maurice/snix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(snix/build): Don't enable cgroup namespace in oci build.

Browse source 
While we want it long term, disabing it for now as it causes runc
startup failure when it runs inside nested cgroup namespaces.

Change-Id: I121f1d79c6a02e68e7883e0edeba7f57627c20ed
Reviewed-on: https://cl.snix.dev/c/snix/+/30236
Reviewed-by: Florian Klink <flokli@flokli.de>
Tested-by: besadii
This commit is contained in:
Vova Kryachko 2025-03-21 16:19:38 +00:00
parent 357004b20d
commit 2bedbfdb18
1 changed files with 4 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

5
snix/build/src/oci/spec.rs
View file

@ -172,7 +172,10 @@ fn configure_linux(
LinuxNamespaceType::Ipc, LinuxNamespaceType::Ipc,
LinuxNamespaceType::Uts, LinuxNamespaceType::Uts,
LinuxNamespaceType::Mount, LinuxNamespaceType::Mount,
LinuxNamespaceType::Cgroup, // We want to create a cgroup namespace in the future to be able to trace resource usage
// For now it's disabled as it causes issues in cases where the host machine is running in a
// messed up cgroup
// LinuxNamespaceType::Cgroup,
]; ];
if !allow_network { if !allow_network {
namespace_types.push(LinuxNamespaceType::Network) namespace_types.push(LinuxNamespaceType::Network)