Commit Graph

263 Commits (f9e00f41953baa2c401c9be2a5e2395f0fe0a49e)

Author SHA1 Message Date
Thomas Strömberg 4ca9f79310
Merge pull request #3905 from afbjorklund/rktlet
The rktlet binary is missing, for the rkt container runtime
2019-03-21 10:32:39 -07:00
Thomas Strömberg 37e5e6d25f
Merge pull request #3921 from tstromberg/podman-no-tools
podman needs no install.tools
2019-03-21 10:30:41 -07:00
Thomas Stromberg 3304951683 podman needs no install.tools 2019-03-20 22:26:57 -07:00
Thomas Stromberg 4701ef8f1e Upgrade crio to v1.13.1, skip install.tools target as it isn't necessary 2019-03-20 22:20:49 -07:00
Thomas Stromberg 089e1c9cc2 Remove where a swap partition is created and activated 2019-03-20 20:50:49 -07:00
Anders F Björklund a380dbbeae Add rktlet from master 2019-03-18 20:47:37 +01:00
Anders F Björklund 39f1164542 Upgrade rkt to 1.30.0 2019-03-18 20:37:34 +01:00
Thomas Strömberg cc71bf9e82
Merge pull request #3758 from karmab/vhost_net_support
Enable tap and vhost-net in minikube iso
2019-03-06 14:16:37 -08:00
Miel Donkers 3fdda45e30
Enable kernel modules necessary for IPVS
To be able to use Kubernetes' IPVS proxy-mode, certain (IP Set) kernel modules
need to be enabled during kernel build time.
Building a new Minikube image with these modules enabled, will allow
others to switch kube-proxy in IPVS mode and experiment with it inside
Minikube.
2019-03-02 20:49:00 +01:00
karmab 46492b5cfc Enable tap and vhost-net in minikube iso 2019-02-26 09:46:32 +01:00
Yaroslav Skopets 24b639307e Add Netfilter `xt_socket` module to complete support for Transparent Proxying (TPROXY)
According to Kernel documentation, support for Transparent Proxying (TPROXY)
requires 2 Netfilter modules to be installed: `xt_TPROXY` and `xt_socket`.

So far, Minikube had only `xt_TPROXY`.

See https://www.kernel.org/doc/Documentation/networking/tproxy.txt
2019-02-17 18:54:50 +01:00
Anders Björklund 7e6c688116
Merge pull request #3666 from afbjorklund/docker-runc
Upgrade Docker, from 18.06.1-ce to 18.06.2-ce
2019-02-14 21:29:15 +01:00
Anders F Björklund bab67c46fc runc 0a012df
CVE-2019-5736
2019-02-13 20:26:43 +01:00
Anders F Björklund f92d76b13b Upgrade Docker, from 18.06.1-ce to 18.06.2-ce
CVE-2019-5736
2019-02-13 19:42:43 +01:00
Anders F Björklund abb5fc0af0 Show name as CRI-O, even if class is CRIO
Should use the proper name for display, even if we use a name more
suitable to naming classes and methods for the implementation...

Also use the --runtime=cri-o when testing, and update the github
repository now that cri-o has graduated from incubator to a sig.

See https://cri-o.io/
2019-02-12 21:03:51 +01:00
Anders F Björklund ad62f93012 crio: use official kube pause image from gcr 2019-02-05 22:14:28 +01:00
Thomas Stromberg 2702526566 Update crictl to v1.13.0 2019-02-04 09:18:57 -08:00
Kauê Doretto Grecchi d609aa3239 $TOOLBOX_DOCKER_ARCHIVE variable removed 2019-01-30 14:37:17 -02:00
Kauê Doretto Grecchi 4226ff70aa updated to fedora-29. issues #2889 $3058 2019-01-30 13:46:53 -02:00
Thomas Strömberg 0d02609e76
Merge pull request #3584 from afbjorklund/podman-1.0
Podman 1.0.0
2019-01-25 09:33:09 -08:00
Anders F Björklund aadbb1e42a containerd: upgrade from beta to release version 2019-01-24 20:57:03 +01:00
Anders F Björklund d18dce5850 Make containerd report the correct version
It was trying to use "git", on the tarball.

