Skip to content

Instantly share code, notes, and snippets.

@glennswest
Created December 4, 2020 01:48
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save glennswest/8abcba93f8302541c4787a4d639b72a7 to your computer and use it in GitHub Desktop.
Save glennswest/8abcba93f8302541c4787a4d639b72a7 to your computer and use it in GitHub Desktop.
waddle test
[root@dev waddles]# ./build.sh
STEP 1: FROM golang:1.15-alpine AS builder
STEP 2: WORKDIR /build
--> Using cache 37c27a1502299b498125af46b1b46ad9ee854d2f4ad554796b7619419cff2aef
--> 37c27a15022
STEP 3: COPY go.mod go.sum ./
--> 41513128cd7
STEP 4: RUN go mod download
--> 22a432c803e
STEP 5: COPY . .
--> 2c28bbc59cd
STEP 6: ENV GO111MODULE=on CGO_ENABLED=0 GOOS=linux GOARCH=amd64
--> 7b023e8527d
STEP 7: RUN go build -o /build/bin/waddles .
--> 481f107f98f
STEP 8: FROM scratch
STEP 9: COPY --from=builder /build/bin/waddles /
--> ab25d8ebf6c
STEP 10: COPY waddles.toml ./
--> 0f76fdea5ab
STEP 11: COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
--> f96501edefd
STEP 12: ENTRYPOINT ["/waddles"]
STEP 13: COMMIT waddles
--> 03c3f650d28
03c3f650d287cb1ed69869299acb56c0e8faf8c5eab53d044cfef2870864547e
INFO[0000] podman filtering at log level debug
DEBU[0000] Called run.PersistentPreRunE(podman run --log-level debug -it waddles)
DEBU[0000] Reading configuration file "/usr/share/containers/containers.conf"
DEBU[0000] Merged system config "/usr/share/containers/containers.conf": &{Containers:{Devices:[] Volumes:[] ApparmorProfile:containers-default-0.22.0 Annotations:[] CgroupNS:private Cgroups:enabled DefaultCapabilities:[AUDIT_WRITE CHOWN DAC_OVERRIDE FOWNER FSETID KILL NET_BIND_SERVICE SETFCAP SETGID SETPCAP SETUID SYS_CHROOT] DefaultSysctls:[net.ipv4.ping_group_range=0 1] DefaultUlimits:[nproc=4194304:4194304] DefaultMountsFile: DNSServers:[] DNSOptions:[] DNSSearches:[] EnableLabeling:true Env:[PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin TERM=xterm] EnvHost:false HTTPProxy:false Init:false InitPath: IPCNS:private LogDriver:k8s-file LogSizeMax:-1 NetNS:bridge NoHosts:false PidsLimit:2048 PidNS:private SeccompProfile:/usr/share/containers/seccomp.json ShmSize:65536k TZ: Umask:0022 UTSNS:private UserNS:host UserNSSize:65536} Engine:{CgroupCheck:false CgroupManager:systemd ConmonEnvVars:[PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin] ConmonPath:[/usr/libexec/podman/conmon /usr/local/libexec/podman/conmon /usr/local/lib/podman/conmon /usr/bin/conmon /usr/sbin/conmon /usr/local/bin/conmon /usr/local/sbin/conmon /run/current-system/sw/bin/conmon] DetachKeys:ctrl-p,ctrl-q EnablePortReservation:true Env:[] EventsLogFilePath:/var/run/libpod/events/events.log EventsLogger:journald HooksDir:[/usr/share/containers/oci/hooks.d] ImageDefaultTransport:docker:// InfraCommand:/pause InfraImage:k8s.gcr.io/pause:3.2 InitPath:/usr/libexec/podman/catatonit LockType:shm MultiImageArchive:false Namespace: NetworkCmdPath: NoPivotRoot:false NumLocks:2048 OCIRuntime:crun OCIRuntimes:map[crun:[/usr/bin/crun /usr/sbin/crun /usr/local/bin/crun /usr/local/sbin/crun /sbin/crun /bin/crun /run/current-system/sw/bin/crun] kata:[/usr/bin/kata-runtime /usr/sbin/kata-runtime /usr/local/bin/kata-runtime /usr/local/sbin/kata-runtime /sbin/kata-runtime /bin/kata-runtime /usr/bin/kata-qemu /usr/bin/kata-fc] runc:[/usr/bin/runc /usr/sbin/runc /usr/local/bin/runc /usr/local/sbin/runc /sbin/runc /bin/runc /usr/lib/cri-o-runc/sbin/runc /run/current-system/sw/bin/runc]] PullPolicy:missing Remote:false RemoteURI: RemoteIdentity: ActiveService: ServiceDestinations:map[] RuntimePath:[] RuntimeSupportsJSON:[crun runc] RuntimeSupportsNoCgroups:[crun] RuntimeSupportsKVM:[kata kata-runtime kata-qemu kata-fc] SetOptions:{StorageConfigRunRootSet:false StorageConfigGraphRootSet:false StorageConfigGraphDriverNameSet:false StaticDirSet:false VolumePathSet:false TmpDirSet:false} SignaturePolicyPath:/etc/containers/policy.json SDNotify:false StateType:3 StaticDir:/var/lib/containers/storage/libpod StopTimeout:10 TmpDir:/var/run/libpod VolumePath:/var/lib/containers/storage/volumes} Network:{CNIPluginDirs:[/usr/libexec/cni /usr/lib/cni /usr/local/lib/cni /opt/cni/bin] DefaultNetwork:podman NetworkConfigDir:/etc/cni/net.d/}}
DEBU[0000] Using conmon: "/usr/bin/conmon"
DEBU[0000] Initializing boltdb state at /var/lib/containers/storage/libpod/bolt_state.db
DEBU[0000] Using graph driver overlay
DEBU[0000] Using graph root /var/lib/containers/storage
DEBU[0000] Using run root /var/run/containers/storage
DEBU[0000] Using static dir /var/lib/containers/storage/libpod
DEBU[0000] Using tmp dir /var/run/libpod
DEBU[0000] Using volume path /var/lib/containers/storage/volumes
DEBU[0000] Set libpod namespace to ""
DEBU[0000] [graphdriver] trying provided driver "overlay"
DEBU[0000] cached value indicated that overlay is supported
DEBU[0000] cached value indicated that metacopy is being used
DEBU[0000] cached value indicated that native-diff is not being used
WARN[0000] Not using native diff for overlay, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled
DEBU[0000] backingFs=xfs, projectQuotaSupported=false, useNativeDiff=false, usingMetacopy=true
DEBU[0000] Initializing event backend journald
DEBU[0000] using runtime "/usr/bin/crun"
WARN[0000] Error initializing configured OCI runtime kata: no valid executable found for OCI runtime kata: invalid argument
DEBU[0000] using runtime "/usr/bin/runc"
INFO[0000] Found CNI network podman (type=bridge) at /etc/cni/net.d/87-podman-bridge.conflist
WARN[0000] Default CNI network name podman is unchangeable
INFO[0000] Setting parallel job count to 4
DEBU[0000] parsed reference into "[overlay@/var/lib/containers/storage+/var/run/containers/storage:overlay.mountopt=nodev,metacopy=on]docker.io/library/waddles:latest"
DEBU[0000] reference "[overlay@/var/lib/containers/storage+/var/run/containers/storage:overlay.mountopt=nodev,metacopy=on]docker.io/library/waddles:latest" does not resolve to an image ID
