Run tests used in various high-level container runtimes

[utam0k]

Overview

The actual use of youki is high-level container runtime. So the ci should be included to make sure that it can be used with some of the major high-level container runtimes.

Target

• Docker
• Podman
• containerd
• cri-o

[nasirhm]

Sure, I would like to work on it.

[utam0k]

@nasirhm Sure! I assigned you. This issue is very abstract. If you have any questions, please let me.

[nasirhm]

Thank You @utam0k , Are we planning to set up CI Pipelines to test Youki with Docker, Podman, Containerd and CRI-O ?

[utam0k]

Are we planning to set up CI Pipelines to test Youki with Docker, Podman, Containerd and CRI-O ?

Yes, however, if you have a better way, that is fine.

[utam0k]

@nasirhm Hello. Do you have any problems? I can help you ;)

[Yuan-Zhuo]

Sorry for replying in this instead of opening a new one.(I think my question is very similar to this one. )

I am trying to find a way to tell containerd to use the youki instead of runc. But I don’t know how to do. Is there some relevant documents?

[utam0k]

@Yuan-Zhuo
I'm not familiar with containerd, however, this document may help you. You may be able to use it by changing runtime to the path of the youki binary.
If you succeed in getting it to work, I'd like to add documentation on how to do it.

I am trying to find a way to tell containerd to use the youki instead of runc. But I don’t know how to do. Is there some relevant documents?

[Yuan-Zhuo]

Thanks for your reply! I also tried to modify the runtime in /etc/containerd/config.toml before, but it didn't work.
I just asked for help discussions-6162 in the containerd community and got a reply. Their approach is to simply replace runc with another runtime. I tested Youki and crun and it works.

> sudo cp ./youki /usr/sbin/runc
> sudo ctr run --rm --memory-limit 1 docker.io/library/fedora:latest test
ctr: failed to create shim: OCI runtime create failed: unable to retrieve OCI runtime error (invalid character 'D' looking for beginning of value): runc did not terminate successfully: exit status 1: unknown

It can be seen from the error message that the replacement is successful, because the error report of runc will be

> sudo ctr run --rm --memory-limit 1 docker.io/library/fedora:latest test      
ctr: failed to create shim: OCI runtime create failed: container_linux.go:380: starting container process caused: process_linux.go:545: container init caused: process_linux.go:508: setting cgroup config for procHooks process caused: unable to set memory limit to 1 (current usage: 1122304, peak usage: 3268608): unknown

But it seems that we cannot get the real runtime from the go program( I am not sure about the mechanism of this package)

package main

import (
	"fmt"
	"log"

	"github.com/containerd/containerd"
)

func main() {
	if err := testCrun(); err != nil {
		log.Fatal(err)
	}
}

func testCrun() error {
	client, err := containerd.New("/run/containerd/containerd.sock")
	if err != nil {
		return err
	}
	defer client.Close()
        
        # get runtime
	fmt.Println(client.Runtime())
	return nil
}

No matter it is runc, crun or youki, the output is always like this

io.containerd.runc.v2

[utam0k]

Duplicate #584 #585

[gattytto]

@Yuan-Zhuo I'm not familiar with containerd, however, this document may help you. You may be able to use it by changing runtime to the path of the youki binary. If you succeed in getting it to work, I'd like to add documentation on how to do it.

I am trying to find a way to tell containerd to use the youki instead of runc. But I don’t know how to do. Is there some relevant documents?

for the specifics of testing I think the best fit would be tekton-cd as it supports using the runtimeClassName annotation for cloud-native ci/cd tasks.

example:

apiVersion: tekton.dev/v1alpha1
kind: TaskRun
metadata:
  name: pipeline-test-auth
  namespace: default
spec:
  params:
    - name: revision
      value: v1alpha1
  serviceAccountName: build-bot
  podTemplate:
    securityContext:
      runAsNonRoot: true
      runAsUser: 1724
    runtimeClassName: kata

[utam0k]

Sorry for replying in this instead of opening a new one.(I think my question is very similar to this one. )

I am trying to find a way to tell containerd to use the youki instead of runc. But I don’t know how to do. Is there some relevant documents?

@gattytto
Thanks for your advice. Now, I'm trying this!
#514