Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ignition, machine: delegate cpu,io,memory,pid cgroup controllers to machine's non-root users. #13061

Merged

Conversation

flouthoc
Copy link
Collaborator

Makes sure that ignition setups up systemd config so cgroup controllers
like cpu, io are also delegated to non-root along with memory, pid.

This allows general users of podman on macOS and podman-remote to
do operations which are dependent on cpu, io cgroup controllers.

[NO TESTS NEEDED]
We don't have a CI infra to test this, please pull the tree and run
podman info inside the machine to confirm.

Closes: #13054

@openshift-ci openshift-ci bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Jan 28, 2022
@flouthoc flouthoc requested a review from baude January 28, 2022 09:30
@flouthoc
Copy link
Collaborator Author

@baude @rhatdan Following patch can be tested on macOS using.

podman run --cpus 1 -it alpine /bin/sh

…fault users

Makes sure that ignition setups up systemd config so cgroup controllers
like `cpu, io` are also delegated to `non-root` along with `memory,
pid`.

This allows general users of `podman` on `macOS` and `podman-remote` to
do operations which are dependent on `cpu, io` cgroup controllers.

[NO TESTS NEEDED]
[NO NEW TESTS NEEDED]
We don't have a CI infra to test this, please pull the tree and run
`podman info` inside the machine to confirm.

Signed-off-by: Aditya R <[email protected]>
@flouthoc flouthoc force-pushed the podman-vm-delegate-subsystem branch from 8168e6a to 6f2b027 Compare January 28, 2022 09:33
@rhatdan
Copy link
Member

rhatdan commented Jan 28, 2022

@giuseppe PTAL

Copy link
Member

@giuseppe giuseppe left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@openshift-ci
Copy link
Contributor

openshift-ci bot commented Jan 28, 2022

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: flouthoc, giuseppe

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@rhatdan
Copy link
Member

rhatdan commented Jan 28, 2022

/lgtm

@openshift-ci openshift-ci bot added the lgtm Indicates that a PR is ready to be merged. label Jan 28, 2022
@openshift-merge-robot openshift-merge-robot merged commit c2f4747 into containers:main Jan 28, 2022
@github-actions github-actions bot added the locked - please file new issue/PR Assist humans wanting to comment on an old issue or PR with locked comments. label Sep 21, 2023
@github-actions github-actions bot locked as resolved and limited conversation to collaborators Sep 21, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
approved Indicates a PR has been approved by an approver from all required OWNERS files. lgtm Indicates that a PR is ready to be merged. locked - please file new issue/PR Assist humans wanting to comment on an old issue or PR with locked comments.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

--cpu fails with podman run in the vm for macos
4 participants