Add CI testing for Fedora & CentOS

[tstromberg]

This should help us detect issues like #3498

[fejta-bot]

Issues go stale after 90d of inactivity.
Mark the issue as fresh with /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

Send feedback to sig-testing, kubernetes/test-infra and/or fejta.
/lifecycle stale

[fejta-bot]

Issues go stale after 90d of inactivity.
Mark the issue as fresh with /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

Send feedback to sig-testing, kubernetes/test-infra and/or fejta.
/lifecycle stale

[tstromberg]

Still a valid issue.

[medyagh]

we still need to do this issue !

[afbjorklund]

From the number of issues reported, it seems like CentOS is more important to test than Fedora...

[tstromberg]

@afbjorklund - VM's are cheap, so we may as well do both.

The idea was that Fedora would find breaking changes sooner, by the nature of the distribution.

[afbjorklund]

Currently Fedora is thoroughly broken for kubernetes, since they have changed to cgroups v2.

See https://fedoraproject.org/wiki/Changes/CGroupsV2

So I guess (for now), that we would have to revert such a Fedora 31 VM to use cgroups v1 instead...

systemd.unified_cgroup_hierarchy=0

[afbjorklund]

Any progress on this ?

[blues-man]

+1

[tstromberg]

Bumping this up because we've seen some Fedora 32 specific issues recently.

[afbjorklund]

Here is the configuration that I have been using:

    sudo yum install -y net-tools conntrack-tools

    # revert /usr/lib/sysctl.d/00-system.conf
    cat <<EOF | sudo tee /etc/sysctl.d/k8s.conf
net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1
EOF
    sudo sysctl --system

    # setenforce 0
    sudo sed -i 's/^SELINUX=enforcing$/SELINUX=permissive/' /etc/selinux/config

    # cgroups v1: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1757078
    sudo grubby --update-kernel=ALL --args="systemd.unified_cgroup_hierarchy=0"

For the vagrant provisioner of centos/fedora 32.

[priyawadhwa]

we still want to do this, at the minimum with the docker driver