CC: kata-deploy: Set the snapshotter in the containerd runtime config

This is a patch that should **NOT** be forward ported to main, as there
we want to take a cleaner approach on configuring specific snapshotters
for specific runtime handlers.

However, for CC, for the v0.8.0 release of CC, this is good enough as it
is, and it'll allow us to set one snapshotter for all the deployments
done with the CoCo Operator.

This is the Kata Containers counterpart of the work, and there's still
work to be done on the Confidential Containers in order to make it work
as expected, as:
* Confidential Containers Operator has to expose to the users which
  snapshotter will be configured
* Confidential Containers Opereator, specifically the pre-install hook,
  will have to take care of actually installing and configuring the
  snapshotter, so it can be used.

Signed-off-by: Fabiano Fidêncio <fabiano.fidencio@intel.com>
This commit is contained in:
Fabiano Fidêncio 2023-08-22 08:48:32 +02:00
parent b588c1128c
commit 9fb0eb4076

View File

@ -309,6 +309,7 @@ function configure_containerd_runtime() {
[$runtime_table] [$runtime_table]
runtime_type = "${runtime_type}" runtime_type = "${runtime_type}"
cri_handler = "cc" cri_handler = "cc"
snapshotter = "${SNAPSHOTTER}"
privileged_without_host_devices = true privileged_without_host_devices = true
pod_annotations = ["io.katacontainers.*"] pod_annotations = ["io.katacontainers.*"]
EOF EOF
@ -414,6 +415,7 @@ function main() {
echo "* DEFAULT_SHIM: ${DEFAULT_SHIM}" echo "* DEFAULT_SHIM: ${DEFAULT_SHIM}"
echo "* CREATE_RUNTIMECLASSES: ${CREATE_RUNTIMECLASSES}" echo "* CREATE_RUNTIMECLASSES: ${CREATE_RUNTIMECLASSES}"
echo "* CREATE_DEFAULT_RUNTIMECLASS: ${CREATE_DEFAULT_RUNTIMECLASS}" echo "* CREATE_DEFAULT_RUNTIMECLASS: ${CREATE_DEFAULT_RUNTIMECLASS}"
echo "* SNAPSHOTTER: ${SNAPSHOTTER}"
# script requires that user is root # script requires that user is root
euid=$(id -u) euid=$(id -u)