Commit Graph

15384 Commits

Author SHA1 Message Date
Sebastien Boeuf
043761f2c3 docs: Add a quickstart about Kata Containers and NEMU
This documentation is a short document explaining how to make Kata
Containers running with the NEMU hypervisor.

Fixes #267

Signed-off-by: Sebastien Boeuf <sebastien.boeuf@intel.com>
2018-10-11 10:58:04 -07:00
Archana Shinde
8f1b28da34 network: Sort endpoints by name
Sort endpoints by name to control the order in which
they are passed to the VM as the interface name inside
the VM depends on the order in which it is passed.

Long term we should come up with a more robust approach.

Fixes #785

Signed-off-by: Archana Shinde <archana.m.shinde@intel.com>
2018-10-11 09:23:49 -07:00
Sebastien Boeuf
7fdfc6a4c9 qemu: Add support for romfile option
Any device inheriting from virtio-pci can specify a ROM file. This
option is provisioned by default with "efi-virtio.rom", but most
of the time, firmwares such as OVMF or seabios will already support
what is provided by this ROM file.

In order to reduce the "forced" dependency on such ROM file, govmm
should provide an empty path if the consumer of the library does not
provide one.

This patch reorganizes the list of devices, so that it gets easier to
list which devices inherit from virtio-pci, and then adds the romfile
option to every single device that support this option.

Signed-off-by: Sebastien Boeuf <sebastien.boeuf@intel.com>
2018-10-10 17:17:36 -07:00
Rob Bradford
35b7308881
Merge pull request #57 from markdryan/contributing-security
Update guidelines on security issue reporting
2018-10-10 15:09:21 +01:00
Mark Ryan
e74de3c7f1 Update guidelines on security issue reporting
This commit clarifies the process to be used when reporting security issues.

Signed-off-by: Mark Ryan <mark.d.ryan@intel.com>
2018-10-10 10:05:58 +02:00
James O. D. Hunt
37d182463a
Merge pull request #161 from marcov/suse-rootfs
Add support for suse rootfs
2018-10-09 09:39:18 +01:00
James O. D. Hunt
0ce16deab3
Merge pull request #261 from amshinde/intel-gpu-use-case
use-cases: Add documentation for using Intel GPU with Kata
2018-10-09 09:31:31 +01:00
Peng Tao
eb77a41535 qemu: make saveSandbox wait for migration completion
Then we can remove the arbitrary sleep waiting for migration
completion when creating a tempalte vm.

Fixes: #728

Signed-off-by: Peng Tao <bergwolf@gmail.com>
2018-10-09 09:52:25 +08:00
Archana Shinde
647e535c5b
Merge pull request #181 from marcov/set-runtime
tests: handle docker set runtime for systemd / sysconfig
2018-10-08 15:50:52 -07:00
Marco Vedovati
24dd8562c9
Merge pull request #179 from jodh-intel/sub-sort-image-size-summary
tests: Sort size summary by image size and rootfs size
2018-10-08 19:27:08 +02:00
Jose Carlos Venegas Munoz
3ff5b41e58
Merge pull request #218 from nitkon/qemu
qemu-vanilla: Make spec-template file requirement arch-specific
2018-10-08 12:24:22 -05:00
Archana Shinde
15d38d390f use-cases: Add documentation for using Intel GPU with Kata
This document decsribes how an Intel GPU can be used with
Kata Containers in GVT-g and GVT-d mode.
An example of an actual workload will be added in the future.

Fixes #260

Signed-off-by: Archana Shinde <archana.m.shinde@intel.com>
2018-10-08 10:20:24 -07:00
Marco Vedovati
3b3f044463 tests: handle docker set runtime for systemd / sysconfig
Detect when dockerd config is sourced from a sysconfig file instead of
being hardcoded in the systemd unit file, and improve re matching for the
two cases.

Fixes: #180

Signed-off-by: Marco Vedovati <mvedovati@suse.com>
2018-10-08 13:25:45 +02:00
Sebastien Boeuf
5770f40f4b
Merge pull request #55 from jcvenegas/virtio-balloon
qemu: Add virtio-balloon device suppport.
2018-10-05 10:53:46 -07:00
Julio Montes
cb4392542b
Merge pull request #217 from jcvenegas/fix-image
image: Fix image build
2018-10-05 11:30:01 -05:00
Jose Carlos Venegas Munoz
ec83abe69e qemu: Add virtio-balloon device suppport.
Add support for virtio-balloon.

- Add test
- Support disable-modern
- Support deflate-on-oom

Signed-off-by: Jose Carlos Venegas Munoz <jose.carlos.venegas.munoz@intel.com>
2018-10-05 11:18:31 -05:00
Nitesh Konkar
7318b4b660 qemu-vanilla: Make spec-template file requirement arch-specific
The spec-template file looks for x86 specific
files irrespective of the arch on which
packaging is done for.