Closes #3454
2019-01-24 20:51:09 +01:00
Anders F Björklund 2caf997fcb Make sure to use correct git commit, not buildroot 2019-01-24 20:13:23 +01:00
Anders F Björklund 43eeaea420 Upgrade podman to 1.0.0 2019-01-24 20:13:23 +01:00
Anders F Björklund 18097177fd The podman github project has moved
From "projectatomic" to "containers"
2019-01-24 20:13:23 +01:00
Anders F Björklund 5a7e216caf Upgrade podman to 0.9.3 2019-01-24 20:13:18 +01:00
Anders F Björklund 2aa4927e78 Add basic registries.conf for docker.io registry 2019-01-24 20:09:39 +01:00
Leif Ringstad 108883ef16 Use mac as identifier for dhcp 2019-01-23 14:45:20 +01:00
Thomas Strömberg 227d560417
Merge pull request #3545 from tstromberg/runc-update
Install upstream runc into /usr/bin/docker-runc
2019-01-18 13:42:55 -08:00
Thomas Stromberg 5b7506574d Add remove TODO comments for docker 18.09 2019-01-18 09:09:51 -08:00
Thomas Stromberg 28d0edda80 Install upstream runc into /usr/bin/docker-runc 2019-01-18 08:07:23 -08:00
Thomas Strömberg e1804d24ba
Merge pull request #3535 from tstromberg/runc-update
Update to opencontainers/runc HEAD as of 2019-01-15
2019-01-17 09:27:27 -08:00
Thomas Stromberg 0219c67612 Pull in opencontainers/runc#1962 by updating to runc HEAD 2019-01-16 11:06:49 -08:00
Thomas Strömberg 3aa83674a9
Merge pull request #3441 from brb/2907-no-cni-conf-by-default
Do not include the default CNI config by default
2019-01-15 17:14:20 -08:00
Thomas Strömberg 5d9311bcdf
Merge pull request #3190 from afbjorklund/crio
Improve the default crio-bin configuration
2019-01-15 17:02:12 -08:00
Thomas Strömberg d8f2e99076
Merge pull request #3510 from brb/enable_ipvlan_module
Enable ipvlan kernel module
2019-01-14 14:30:27 -08:00
Thomas Stromberg 666a902ba7 Add newline 2019-01-11 10:53:29 -08:00
Martynas Pumputis 4792a62bc8 Enable ipvlan kernel module
This makes it possible to use ipvlan CNI plugins in minikube.

Signed-off-by: Martynas Pumputis <m@lambda.lt>
2019-01-09 14:50:49 +01:00
Thomas Stromberg b2831c871e Update crio-bin to v1.13.0 2019-01-08 16:22:21 -08:00
Martynas Pumputis 1252ad9a6d Get rid of /usr/libexec/kubernetes/kubelet-plugins/net/exec/k8s.conf
As per https://github.com/kubernetes/kubernetes/pull/32151, kubelet
doesn't search for CNI configs in /usr/libexec/kubernetes/kubelet-plugins/net/exec/
by default anymore.

Signed-off-by: Martynas Pumputis <m@lambda.lt>
2019-01-03 09:23:29 +01:00
Martynas Pumputis d982c4bf74 Do not include the default CNI config by default
Previously, minikube has been shipped with the default CNI config
(/etc/cni/net.d/k8s.conf) in its rootfs. This complicated a lot
when using a custom CNI plugin, as the default config was picked
by kubelet before the custom CNI plugin has installed its own CNI
config. So, the end result was that some Pods were attached to a
network defined in the default config, and some got managed by
the custom plugin.

This commit introduces the flag "--enable-default-cni" to
"minikube start" to trigger the provisioning of the default CNI
config.

Signed-off-by: Martynas Pumputis <m@lambda.lt>
2019-01-03 09:23:29 +01:00
Thomas Stromberg e4303ebb91 Disable vboxvideo and remove timesync-set-on-restore: neither work correctly w/ 5.1.x drivers in minikube 2018-12-20 13:54:57 -08:00
Thomas Stromberg 9a2600e791 Revert "Upgrade vbox from 5.1.38 to 5.2.22"
This reverts commit cbe5878ef2.
2018-12-20 11:46:54 -08:00
Thomas Stromberg cbe5878ef2 Upgrade vbox from 5.1.38 to 5.2.22 2018-12-17 11:59:35 -08:00
Thomas Stromberg cee128ad3a Disable timesyncd: not used in our environment 2018-12-17 11:59:23 -08:00
Thomas Stromberg c3ce6ba0ec Force vbox timesync at boot 2018-12-17 11:59:00 -08:00
Thomas Stromberg bbfb8ff4cb Add schedutils for ionice (used by k8s 1.12) 2018-12-05 16:15:36 -08:00
priyawadhwa 1c3df2dc3c Add NET_PRIO cgroup to iso (#3396)
This cgroup is required for running gvisor in minikube.
2018-12-03 14:44:00 -08:00
Thomas Stromberg f7ac166f6b crio is now in kubernetes-sigs rather than kubernetes-incubator. 2018-11-12 14:44:26 -08:00
Thomas Stromberg d2ac7ae28e Upgrade to crio v1.11.8 2018-11-07 15:05:51 -08:00
Akihiro Suda 8edef67226 Upgrade Docker, from 17.12.1-ce to 18.06.1-ce
Docker >= 18.06 is needed for securityContext.procMount (Kubernetes >= 1.12)

See kubernetes/kubernetes#64283 and docker/docker-ce@67fe100

Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2018-10-06 06:17:01 +09:00
Thomas Strömberg 79e95f8e67
Merge pull request #3152 from afbjorklund/cni
Upgrade cni and cni-plugins to release version
2018-10-03 21:55:07 -07:00
Thomas Strömberg 9ce572222e
Merge pull request #3195 from davidovich/ensure_dev_mounted
ensure that /dev has settled before operating
2018-10-03 21:36:55 -07:00
Thomas Strömberg 67d5fc8984
Merge pull request #3162 from ansiwen/upgrade-gluster
Upgrade gluster client in ISO to 4.1.5
2018-10-02 17:54:01 -07:00
Anders F Björklund da203377be Set storage driver explictly in the crio.conf
crio.conf(5) says:

   storage_driver=""
   CRIO storage driver (default is "overlay")

   Note:
   overlay and overlay2 are the same driver
2018-10-02 22:16:46 +02:00
Anders F Björklund 9f8ba5ffe6 Add registries entry for docker.io registry 2018-10-02 22:16:27 +02:00
Anders F Björklund 25e28c392f Use the standard root dir, and minikube-automount 2018-10-02 22:15:55 +02:00
Anders F Björklund c64b423304 Add /var/lib/containers to the list of bindmounts 2018-10-02 22:15:55 +02:00
Thomas Strömberg 96d0f14dde
Merge pull request #3160 from afbjorklund/crictl-bin
Install crictl from binary instead of from source
2018-10-01 16:43:01 -07:00
David Genest bb07acdc90 ensure that /dev has settled before operating
Minikube automount relies on a VM disk to be mounted (usually /dev/sda)
to provide .ssh credentials.

This commit adds a dependency on systemd-udev-settle to ensure that all devices
(including disks) are up and available before executing the mount
script.

We use systemd-udev-settle
https://github.com/systemd/systemd/blob/master/units/systemd-udev-settle.service.in

To ensure this. Note that in the above link, we can read a comment
stating that systemd-udev-settle is used to ensure a populated /dev
during bootup, which is exaclty what we want.

Signed-off-by: David Genest <david.genest@gmail.com>
2018-10-01 15:57:45 -04:00
Sven Anderson f39ccc84a6 Upgrade gluster client in ISO to 4.1.5 2018-09-24 22:16:17 +02:00
Anders F Björklund 0439a0ce6c Add psmisc package, for pstree command 2018-09-24 20:43:01 +02:00
Anders F Björklund 16be159cbd Install crictl from binary instead of from source
Since we already install docker and cni from binary
2018-09-24 20:03:54 +02:00
Anders F Björklund d8c8f0a896 Upgrade cni and cni-plugins to release version
Closes #3151
2018-09-22 10:40:03 +02:00
yanxuean 00a8b13e98 support containerd v1.2.0-beta.0
Signed-off-by: yanxuean <yan.xuean@zte.com.cn>
2018-08-21 09:28:33 -07:00
dlorenc bd9230f923 Fix the copyright header in our custom journald.conf 2018-08-20 10:23:17 -07:00
Anders F Björklund ec55fba5f0 Upgrade from kpod 0.1 to (new name) podman 0.4.1
Simple management tool for containers and images

"podman shares state with crio and so has the
capability to debug pods/images created by crio"

https://github.com/projectatomic/libpod/pull/145
2018-07-30 10:36:48 -07:00
Aaron Prindle a4606583e4 remove all localkube references from code, change /var/lib/localkube to /var/lib/minikube 2018-07-24 12:36:42 -07:00
dlorenc 2be51dc6bc Fix vboxsf host mounting.
vboxguest is included in 4.16, but not vboxsf.
I couldn't get vboxsf to compile for 4.16, so I downgraded to 4.15.
2018-07-16 09:49:54 -07:00
dlorenc fbd620a010 Update cri-tools to 1.11.1. 2018-07-16 09:49:54 -07:00
Sven Anderson 9b5795072e Add heketi and gluster dependencies to minikube.iso
This change adds gluster and heketi dependencies to buildroot config,
that is dm_snapshot, dm_thin_pool and XFS kernel modules, XFS tools,
and gluster itself.
2018-07-08 22:27:33 -07:00
Rohit Agarwal 0df67ee4af Changes to make 'virsh console minikube' work. 2018-06-11 08:45:59 -07:00
ijl 3c6a809253 Update linux_defconfig for 4.16 2018-06-11 07:31:17 -07:00
ijl 4c4cd31b02 linux 4.16, buildroot 2018.05
linux is upgraded to 4.16, binutils is upgraded to 2.30, and
libelf is installed for the newer kernel.

Other configuration changes are changes in defaults and ordering.

Now using glibc 2.27. systemd 237, and Go 1.10.

vbox-guest is removed because it's upstream as of linux 4.16.

More on buildroot at https://git.buildroot.net/buildroot/tree/CHANGES
2018-06-11 07:31:17 -07:00
Martynas Pumputis f8a52cb848 Enable openvswitch with vxlan (kernel module) 2018-06-07 09:07:57 -07:00
Martynas Pumputis d55203989f Enable dummy network interface (kernel module) 2018-06-07 09:07:57 -07:00
ijl 11dacb82a1 Build container for ISO uses ubuntu:18.04
This is a long-term release. 17.10 is approaching end of life.

https://www.ubuntu.com/info/release-end-of-life
2018-05-14 08:01:38 -07:00
AdamDang 1e409df919
Update crio.conf 2018-04-23 20:14:09 +08:00
Anders F Björklund 1a22f21886 Upgrade cri-o to version 1.10.0 2018-03-30 13:41:25 -07:00
Anders F Björklund 60ec8bdf06 Add crictl from cri-tools, to minikube.iso
We don't need critest, because it requires go anyway.
But kubeadm insists on crictl being available in path.
2018-03-30 08:32:19 -07:00
Matt Rickard 6ccc0198c7
Merge pull request #2597 from afbjorklund/docker
Upgrade Docker, from 17.09 to 17.12
2018-03-12 11:55:47 -07:00
Praveen Kumar 1327ea805c Issue #2599 Add sshfs support for minikube iso 2018-03-12 16:09:46 +05:30
Anders F Björklund cc965e3793 Upgrade Docker, from 17.09.0-ce to 17.12.1-ce 2018-03-11 18:46:22 +01:00
Fabian Deutsch 7f9756e71b iso: Enable KVM
This patch enables KVM support inside the ISO to support nesting.

