Research and evaluate K3S as Oniro container runtime engine

Value

Description

In scope

Out of Scope

Acceptance Criteria

Applicable Market Segments

Applicable Personas

added Doing label

changed iteration to Oniro Core Iterations Jul 1, 2022 - Jul 31, 2022

assigned to @ektor5

set weight to 2

added teamsystems label

changed milestone to %goofy beta

marked this issue as related to #19 (closed)

#!/bin/bash
# SPDX-License-Identifier: GPL-2.0-or-later 
# Author: Ettore Chimenti <ettore.chimenti@seco.com> 
#
# K3s test

# oniro kirkstone (goofy)

# add meta-virtualization to bblayers

# add to local.conf:
cat << EOF >> conf/local.conf
IMAGE_INSTALL:append = " packagegroup-k3s-node iotop ca-certificates"
DISTRO_FEATURES:append = " virtualization k8s seccomp"
MACHINE_ESSENTIAL_EXTRA_RRECOMMENDS:append = " kernel-modules"
INSANE_SKIP:kubernetes-misc:append = " file-rdeps"
EOF

# add to kernel (linux-intel):
cat << EOF >> taskstats.cfg
CONFIG_TASKSTATS=y
CONFIG_TASK_DELAY_ACCT=y
CONFIG_TASK_XACCT=y
CONFIG_TASK_IO_ACCOUNTING=y
CONFIG_SCHED_INFO=y
EOF

# add k3s_%.bbappend with /etc/rancher writables
mkdir -p oniro/meta-oniro-core/recipes-containers/k3s/
cat << EOF >> oniro/meta-oniro-core/recipes-containers/k3s/k3s_%.bbappend
# SPDX-FileCopyrightText: Ektor5
#
# SPDX-License-Identifier: Apache-2.0

inherit writables

WRITABLES = "rancher"
WRITABLE_PATH[rancher] = "/etc/rancher"
EOF

# build image
MACHINE=seco-intel-b68 bitbake oniro-image-base-dev

# resize appdata
gdisk /dev/sda
fsck -f /dev/sda6
resize2fs /dev/sda6

# on node
export HOST_IP='192.168.1.9'
sudo systemctl start etc-rancher.mount
sudo k3s agent -t $TOKEN -s "https://$HOST_IP:6443" \
	-d /run/mount/appdata/rancher/ \
	--snapshotter native

# on server
sudo k3s kubectl create deployment kubernetes-bootcamp --image=gcr.io/google-samples/kubernetes-bootcamp:v1

# writes occur in port forwarding
export POD_NAME=$(sudo k3s kubectl get pods -o go-template --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
sudo k3s kubectl port-forward -n default "pods/$POD_NAME" 8080
curl http://localhost:8080

# writes does not occur when asking directly
curl 'http://10.42.1.3:8080'

changed iteration to Oniro Core Iterations Aug 1, 2022 - Aug 31, 2022