☰

如何配置 kata 容器以与 systemd 一起使用

tag-icon • tag-icon linux systemd container
如何配置 kata 容器以与 systemd 一起使用

我正在尝试在 ubuntu 22.04 机器上使用 containerd 运行带有 systemd 的 kata 容器，但无法让它工作。我的期望是能够运行由 systemd 管理的容器内的所有进程。据我所知，使用 kata 容器应该很容易实现这一点，只需使用一个简单的 docker 镜像（可选使用 ubuntu 作为基础）和 systemd 作为入口点即可。

这是我尝试过的：

  • 使用 apt 安装了 Containerd
  • 按照我在他们的网站上找到的指南安装了 kata 容器github
  • 配置containerd使用kata容器作为运行时他们的向导:
  • 尝试运行此图像：
FROM ubuntu:22.04
LABEL maintainer="Enio Carboni"

ARG DEBIAN_FRONTEND=noninteractive

# Install: dependencies, clean: apt cache, remove dir: cache, man, doc, change mod time of cache dir.
RUN apt-get update \
    && apt-get install -y --no-install-recommends \
       software-properties-common \
       rsyslog systemd systemd-cron sudo \
    && apt-get clean \
    && rm -Rf /usr/share/doc && rm -Rf /usr/share/man \
    && rm -rf /var/lib/apt/lists/* \
    && touch -d "2 hours ago" /var/lib/apt/lists
RUN sed -i 's/^\($ModLoad imklog\)/#\1/' /etc/rsyslog.conf

RUN rm -f /lib/systemd/system/systemd*udev* \
  && rm -f /lib/systemd/system/getty.target

VOLUME ["/sys/fs/cgroup", "/tmp", "/run"]
CMD ["/lib/systemd/systemd"]

使用以下命令：sudo ctr run --runtime io.containerd.run.kata.v2 -t docker.io/eniocarboni/docker-ubuntu-systemd:20.04 ubuntu-systemd

  • 在容器内我可以看到/lib/systemd/systemdpid 1 但是当我尝试运行 systemctl 时我得到System has not been booted with systemd as init system (PID 1). Can't operate.

  • 我检查了容器内的 cgroup，它似乎不是从沙箱虚拟机安装的

  • 这是我的 kata-env 输出：

[Kernel]
  Path = "/opt/kata/share/kata-containers/vmlinux-6.1.38-114"
  Parameters = "systemd.unit=kata-containers.target systemd.mask=systemd-networkd.service systemd.mask=systemd-networkd.socket scsi_mod.scan=none"

[Meta]
  Version = "1.0.26"

[Image]
  Path = "/opt/kata/share/kata-containers/kata-ubuntu-latest.image"

[Initrd]
  Path = ""

[Hypervisor]
  MachineType = "q35"
  Version = "QEMU emulator version 7.2.0 (kata-static)\nCopyright (c) 2003-2022 Fabrice Bellard and the QEMU Project developers"
  Path = "/opt/kata/bin/qemu-system-x86_64"
  BlockDeviceDriver = "virtio-scsi"
  EntropySource = "/dev/urandom"
  SharedFS = "virtio-fs"
  VirtioFSDaemon = "/opt/kata/libexec/virtiofsd"
  SocketPath = "<<unknown>>"
  Msize9p = 8192
  MemorySlots = 10
  HotPlugVFIO = "no-port"
  ColdPlugVFIO = "no-port"
  Debug = false

[Runtime]
  Path = "/opt/kata/bin/kata-runtime"
  GuestSeLinuxLabel = ""
  Debug = false
  Trace = false
  DisableGuestSeccomp = true
  DisableNewNetNs = false
  SandboxCgroupOnly = false
  [Runtime.Config]
    Path = "/opt/kata/share/defaults/kata-containers/configuration-qemu.toml"
  [Runtime.Version]
    OCI = "1.0.2-dev"
    [Runtime.Version.Version]
      Semver = "3.2.0"
      Commit = "45687e3251604ccc71b595d37f14253c4584cd5f"
      Major = 3
      Minor = 2
      Patch = 0

[Host]
  Kernel = "6.2.0-1016-azure"
  Architecture = "amd64"
  VMContainerCapable = false
  SupportVSocks = true
  [Host.Distro]
    Name = "Ubuntu"
    Version = "22.04"
  [Host.CPU]
    Vendor = "AuthenticAMD"
    Model = "AMD Ryzen 7 5800X 8-Core Processor"
    CPUs = 8
  [Host.Memory]
    Total = 12013392
    Free = 1600656
    Available = 9015476

[Agent]
  Debug = false
  Trace = false

相关内容