DEBU[0000] parsed reference into "[overlay@/var/lib/containers/storage+/var/run/containers/storage:overlay.mountopt=nodev,metacopy=on]localhost/waddles:latest"
DEBU[0000] parsed reference into "[overlay@/var/lib/containers/storage+/var/run/containers/storage:overlay.mountopt=nodev,metacopy=on]docker.io/library/waddles:latest"
DEBU[0000] reference "[overlay@/var/lib/containers/storage+/var/run/containers/storage:overlay.mountopt=nodev,metacopy=on]docker.io/library/waddles:latest" does not resolve to an image ID
DEBU[0000] parsed reference into "[overlay@/var/lib/containers/storage+/var/run/containers/storage:overlay.mountopt=nodev,metacopy=on]localhost/waddles:latest"
DEBU[0000] parsed reference into "[overlay@/var/lib/containers/storage+/var/run/containers/storage:overlay.mountopt=nodev,metacopy=on]@03c3f650d287cb1ed69869299acb56c0e8faf8c5eab53d044cfef2870864547e"
DEBU[0000] exporting opaque data as blob "sha256:03c3f650d287cb1ed69869299acb56c0e8faf8c5eab53d044cfef2870864547e"
DEBU[0000] parsed reference into "[overlay@/var/lib/containers/storage+/var/run/containers/storage:overlay.mountopt=nodev,metacopy=on]docker.io/library/waddles:latest"
DEBU[0000] reference "[overlay@/var/lib/containers/storage+/var/run/containers/storage:overlay.mountopt=nodev,metacopy=on]docker.io/library/waddles:latest" does not resolve to an image ID
DEBU[0000] parsed reference into "[overlay@/var/lib/containers/storage+/var/run/containers/storage:overlay.mountopt=nodev,metacopy=on]localhost/waddles:latest"
DEBU[0000] parsed reference into "[overlay@/var/lib/containers/storage+/var/run/containers/storage:overlay.mountopt=nodev,metacopy=on]@03c3f650d287cb1ed69869299acb56c0e8faf8c5eab53d044cfef2870864547e"
DEBU[0000] exporting opaque data as blob "sha256:03c3f650d287cb1ed69869299acb56c0e8faf8c5eab53d044cfef2870864547e"
DEBU[0000] using systemd mode: false
DEBU[0000] No hostname set; container's hostname will default to runtime default
DEBU[0000] Loading seccomp profile from "/usr/share/containers/seccomp.json"
DEBU[0000] Allocated lock 1 for container a687aeaf0b29e3111961acf7edfd6a11e097f1e03c214de2e6aa4d288b3b15df
DEBU[0000] parsed reference into "[overlay@/var/lib/containers/storage+/var/run/containers/storage:overlay.mountopt=nodev,metacopy=on]@03c3f650d287cb1ed69869299acb56c0e8faf8c5eab53d044cfef2870864547e"
DEBU[0000] exporting opaque data as blob "sha256:03c3f650d287cb1ed69869299acb56c0e8faf8c5eab53d044cfef2870864547e"
DEBU[0000] created container "a687aeaf0b29e3111961acf7edfd6a11e097f1e03c214de2e6aa4d288b3b15df"
DEBU[0000] container "a687aeaf0b29e3111961acf7edfd6a11e097f1e03c214de2e6aa4d288b3b15df" has work directory "/var/lib/containers/storage/overlay-containers/a687aeaf0b29e3111961acf7edfd6a11e097f1e03c214de2e6aa4d288b3b15df/userdata"
DEBU[0000] container "a687aeaf0b29e3111961acf7edfd6a11e097f1e03c214de2e6aa4d288b3b15df" has run directory "/var/run/containers/storage/overlay-containers/a687aeaf0b29e3111961acf7edfd6a11e097f1e03c214de2e6aa4d288b3b15df/userdata"
