Skip to content

Instantly share code, notes, and snippets.

@cguedel

cguedel/Issue.Dockerfile Secret

Last active November 30, 2021 19:58
Show Gist options
  • Save cguedel/c8c097787ea06a2e96e61a85a6b41b3a to your computer and use it in GitHub Desktop.
Save cguedel/c8c097787ea06a2e96e61a85a6b41b3a to your computer and use it in GitHub Desktop.
Download ZIP
Repro for commit issue
Raw
issue.bat
docker build . -t issue -f Issue.Dockerfile
docker run issue powershell -NoProfile -Command "$i=0; while($i -lt 100) { start-process powershell; $i++; echo $i }; get-process | Sort PagedMemorySize-Desc | Select Name, PagedMemorySize, VirtualMemorySize -First 10"
docker info
Raw
Issue.Dockerfile
# escape=`
FROM mcr.microsoft.com/windows/servercore:ltsc2019-amd64
ENV `
# Enable detection of running in a container
COMPLUS_RUNNING_IN_CONTAINER=1 `
COMPLUS_NGenProtectedProcess_FeatureEnabled=0
RUN `
# Install .NET Fx 4.8
curl -fSLo dotnet-framework-installer.exe https://download.visualstudio.microsoft.com/download/pr/7afca223-55d2-470a-8edc-6a1739ae3252/abd170b4b0ec15ad0222a809b761a036/ndp48-x86-x64-allos-enu.exe `
&& .\dotnet-framework-installer.exe /q `
&& del .\dotnet-framework-installer.exe `
&& powershell Remove-Item -Force -Recurse ${Env:TEMP}\* `
`
# Apply latest patch
&& curl -fSLo patch.msu http://download.windowsupdate.com/c/msdownload/update/software/updt/2021/09/windows10.0-kb5006366-x64-ndp48_efb89eb8650e3e6502d4e366e310dca651420678.msu `
&& mkdir patch `
&& expand patch.msu patch -F:* `
&& del /F /Q patch.msu `
&& dism /Online /Quiet /Add-Package /PackagePath:C:\patch\windows10.0-kb5006366-x64-ndp48.cab `
&& rmdir /S /Q patch `
`
# Apply patch to provide support for container limits
&& curl -fSLo patch.msu https://download.microsoft.com/download/5/a/4/5a4425d3-eb10-47a8-afe0-b07a19b20b1c/Windows10.0-KB9008392-x64-NDP48.msu `
&& mkdir patch `
&& expand patch.msu patch -F:* `
&& del /F /Q patch.msu `
&& dism /Online /Quiet /Add-Package /PackagePath:C:\patch\windows10.0-kb9008392-x64-ndp48.cab `
&& rmdir /S /Q patch `
`
# ngen .NET Fx
&& %windir%\Microsoft.NET\Framework64\v4.0.30319\ngen uninstall "Microsoft.Tpm.Commands, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=amd64" `
&& %windir%\Microsoft.NET\Framework64\v4.0.30319\ngen update `
&& %windir%\Microsoft.NET\Framework\v4.0.30319\ngen update
Raw
noissue.bat
docker build . -t noissue -f NoIssue.Dockerfile
docker run noissue powershell -NoProfile -Command "$i=0; while($i -lt 100) { start-process powershell; $i++; echo $i }; get-process | Sort PagedMemorySize-Desc | Select Name, PagedMemorySize, VirtualMemorySize -First 10"
docker info
Raw
NoIssue.Dockerfile
# escape=`
FROM mcr.microsoft.com/windows/servercore:ltsc2019-amd64
ENV `
# Enable detection of running in a container
COMPLUS_RUNNING_IN_CONTAINER=1 `
COMPLUS_NGenProtectedProcess_FeatureEnabled=0
RUN `
# Install .NET Fx 4.8
curl -fSLo dotnet-framework-installer.exe https://download.visualstudio.microsoft.com/download/pr/7afca223-55d2-470a-8edc-6a1739ae3252/abd170b4b0ec15ad0222a809b761a036/ndp48-x86-x64-allos-enu.exe `
&& .\dotnet-framework-installer.exe /q `
&& del .\dotnet-framework-installer.exe `
&& powershell Remove-Item -Force -Recurse ${Env:TEMP}\* `
`
# Apply latest patch
&& curl -fSLo patch.msu http://download.windowsupdate.com/c/msdownload/update/software/updt/2021/09/windows10.0-kb5006366-x64-ndp48_efb89eb8650e3e6502d4e366e310dca651420678.msu `
&& mkdir patch `
&& expand patch.msu patch -F:* `
&& del /F /Q patch.msu `
