-
Notifications
You must be signed in to change notification settings - Fork 4.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
gvisor: Use chroot instead of LD_LIBRARY_PATH #5735
Conversation
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: tstromberg The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Nice! lgtm
Codecov Report
@@ Coverage Diff @@
## master #5735 +/- ##
=======================================
Coverage 37.83% 37.83%
=======================================
Files 106 106
Lines 7773 7773
=======================================
Hits 2941 2941
Misses 4452 4452
Partials 380 380 |
@minikube-bot OK to test |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
lgtm! we probably just have to manually push gcr.io/k8s-minikube/gvisor:2
Replaces brittle
LD_LIBRARY_PATH
hack withchroot
to restart node services from the pod.This was previously using the Ubuntu
sudo
binary with libraries from the ISO image, which was safe until we updated the ISO image to a new glibc.Fixes #5724