containers / podman

Podman: A tool for managing OCI containers and pods.
https://podman.io
Apache License 2.0
23.77k stars 2.42k forks source link

investigate alternative options for vsock forwarding #19982

Open dustymabe opened 1 year ago

dustymabe commented 1 year ago

In https://github.com/coreos/fedora-coreos-tracker/issues/1557 we added gvisor-tap-vsock-gvforwarder to Fedora CoreOS for use cases like hyperv and applehv, but with some agreement that there would be future investigation to see if we could reduce the size or otherwise remove the need for the extra package.

In a discussion with @baude we came up with a few ideas to be further investigated:

  1. Update the pasta networking stack that exists already to support vsock functionality. Then the pasta RPM that is already included will have what they need.
  2. Writing gvforwarder in another language to reduce size.
  3. Vendor in vsock/forwarding functionality into podman itself. As a hacky example /usr/bin/forwarder is a symlink to /usr/bin/podman and then the podman binary switches on $0 to act like the forwarder.

This ticket should serve to track the investigation and encourage discussion on the topic.

baude commented 1 year ago

I'm working to prioritize and solve this

github-actions[bot] commented 1 year ago

A friendly reminder that this issue had no activity for 30 days.

dustymabe commented 1 year ago

Hey @baude - any updates on your investigations here?