Eric Ernst egernst

Pre-requisites

Install IPMItools using your package manager on laptop and target machine. Load the drivers on the target.

modprobe ipmi_devintf
modprobe ipmi_si

If you see the following, drivers are not loaded.

---
apiVersion: monitoring.coreos.com/v1
kind: PodMonitor
metadata:
  name: fluentd-es
  labels:
    k8s-app: fluentd-es
spec:
 selector:

Quick guide for getting Kata+containerd (using v2 shim) up and running super quick on bionic

Installation of Kube stuff on bionic:

Use the following sh:

sudo -E apt install -y curl
sudo bash -c "cat <<EOF > /etc/apt/sources.list.d/kubernetes.list
deb http://apt.kubernetes.io/ kubernetes-xenial-unstable main

Beta support for raw block volumes is available in K8s 1.13: https://kubernetes.io/blog/2019/03/07/raw-block-volume-support-to-beta/

The following in-tree volumes types support raw blocks:

AWS EBS
Azure Disk
Cinder

Accessing Kubelet API

curl -sk https://localhost:10250/pods/

If --anonymous-auth is turned off, you will see a 401 Unauthorized response.
If --anonymous-auth is true and --authorization-mode is Webhook you'll see 403 Forbidden response with message Forbidden (user=system:anonymous, verb=get, resource=nodes, subresource=proxy)
If --anonymous-auth is true and --authorization-mode is AlwaysAllow you'll see a list of pods.

How to do a Kata Containers Release

Hi if you are reading this document you may also want to create a kata Containers Release.

The Kata Containers Release Process is defined in the follwoing documents.

https://github.com/kata-containers/documentation/blob/master/Releases.md

To simply the process of read each release we have created a checklist for it.

	#!/usr/bin/env bpftrace
	/*
	* ralloc - Print allocations of R vectors.
	*
	* Copyright 2020 Aaron Jacobs
	* Licensed under the MIT License or the Apache License, version 2.0.
	*/

	BEGIN
	{

	use std::str;

	fn main() {
	// -- FROM: vec of chars --
	let src1: Vec<char> = vec!['j','{','"','i','m','m','y','"','}'];
	// to String
	let string1: String = src1.iter().collect::<String>();
	// to str
	let str1: &str = &src1.iter().collect::<String>();
	// to vec of byte

	$ cat /etc/containerd/config_runtimeclass.toml
	root = "/var/lib/containerd"
	state = "/run/containerd"
	oom_score = 0

	[grpc]
	address = "/run/containerd/containerd.sock"
	uid = 0
	gid = 0
	max_recv_message_size = 16777216

	# Running a DinD instance with Kata Containers

	1. Start on a clean Ubuntu 16.04 machine (if virtualized, enable VT-X support in your hypervisor like Hyper-V).

	2. Follow Kata's install guide for the Kata runtime [here](https://github.com/kata-containers/documentation/blob/master/install/ubuntu-installation-guide.md).

	3. Continue with the installation guide for docker [here](https://github.com/kata-containers/documentation/blob/master/install/docker/ubuntu-docker-install.md) and skip step 4!

	4. Rebuild the guest kernel with overlayfs & btrfs support: