cardil

$ podman-compose up --build --abort-on-container-exit
podman-compose version: 1.0.6
['podman', '--version', '']
using podman version: 4.7.0
** excluding:  set()
podman build -f app/Containerfile -t netalias_app app
STEP 1/4: FROM quay.io/fedora/fedora
STEP 2/4: RUN dnf install -y python3-redis python3-flask
--> Using cache c2bf03a022dc7e9cda93b8279310cde6fb33a790439d895f851949716ee18fdf
--> c2bf03a022dc

cardil

SELinux is preventing bwrap from unmount access on the filesystem .

*****  Plugin catchall (100. confidence) suggests   **************************

If you believe that bwrap should be allowed unmount access on the  filesystem by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# ausearch -c 'bwrap' --raw | audit2allow -M my-bwrap

cardil

host:
  arch: amd64
  buildahVersion: 1.32.0
  cgroupControllers:
  - cpu
  - io
  - memory
  - pids
  cgroupManager: systemd
  cgroupVersion: v2

cardil

00:34:05  Started by upstream project "triggers/knative-nightly-ci-trigger" build number 859
00:34:05  originally caused by:
00:34:05   Started by timer
00:34:05  Loading library jenkins-dsl@master
00:34:05  Attempting to resolve master from remote references...
00:34:05   > git --version # timeout=10
00:34:06   > git --version # 'git version 2.31.1'
00:34:06  using GIT_SSH to set credentials Jenkins SSH private key
00:34:06  [INFO] Currently running in a labeled security context
00:34:06   > /usr/bin/chcon --type=ssh_home_t /tmp/jenkins-gitclient-ssh17556338054709331370.key

cardil

---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: shell-cluster-admin
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: shell-cluster-admin

cardil

Building function image
Pulling image gcr.io/paketo-buildpacks/builder:base
29dc7596322b: Already exists 
ed10c4dc1cb9: Already exists 
baabd6616689: Already exists 
70e0bea64ce8: Already exists 
5128128e1ba9: Already exists 
5e995c53af94: Already exists 
c971d13c0b7c: Already exists 
d9853c09e885: Already exists 

cardil

#!/usr/bin/env bash

set -Eeuo pipefail

function error_handler() {
  local code="${1:-${?}}"
  abort "🚨 Error (code: ${code}) occurred at ${BASH_SOURCE[1]}:${BASH_LINENO[0]}, with command: ${BASH_COMMAND}"
}

function abort() {

cardil

kubectl apply -f https://raw.githubusercontent.com/cardil/openshift-serverless-pres-notes/master/serverless-subscription.yaml
while ! kubectl get csv -n openshift-serverless -l operators.coreos.com/serverless-operator.openshift-serverless= 1>/dev/null 2>&1; do sleep 1; done
kubectl wait --for=jsonpath='{.status.phase}'=Succeeded \
  --timeout=5m csv -n openshift-serverless \
  -l operators.coreos.com/serverless-operator.openshift-serverless=

kubectl apply -f https://raw.githubusercontent.com/cardil/openshift-serverless-pres-notes/master/serverless-bundle.yaml
while ! kubectl get knativeserving knative-serving -n knative-serving 1>/dev/null 2>&1; do sleep 1; done
kubectl wait --for=condition=Ready --timeout=5m \
  knativeserving knative-serving -n knative-serving

cardil

OpenSSH_8.6p1, OpenSSL 1.1.1l  FIPS 24 Aug 2021
debug1: Reading configuration data /home/ksuszyns/.ssh/config
debug1: Reading configuration data /etc/ssh/ssh_config
debug3: /etc/ssh/ssh_config line 55: Including file /etc/ssh/ssh_config.d/50-redhat.conf depth 0
debug1: Reading configuration data /etc/ssh/ssh_config.d/50-redhat.conf
debug2: checking match for 'final all' host github.com originally github.com
debug3: /etc/ssh/ssh_config.d/50-redhat.conf line 3: not matched 'final'
debug2: match not found
debug3: /etc/ssh/ssh_config.d/50-redhat.conf line 5: Including file /etc/crypto-policies/back-ends/openssh.config depth 1 (parse only)
debug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config

cardil

apiVersion: messaging.knative.dev/v1beta1
kind: KafkaChannel
metadata:
  name: kafka-channel-6
  labels:
    app: kafka-channel-6
    app.kubernetes.io/component: kafka-channel-6
    app.kubernetes.io/instance: kafka-channel-6
    app.kubernetes.io/name: kafka-channel-6
spec: