Skip to content

WIP#33

Draft
zaymat wants to merge 30 commits intodatadogfrom
mayeul/nftables
Draft

WIP#33
zaymat wants to merge 30 commits intodatadogfrom
mayeul/nftables

Conversation

@zaymat
Copy link
Copy Markdown

@zaymat zaymat commented Sep 12, 2025

No description provided.

zaymat and others added 26 commits August 21, 2025 10:05
microVM sandbox resources are computed from pod sandbox annotations.
In particular, the number of vCPU is calculated by using CPU quota
divided by CPU period. However, on clusters where CFS quotas are disabled,
or if the pod doesn't specify any limit, the compute size is 0.
When using resource hot pluging, the value value will be the size of the
CPU set, which doesn't impact the performance of the microVM pod. But when
using static sandbox management, the computed value will be 0 and the
microVM will be dramatically undersized.

This change takes into account CPU shares while computing the number of vCPU,
and default the CPU Shares/1024 in case CPU quota and/or periods are zeros.
Co-authored-by: Maxime VISONNEAU <maxime.visonneau@gmail.com>
- Add scratch-based Dockerfile for kata data volume
- Move Dockerfile to docker/ subdir and fix config file handling
- Fix Dockerfile to extract only essential kata files
- Add containerd runtime dropin configuration files

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
An early call to closing the stdin channel made the stdout & stderr also closed.
This waits for stdout & stderr to be properly finished by reading the whole buffer before closing everything.
On the other, this also fixes a race condition where it was impossible to run multiple execs until the other one was over.
This moves the lock only where it is necessary without locking exec processes.

Fixes kata-containers#10387

Signed-off-by: Maxime Bertin <mbertin@luccasoftware.com>
Co-authored-by: Maxime Bertin <mbertin@luccasoftware.com>
The WORKFLOW_TOKEN no longer exists, so artefact uploads fail. Use
the built-in token instead.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants