Welcome to the Linux Foundation Forum!

simple-gvisor Pod runsc systemd cgroup

elamin
elamin Posts: 7
in LFS260 Class Forum

Hi,
the pod in the gvisor class (runsc handler) giving this error:

8m14s Warning FailedCreatePodSandBox pod/simple-gvisor (combined from similar events): Failed to create pod sandbox: rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: creating container: configuring cgroup: open /sys/fs/cgroup/cpuset/kubepods-besteffort-podc831f70d_7dfb_4aa1_98bd_1fd26d84d093.slice:cri-containerd:a253c9bd043c124c5a9f5b2875e348bb9b35384f36391acda59c2412400366bc/cpuset.cpus: no such file or directory: unknown
3m14s Normal SandboxChanged pod/simple-gvisor Pod sandbox changed, it will be killed and re-created.

steps to solve this problem:
I have reconfigured the /etc/containerd/config.toml to include this lines:
[plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runsc]
runtime_type = "io.containerd.runsc.v1"
[plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runsc.options]
SystemdCgroup = true

I restarted the containerd daemon and service but still, the problem was not solved.

can someone maybe help with that?
Thanks a lot

Comments

  • chrispokorni
    chrispokorni Posts: 2,587

    Hi @elamin,

    Can you check and possibly re-install the containerd-shim-runsc-v1 package? The lab setup script installs a nightly release. Perhaps a latest release is more stable, and less prone to issues. See official documentation and installation instructions:
    https://gvisor.dev/docs/user_guide/install/

    Regards,
    -Chris

  • elamin
    elamin Posts: 7

    Hi @chrispokorni
    Thank you very much for your help,
    I have noticed some parts of the course have not been updated since 2020. I have reverted to the official documentation of the gvisor and everything is fine now.
    But I can't remember the installation script for the exam and I hope no changing question will come about the installation without the documentation.

    Regards
    Adil

  • elamin
    elamin Posts: 7

    1- Installation:
    https://gvisor.dev/docs/user_guide/install/

    2- Configuration
    https://gvisor.dev/docs/user_guide/containerd/quick_start/

    3- Test Pod:
    apiVersion: v1
    kind: Pod
    metadata:
    name: pod
    spec:
    nodeName: runsc-node-name # <-- the node name in which runsc has been configured
    runtimeClassName: gvisor
    containers:
    - image: nginx
    name: pod

Categories

Upcoming Training