Fixes: #216

Signed-off-by: Nitesh Konkar niteshkonkar@in.ibm.com
2018-10-05 20:23:39 +05:30
James O. D. Hunt
fc4c23fdbb tests: Sort size summary by image size and rootfs size
Sort the table of image sizes by rootfs size after having sorted by
image size so that the smaller rootfs images appear before larger ones
when the image size is the same.

Fixes #178.

Signed-off-by: James O. D. Hunt <james.o.hunt@intel.com>
2018-10-05 15:52:33 +01:00
Graham Whaley
a4912d69f1
Merge pull request #213 from nitkon/golang
obs-packaging: Make golang hash dependency arch-specific
2018-10-05 09:52:05 +01:00
Nitesh Konkar
294b658cd2 obs-packaging: Make golang hash dependency arch-specific
Fixes: #212

Signed-off-by: Nitesh Konkar niteshkonkar@in.ibm.com
2018-10-05 13:35:05 +05:30
Sebastien Boeuf
cf87c3b04e
Merge pull request #215 from jcvenegas/enable-evged-kernel
kernel: enable evged.
2018-10-04 14:13:50 -07:00
Jose Carlos Venegas Munoz
eb010fa9df kernel: enable evged.
Add patch to enable evged,  the config option cannot be set normally since it
breaks current kata supported machine types.

Fixes: #214

Signed-off-by: Jose Carlos Venegas Munoz <jose.carlos.venegas.munoz@intel.com>
2018-10-04 14:52:18 -05:00
GabyCT
07af37e07d
Merge pull request #253 from grahamwhaley/20180925_selinux_limitation
Limitations: add selinux support limitation
2018-10-04 12:01:03 -05:00
Graham Whaley
ec9f9d428e
Merge pull request #251 from jodh-intel/improve-k8s+cri-containerd-howto
docs: Clean up k8s with cri-containerd howto
2018-10-04 13:23:41 +01:00
Manohar Castelino
c3cfe8204a
Merge pull request #805 from sboeuf/fix_virt
virtcontainers: qemu: Add proper support for virt machine type
2018-10-03 17:19:07 -07:00
Archana Shinde
a0968ce1ce
Merge pull request #506 from amshinde/macvlan-support
network: Add support for macvlan and macvtap driver
2018-10-03 14:19:14 -07:00
Marco Vedovati
83d883826b osbuilder: Add support for openSUSE rootfs image
Add support for building a rootfs image based on openSUSE Leap.

Fixes: #33

Signed-off-by: Marco Vedovati <mvedovati@suse.com>
2018-10-03 20:23:35 +02:00
Sebastien Boeuf
dffb4f96ae virtcontainers: qemu: Add proper support for virt machine type
The virt machine type provided by the NEMU project needs to be
supported the same way we support pc and q35 machine types.

First, this patch takes care of adding the hotpluggable block device
capability to this machine type, this way when using devicemapper, we
prevent the code from falling back on using 9pfs instead of SCSI.

It also add one or several bridges to this machine type, as the code
is tightly coupled to the fact that a bridge is required for PCI
hotplug.

At last, it changes the name of the PCI host bridge (main bus), to
use "pcie.0". The default set up from pc machine type "pci.0" is not
suitable for this machine type.

Fixes #804

Signed-off-by: Sebastien Boeuf <sebastien.boeuf@intel.com>
2018-10-03 10:04:02 -07:00
Archana Shinde
3c7cf589ad tests: Add additional network tests to verifu link creation functions
Add tests to verify bridge, tap and macvtap link creation.

Signed-off-by: Archana Shinde <archana.m.shinde@intel.com>
2018-10-03 09:46:16 -07:00
Archana Shinde
378191a52c tests: Add tests for macvlan and macvtap endpoints
Add unit tests in network_test.go and qemu_arch_base_test.go
for macvlan and macvtap network endpoints.

Signed-off-by: Archana Shinde <archana.m.shinde@intel.com>
2018-10-03 09:46:16 -07:00
Rob Bradford
53c0c33bb2
Merge pull request #54 from jodh-intel/show-qemu-path-on-launch
qemu: Show full path to qemu binary at launch time
2018-10-03 16:48:47 +01:00
James O. D. Hunt
46970781fa qemu: Show full path to qemu binary at launch time
Rather than show the generic "qemu", log the full path to the
particular qemu binary being used.

Signed-off-by: James O. D. Hunt <james.o.hunt@intel.com>
2018-10-03 16:41:08 +01:00
Jose Carlos Venegas Munoz
45a5613a91
Merge pull request #208 from nitkon/master
create-repo-branch: Skip repo branch qemu-lite for non-amd64
2018-10-03 08:20:42 -05:00
Archana Shinde
def070d651 golint: Refactor to reduce cyclomatic complexity
Introduce function  getLinkForEndpoint to reduce cyclomatic
complexity.

