kata-containers / runtime

Kata Containers version 1.x runtime (for version 2.x see https://github.com/kata-containers/kata-containers).
https://katacontainers.io/
Apache License 2.0
2.1k stars 375 forks source link

rsyslog service cannot be started in kata container #2699

Closed Xiaohua-Shen closed 4 years ago

Xiaohua-Shen commented 4 years ago

Description of problem

  1. start a ubuntu 16.04 container
    apiVersion: v1
    kind: Pod
    metadata:
    name: test
    annotations:
    io.kubernetes.cri.untrusted-workload: "true"
    spec:
    containers:
    - command:
    - sleep
    - 8h
    image: ubuntu:18.04
  2. exec into this pod and install rsyslog and start service
    apt-get update
    apt-get install rsyslog
    service rsyslog start

Expected result

the rsyslog should start successfully

Actual result

the rsyslog start with error

# service rsyslog start
 * Starting enhanced syslogd rsyslogd      

 rsyslog startup failure, child did not respond within startup timeout (60 seconds)
# service rsyslog status
 * rsyslogd is not running

for non kata containers (without annotation io.kubernetes.cri.untrusted-workload: "true"), above rsyslog can be started successfully.

related envs

kata: 1.10 kubernetes: 1.16 with cri-containerd to run kata

Xiaohua-Shen commented 4 years ago

it's caused by slow 9pfs.