crun

crun copied to clipboard

I have kernel 5.10.226, conmon 2.1.13/de270e6eb90b3, crun 1.21.0.0.0.71-b812c/commit 52ed5880c4568/+SYSTEMD +SELINUX +APPARMOR +CAP +SECCOMP +EBPF +CRIU +YAJL, systemd 353. I have a systemd unit with > ExecStart=/usr/local/bin/podman run -d --cap-add=IPC_LOCK --log-driver=none...

dilyanpalauzov

Implement the same change present in runc since version 1.12 (https://github.com/opencontainers/runc/pull/3967). Currently, when users attempts to clear locked flags (such as using rw to clear the MS_RDONLY flag), crun silently...

giuseppe

100% CPU usage when used in kubectl exec and connection is terminated

6

In my 3-node k8s cluster using: ``` root@nk8s1:~# /usr/libexec/crio/crun --version crun version 1.20 commit: 9c9a76ac11994701dd666c4f0b869ceffb599a66 rundir: /run/crun spec: 1.0.0 +SYSTEMD +SELINUX +APPARMOR +CAP +SECCOMP +EBPF +CRIU +YAJL root@nk8s1:~# crio --version...

plevart

Question: Supporting modifications to a read-only rootfs

3

(This is more of a question, but I wasn't sure where to post this other than the issue tracker.) I'm trying to use `crun` as the back-end for a sandboxing...

maleadt

Can't create containers if there is a v1 cpuset cgroup with exclusive cores

3

Steps to reproduce: 1. Boot with `systemd.unified_cgroup_hierarchy=0` (in my case it's in a VM with 2 cores) 2. Create a random cgroup `# mkdir /sys/fs/cgroup/cpuset/iamspecial` 3. Assign one of the...

michalsieron