Signed-off-by: Archana Shinde <archana.m.shinde@intel.com>
2018-10-02 17:39:48 -07:00
Archana Shinde
417c1f07f9 macvtap: Add support for macvtap
Plugin may provide a macvtap interface. Add support for
directly attaching this to the VM.

Signed-off-by: Archana Shinde <archana.m.shinde@intel.com>
2018-10-02 17:39:48 -07:00
Sebastien Boeuf
0de7572f7b vendor: Update govmm vendoring
Shortlog:

ef72505 qemu: Fix the support of PCIe bridge
56f645e qmp: add ExecuteQueryMigration
a429677 govmm: fix memory prealloc
1130aab qmp: add "query-cpus" support

Signed-off-by: Sebastien Boeuf <sebastien.boeuf@intel.com>
2018-10-02 17:15:14 -07:00
Archana Shinde
581ff17857 macvlan: Assign random MAC address
Macvtap interfaces require mac addresses to be unique even
though they may be in a separate namespace. Hence use a randomly
generate MAC address.

Signed-off-by: Archana Shinde <archana.m.shinde@intel.com>
2018-10-02 16:23:50 -07:00
Archana Shinde
8847af8343 network: Add support for macvlan driver
Add support for macvlan driver by bridging it with a macvtap or
tap+bridge and moving the mac and ip address from the
macvlan to the bridged interface.

Fixes #162

Signed-off-by: Archana Shinde <archana.m.shinde@intel.com>
2018-10-02 16:23:50 -07:00
Sebastien Boeuf
f03df80fc3
Merge pull request #53 from sboeuf/fix_pcie_bridge
qemu: Fix the support of PCIe bridge
2018-10-02 15:47:02 -07:00
Sebastien Boeuf
ef7250508c qemu: Fix the support of PCIe bridge
In case the type of bridge is PCIEBridge, which we expect as ending
up using pcie-pci-bridge device from Qemu, the properties chassis_nr
and shpc don't exist.

This commit simply fixes this use case by removing those parameters
from the command line.

Signed-off-by: Sebastien Boeuf <sebastien.boeuf@intel.com>
2018-10-02 15:35:49 -07:00
Sebastien Boeuf
c061fe1ff5
Merge pull request #802 from jcvenegas/fix-memory-update
memory: update: Update state using the memory removed
2018-10-02 15:23:11 -07:00
Jose Carlos Venegas Munoz
1f5792ecbb test: fix unit test nil pointer.
Add filesystem to qemu object.
Fix mock_hypervisor

Signed-off-by: Jose Carlos Venegas Munoz <jose.carlos.venegas.munoz@intel.com>
2018-10-02 15:58:08 -05:00
Jose Carlos Venegas Munoz
4697cf3c79 memory: update: Update state using the memory removed.
If the memory is reduced , its cgroup in the VM was updated properly. But the
runtime assumed that the memory was also removed from the VM.

Then when it is added more memory again, more is added (but not needed).

Fixes: #801

Signed-off-by: Jose Carlos Venegas Munoz <jose.carlos.venegas.munoz@intel.com>
2018-10-02 14:38:21 -05:00
Nitesh Konkar
596fb8ce32 obs-packaging: Skip packaging qemu-lite for non-amd64 arch
Skip packaging for qemu-lite
when releasing packages for
non-amd64 archs.

Fixes: #206

Signed-off-by: Nitesh Konkar niteshkonkar@in.ibm.com
2018-10-02 23:34:55 +05:30
Archana Shinde
532e0bbf75
Merge pull request #772 from amshinde/block-support-q35
block: Advertise block support for q35
2018-10-02 10:03:56 -07:00
Jose Carlos Venegas Munoz
47010dd2ea image: Fix image build
Update variables needed by osbuilder.

Also fix query to get the initrd base OS.

Fixes: #210

Signed-off-by: Jose Carlos Venegas Munoz <jose.carlos.venegas.munoz@intel.com>
2018-10-02 11:50:37 -05:00
Graham Whaley
c273c95aca
Merge pull request #202 from nitkon/patch-2
create-repo-branch.sh: Fix a typo
2018-10-02 15:42:51 +01:00
Graham Whaley
caf485d3da
Merge pull request #170 from marcov/parallel-build
tests: parallel images build support
2018-10-02 14:38:49 +01:00
Graham Whaley
1c24b7b083
Merge pull request #204 from nitkon/patch-3
obs-packaging: Makefile: Use -prune to delete a directory
2018-10-02 13:28:15 +01:00
Marco Vedovati
7c443ed218 travis: remove AGENT_INIT env combinations
Remove the AGENT_INIT = yes / no combinations from .travis.yml,
as test_images.sh is now running both builds in parallel.

Signed-off-by: Marco Vedovati <mvedovati@suse.com>
2018-10-02 12:59:18 +02:00