Signed-off-by: Fabian Deutsch <fabiand@fedoraproject.org>
2018-02-22 10:42:20 -08:00
Stepan Stipl 30216a3b71 Add netfilter xt_ipvs module needed by Calico
Calico 3.0 needs xt_ipvs module, otherwise it fails to run (see
https://github.com/projectcalico/felix/blob/master/iptables/match_builder.go#L70-L76
for details).
2018-02-02 10:29:30 -08:00
Anders F Björklund 047be764d3 Downgrade docker from 17.12.0 back to 17.09.0 2018-01-17 08:21:26 -08:00
Anders F Björklund 565094e351 Upgrade Docker, from 17.06.0-ce to 17.12.0-ce 2018-01-17 08:21:26 -08:00
Anders F Björklund 3f92a9bd95 Make sure to create the /var/run/crio directory
The socket was moved there, so make sure that it actually exists!
Otherwise we will fail to create /var/run/crio.sock when starting.
2018-01-16 17:40:04 -08:00
Suraj Deshmukh 5d7d751db8 Change the cri-o socket location to upstream default
Right now the cri-o socket is placed in `/var/run/crio.sock`, this
commit changes it to `/var/run/crio/crio.sock` which is similar to
upstream.

Signed-off-by: Suraj Deshmukh <surajd.service@gmail.com>
2018-01-04 10:35:08 -08:00
yanxuean 9934697735 remove duplicate BR2_PACKAGE_BTRFS_PROGS
Signed-off-by: yanxuean <yan.xuean@zte.com.cn>
2017-12-26 13:14:33 -08:00
ijl 8ca92d4b0a kpod b85d0fa 2017-12-14 08:54:36 -08:00
ijl 25c7629ceb crio-bin v1.8.4 2017-12-14 08:54:36 -08:00
ijl e677c9639d runc 0fdc908 2017-12-14 08:54:36 -08:00
Vincent Batts 16c54fcdc4 crio: update to v1.0.3
Also, this fixes the version output from `kubectl describe node`.
Now it shows:
```
[...]
System Info:
 Machine ID:                    41af387f4d4e4a3eabcdd2454a7e17f9
 System UUID:                   B5BA9F83-3476-4B4A-943A-81E7A3953234
 Boot ID:                       7e616123-fa50-4fa9-8f47-88b2a09fbb81
 Kernel Version:                4.9.13
 OS Image:                      Buildroot 2017.02
 Operating System:              linux
 Architecture:                  amd64
 Container Runtime Version:     cri-o://1.0.3
 Kubelet Version:               v1.8.0
 Kube-Proxy Version:            v1.8.0
[...]
```

Signed-off-by: Vincent Batts <vbatts@hashbangbash.com>
2017-12-14 08:54:36 -08:00
ijl b2251409ce sysdig
This builds the sysdig kernel module, but not the userspace
program. That can be provided by a container.
2017-12-13 20:29:31 -08:00
ijl 85ca57a5ca Packages built with -O2 instead of default -Os 2017-12-10 17:48:06 -08:00
ijl 350e09d263 vbox-guest 5.1.30
5.1.18 won't build with more recent kernels.

https://www.virtualbox.org/wiki/Changelog-5.1
2017-12-08 13:50:36 -06:00
ijl 09fe456c27 linux 4.9.64 2017-12-07 15:02:19 -06:00
ijl 57d1b0ce70 openvmtools10 package removed in favor of buildroot
buildroot's version is now more recent than the forked package.
2017-12-07 15:02:19 -06:00
ijl 1ca3a42e97 crio-bin requires libglib2, libmount 2017-12-07 15:02:19 -06:00