&& dism /Online /Quiet /Add-Package /PackagePath:C:\patch\windows10.0-kb5006366-x64-ndp48.cab `
&& rmdir /S /Q patch `
`
# ngen .NET Fx
&& %windir%\Microsoft.NET\Framework64\v4.0.30319\ngen uninstall "Microsoft.Tpm.Commands, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=amd64" `
&& %windir%\Microsoft.NET\Framework64\v4.0.30319\ngen update `
&& %windir%\Microsoft.NET\Framework\v4.0.30319\ngen update
Raw
output issue
Name PagedMemorySize VirtualMemorySize
---- --------------- -----------------
powershell 534384640 763453440
powershell 543674368 763203584
powershell 543461376 763441152
powershell 533970944 763437056
powershell 533938176 763994112
powershell 533901312 763482112
powershell 510017536 744833024
powershell 533827584 763482112
powershell 543723520 763990016
powershell 543653888 764243968
C:\Users\c.guedel\Documents\repro>docker info
Client:
Context: default
Debug Mode: false
Plugins:
app: Docker App (Docker Inc., v0.9.1-beta3)
cluster: Manage Mirantis Container Cloud clusters (Mirantis Inc., v1.9.0)
registry: Manage Docker registries (Docker Inc., 0.1.0)
Server:
Containers: 41
Running: 20
Paused: 0
Stopped: 21
Images: 82
Server Version: 20.10.8
Storage Driver: windowsfilter
Windows:
Logging Driver: json-file
Plugins:
Volume: local
Network: ics internal l2bridge l2tunnel nat null overlay private transparent
Log: awslogs etwlogs fluentd gcplogs gelf json-file local logentries splunk syslog
Swarm: inactive
Default Isolation: process
Kernel Version: 10.0 17763 (17763.1.amd64fre.rs5_release.180914-1434)
Operating System: Windows Server 2019 Datacenter Version 1809 (OS Build 17763.2300)
OSType: windows
Architecture: x86_64
CPUs: 8
Total Memory: 64GiB
Name: k8sqawin01
ID: 3AW4:2JIO:YBK5:T5K2:CJF2:NPNH:DCAO:EX3A:PDHO:2VVH:HW7V:M3D7
Docker Root Dir: C:\ProgramData\docker
Debug Mode: false
Registry: https://index.docker.io/v1/
Labels:
Experimental: false
Insecure Registries:
127.0.0.0/8
Live Restore Enabled: false
Raw
output no issue
Name PagedMemorySize VirtualMemorySize
---- --------------- -----------------
powershell 73916416 697229312
powershell 73809920 697700352
powershell 73777152 697749504
powershell 73965568 697454592
powershell 74027008 698261504
powershell 73961472 698269696
powershell 64147456 697737216
powershell 64147456 697208832
powershell 73764864 697221120
powershell 1728512 83787776
C:\Users\c.guedel\Documents\repro>docker info
Client:
Context: default
Debug Mode: false
Plugins:
app: Docker App (Docker Inc., v0.9.1-beta3)
cluster: Manage Mirantis Container Cloud clusters (Mirantis Inc., v1.9.0)
registry: Manage Docker registries (Docker Inc., 0.1.0)
Server:
Containers: 42
Running: 20
Paused: 0
Stopped: 22
Images: 82
Server Version: 20.10.8
Storage Driver: windowsfilter
Windows:
Logging Driver: json-file
Plugins:
Volume: local
Network: ics internal l2bridge l2tunnel nat null overlay private transparent
Log: awslogs etwlogs fluentd gcplogs gelf json-file local logentries splunk syslog
Swarm: inactive
Default Isolation: process
Kernel Version: 10.0 17763 (17763.1.amd64fre.rs5_release.180914-1434)
Operating System: Windows Server 2019 Datacenter Version 1809 (OS Build 17763.2300)
OSType: windows
Architecture: x86_64
CPUs: 8
Total Memory: 64GiB
Name: k8sqawin01
ID: 3AW4:2JIO:YBK5:T5K2:CJF2:NPNH:DCAO:EX3A:PDHO:2VVH:HW7V:M3D7
Docker Root Dir: C:\ProgramData\docker
Debug Mode: false
Registry: https://index.docker.io/v1/
Labels:
Experimental: false
Insecure Registries:
127.0.0.0/8
Live Restore Enabled: false
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment