k3s-io / k3s-root Goto Github PK

View Code? Open in Web Editor NEW

47.0 47.0 34.0 196 KB

K3s agent user space binaries

License: Apache License 2.0

Shell 88.58% Makefile 11.42%

k3s-root's People

Contributors

Stargazers

Watchers

k3s-root's Issues

Upgrade to buildroot LTS 2019.02

clarify that k3s-root is not pure "apache-2" licensed

My understanding is that the license declaration is just for the k3s-root specific part, not for the embedded components like busybox. we could be more careful and specify GPLv2?

ebtables-legacy segfauls on s390x with SLE15-SP2

I just took binaries from ~~https://github.com/k3s-io/k3s-root/releases/download/v0.10.0-rc.0/k3s-root-xtables-s390x.tar~~ https://github.com/k3s-io/k3s-root/releases/download/v0.10.0-rc.0/k3s-root-s390x.tar and executed on s390x VM with SLE15-SP2:

./bin/aux/ebtables-legacy
Segmentation fault (core dumped)

kernel info:

sles@rancher-sles15sp2-jeos-ext4-devnet:~/k3s-root-release/k3s-root> uname -a
Linux rancher-sles15sp2-jeos-ext4-devnet 5.3.18-24.43-default #1 SMP Thu Dec 3 21:53:21 UTC 2020 (b48bf35) s390x s390x s390x GNU/Linux

just help:

strace ./bin/aux/ebtables-legacy --help
execve("./bin/aux/ebtables-legacy", ["./bin/aux/ebtables-legacy", "--help"], 0x3ffc307f3f8 /* 49 vars */) = 0
set_tid_address(0x10187d0)              = 29685
brk(NULL)                               = 0x2fef000
brk(0x2ff1000)                          = 0x2ff1000
mmap(0x2fef000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x2fef000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x3ff948fd000
--- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} ---
+++ killed by SIGSEGV (core dumped) +++
Segmentation fault (core dumped)

and list tables:

strace -f ./ebtables-legacy -L
execve("./ebtables-legacy", ["./ebtables-legacy", "-L"], 0x3ffe7cfe910 /* 45 vars */) = 0
set_tid_address(0x10187d0)              = 29793
brk(NULL)                               = 0x2fba000
brk(0x2fbc000)                          = 0x2fbc000
mmap(0x2fba000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x2fba000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x3ff9befd000
--- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} ---
+++ killed by SIGSEGV (core dumped) +++
Segmentation fault (core dumped)

Crun support?

It would be cool if k3s supported crun https://github.com/containers/crun

Remove socat as it is not needed anymore

socat was removed from containerd some time ago containerd/cri#1470 and this change was merged into the k3s containerd fork k3s-io/containerd@11a78d9

As far as I know we were just using socat for that. If that is the case we can remove it https://github.com/k3s-io/k3s-root/blob/master/buildroot/config#L3563

We are working on building k3s-root on s390x, since we need the binaries generated in k3s-root in order to build rke2 on s390x. Unfortunately, buildroot doesn't support static builds on s390x https://bugs.busybox.net/show_bug.cgi?id=14256
Would it be possible to use shared libraries instead of static?

False positives triggering on VirusTotal

Including k3s-root in vanilla buildroot build?

What is the preferred way of including k3s-root in Buildroot built Linux image? I imagine building the k3s-root separately and adding the produced binaries using BR2_ROOTFS_OVERLAY is one option. Is there a better way?

scripts should verify checksum

To detect potential compromise, the scripts should verify checksum here

k3s-root/scripts/download

Line 9 in 38468f8

 curl -fL https://buildroot.org/downloads/buildroot-${BUILDROOT_VERSION}.tar.bz2 | tar xvjf - -C /usr/src/buildroot --strip-components=1 

k3s-root/scripts/package

Lines 25 to 40 in 38468f8

 # download pre-built binaries 

 SLIRP4NETNS_VERSION="v1.1.8" 

 FUSE_OVERLAYFS_VERSION="v1.3.0" 

 uname_m="${BUILDARCH}" 

 case "${BUILDARCH}" in 

 "amd64") 

 uname_m="x86_64" ;; 

 "arm64") 

 uname_m="aarch64" ;; 

 "arm") 

 uname_m="armv7l" ;; 

 esac 

 curl -o /source/artifacts/${BUILDARCH}/bin/slirp4netns -sSL https://github.com/rootless-containers/slirp4netns/releases/download/${SLIRP4NETNS_VERSION}/slirp4netns-${uname_m} 

 chmod +x /source/artifacts/${BUILDARCH}/bin/slirp4netns 

 curl -o /source/artifacts/${BUILDARCH}/bin/fuse-overlayfs -sSL https://github.com/containers/fuse-overlayfs/releases/download/${FUSE_OVERLAYFS_VERSION}/fuse-overlayfs-${uname_m} 

 chmod +x /source/artifacts/${BUILDARCH}/bin/fuse-overlayfs

k3s-io / k3s-root Goto Github PK

k3s-root's People

Contributors

Stargazers

Watchers

Forkers

k3s-root's Issues

Upgrade to buildroot LTS 2019.02

clarify that k3s-root is not pure "apache-2" licensed

ebtables-legacy segfauls on s390x with SLE15-SP2

Crun support?

Remove socat as it is not needed anymore

s390x support

False positives triggering on VirusTotal

Including k3s-root in vanilla buildroot build?

scripts should verify checksum

Recommend Projects

React

Vue.js

Typescript

TensorFlow

Django

Laravel

D3

Recommend Topics

javascript

web

server

Machine learning

Visualization

Game

Recommend Org

Facebook

Microsoft

Google

Alibaba

D3

Tencent

Jobs

	# download pre-built binaries
	SLIRP4NETNS_VERSION="v1.1.8"
	FUSE_OVERLAYFS_VERSION="v1.3.0"
	uname_m="${BUILDARCH}"
	case "${BUILDARCH}" in
	"amd64")
	uname_m="x86_64" ;;
	"arm64")
	uname_m="aarch64" ;;
	"arm")
	uname_m="armv7l" ;;
	esac
	curl -o /source/artifacts/${BUILDARCH}/bin/slirp4netns -sSL https://github.com/rootless-containers/slirp4netns/releases/download/${SLIRP4NETNS_VERSION}/slirp4netns-${uname_m}
	chmod +x /source/artifacts/${BUILDARCH}/bin/slirp4netns
	curl -o /source/artifacts/${BUILDARCH}/bin/fuse-overlayfs -sSL https://github.com/containers/fuse-overlayfs/releases/download/${FUSE_OVERLAYFS_VERSION}/fuse-overlayfs-${uname_m}
	chmod +x /source/artifacts/${BUILDARCH}/bin/fuse-overlayfs