11 Commits (2441e469502faac6287d4cec0f72a67aac455eab)

Author	SHA1	Message	Date
Edgar Lee	0ac4c6a056	Expose rootless containerd socket directories for external access ... Signed-off-by: Edgar Lee <edgarhinshunlee@gmail.com>	10 months ago
Brad Davidson	c02dceb7ad	Make rootless settings configurable ... Add enivironment variables for port-driver, cidr, mtu, and disable-host-loopback settings. Since rootless is still experimental, I don't think they deserve full CLI flag status. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>	2 years ago
Dirk Müller	fa0fa8b1d0	Update golangci-lint to 1.45.2 ... This requires a further set of gofmt -s improvements to the code, but nothing major. golangci-lint 1.45.2 brings golang 1.18 support which might be needed in the future. Signed-off-by: Dirk Müller <dirk@dmllr.de>	3 years ago
Akihiro Suda	e672c988e4	rootless: allow kernel.dmesg_restrict=1 ... When `/dev/kmsg` is unreadable due to sysctl value `kernel.dmesg_restrict=1`, bind-mount `/dev/null` into `/dev/kmsg` Fix issue 3011 Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>	4 years ago
Akihiro Suda	728ebcc027	rootless: remove rootful /run/{netns,containerd} symlinks ... Since a recent commit, rootless mode was failing with the following errors: ``` E0122 22:59:47.615567 21 kuberuntime_manager.go:755] createPodSandbox for pod "helm-install-traefik-wf8lc_kube-system(9de0a1b2-e2a2-4ea5-8fb6-22c9272a182f)" failed: rpc error: code = Unknown desc = failed to create network namespace for sandbox "285ab835609387f82d304bac1fefa5fb2a6c49a542a9921995d0c35d33c683d5": failed to setup netns: open /var/run/netns/cni-c628a228-651e-e03e-d27d-bb5e87281846: permission denied ... E0122 23:31:34.027814 21 pod_workers.go:191] Error syncing pod 1a77d21f-ff3d-4475-9749-224229ddc31a ("coredns-854c77959c-w4d7g_kube-system(1a77d21f-ff3d-4475-9749-224229ddc31a)"), skipping: failed to "CreatePodSandbox" for "coredns-854c77959c-w4d7g_kube-system(1a77d21f-ff3d-4475-9749-224229ddc31a)" with CreatePodSandboxError: "CreatePodSandbox for pod \"coredns-854c77959c-w4d7g_kube-system(1a77d21f-ff3d-4475-9749-224229ddc31a)\" failed: rpc error: code = Unknown desc = failed to create containerd task: io.containerd.runc.v2: create new shim socket: listen unix /run/containerd/s/8f0e40e11a69738407f1ebaf31ced3f08c29bb62022058813314fb004f93c422: bind: permission denied\n: exit status 1: unknown" ``` Remove symlinks to /run/{netns,containerd} so that rootless mode can create their own /run/{netns,containerd}. Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>	4 years ago
Akihiro Suda	43f7eaedf8	rootless: fix "stat /run/user/1000: no such file or directory" on `kubectl run` ... k3s was mounting a tmpfs on `/run` by itself, so it was hiding RootlessKit's `/run`. Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>	4 years ago
Erik Wilson	0aeea78060	Merge pull request #1444 from KnicKnic/k3s_build_windows ... K3s build windows (no agents)	5 years ago
Knic Knic	2346ccc63f	get build on windows and get api_server to work	5 years ago
Darren Shepherd	782004bec9	Create pidns for rootless	5 years ago
Akihiro Suda	490d6aefe0	rootless: fix mounting /var/lib/cni ... k3s was unable to start up when /var/lib/cni is missing on the host. Fix https://github.com/rancher/k3s/issues/470 Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>	6 years ago
Darren Shepherd	046a817818	Add rootless support	6 years ago