bd043c124c5a9f5b2875e348bb9b35384f36391acda59c2412400366bc/cpuset.cpus: no such file or directory: unknown
3m14s Normal SandboxChanged pod/simple-gvisor Pod sandbox changed, it will be killed and re-created.

steps to solve this problem:
I have reconfigured the /etc/containerd/config.toml to include this lines:
[plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runsc]
runtime_type = "io.containerd.runsc.v1"
[plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runsc.options]
SystemdCgroup = true

I restarted the containerd daemon and service but still, the problem was not solved.

can someone maybe help with that?
Thanks a lot

chrispokorni

Hi @elamin,

Can you check and possibly re-install the containerd-shim-runsc-v1 package? The lab setup script installs a nightly release. Perhaps a latest release is more stable, and less prone to issues. See official documentation and installation instructions:
https://gvisor.dev/docs/user_guide/install/

Regards,
-Chris

elamin

Hi @chrispokorni
Thank you very much for your help,
I have noticed some parts of the course have not been updated since 2020. I have reverted to the official documentation of the gvisor and everything is fine now.
But I can't remember the installation script for the exam and I hope no changing question will come about the installation without the documentation.

Regards
Adil

elamin

1- Installation:
https://gvisor.dev/docs/user_guide/install/

2- Configuration
https://gvisor.dev/docs/user_guide/containerd/quick_start/

3- Test Pod:
apiVersion: v1
kind: Pod
metadata:
name: pod
spec:
nodeName: runsc-node-name # <-- the node name in which runsc has been configured
runtimeClassName: gvisor
containers:
- image: nginx
name: pod