DEBU[0000] container "a687aeaf0b29e3111961acf7edfd6a11e097f1e03c214de2e6aa4d288b3b15df" has CgroupParent "machine.slice/libpod-a687aeaf0b29e3111961acf7edfd6a11e097f1e03c214de2e6aa4d288b3b15df.scope"
DEBU[0000] Handling terminal attach
DEBU[0000] overlay: mount_data=nodev,metacopy=on,lowerdir=/var/lib/containers/storage/overlay/l/TCRJE7UVMACD72OSRR46I2J2V5:/var/lib/containers/storage/overlay/l/LVLZCXQ3CWW2NKKIT7AQCKI3PE:/var/lib/containers/storage/overlay/l/2U5RPPCDHSLXDAALLVNP5SLVAY,upperdir=/var/lib/containers/storage/overlay/a9fb1e00c20998c2a36c029edc276df63994a4be62ea64709f38efb966a24829/diff,workdir=/var/lib/containers/storage/overlay/a9fb1e00c20998c2a36c029edc276df63994a4be62ea64709f38efb966a24829/work,context="system_u:object_r:container_file_t:s0:c409,c442"
DEBU[0000] Made network namespace at /var/run/netns/cni-f7486c24-a8da-28e4-d115-aa76370d8c33 for container a687aeaf0b29e3111961acf7edfd6a11e097f1e03c214de2e6aa4d288b3b15df
INFO[0000] About to add CNI network lo (type=loopback)
DEBU[0000] mounted container "a687aeaf0b29e3111961acf7edfd6a11e097f1e03c214de2e6aa4d288b3b15df" at "/var/lib/containers/storage/overlay/a9fb1e00c20998c2a36c029edc276df63994a4be62ea64709f38efb966a24829/merged"
DEBU[0000] Created root filesystem for container a687aeaf0b29e3111961acf7edfd6a11e097f1e03c214de2e6aa4d288b3b15df at /var/lib/containers/storage/overlay/a9fb1e00c20998c2a36c029edc276df63994a4be62ea64709f38efb966a24829/merged
INFO[0000] Got pod network &{Name:admiring_panini Namespace:admiring_panini ID:a687aeaf0b29e3111961acf7edfd6a11e097f1e03c214de2e6aa4d288b3b15df NetNS:/var/run/netns/cni-f7486c24-a8da-28e4-d115-aa76370d8c33 Networks:[] RuntimeConfig:map[podman:{IP: MAC: PortMappings:[] Bandwidth:<nil> IpRanges:[]}]}
INFO[0000] About to add CNI network podman (type=bridge)
DEBU[0000] [0] CNI result: &{0.4.0 [{Name:cni-podman0 Mac:4a:8a:9d:eb:74:c8 Sandbox:} {Name:veth7c3f0838 Mac:ae:b4:71:37:b2:73 Sandbox:} {Name:eth0 Mac:a2:0f:5a:33:d2:c0 Sandbox:/var/run/netns/cni-f7486c24-a8da-28e4-d115-aa76370d8c33}] [{Version:4 Interface:0xc0001acc78 Address:{IP:10.88.0.3 Mask:ffff0000} Gateway:10.88.0.1}] [{Dst:{IP:0.0.0.0 Mask:00000000} GW:<nil>}] {[] [] []}}
DEBU[0000] /etc/system-fips does not exist on host, not mounting FIPS mode secret
DEBU[0000] Setting CGroups for container a687aeaf0b29e3111961acf7edfd6a11e097f1e03c214de2e6aa4d288b3b15df to machine.slice:libpod:a687aeaf0b29e3111961acf7edfd6a11e097f1e03c214de2e6aa4d288b3b15df
DEBU[0000] reading hooks from /usr/share/containers/oci/hooks.d
DEBU[0000] Created OCI spec for container a687aeaf0b29e3111961acf7edfd6a11e097f1e03c214de2e6aa4d288b3b15df at /var/lib/containers/storage/overlay-containers/a687aeaf0b29e3111961acf7edfd6a11e097f1e03c214de2e6aa4d288b3b15df/userdata/config.json
DEBU[0000] /usr/bin/conmon messages will be logged to syslog
DEBU[0000] running conmon: /usr/bin/conmon args="[--api-version 1 -c a687aeaf0b29e3111961acf7edfd6a11e097f1e03c214de2e6aa4d288b3b15df -u a687aeaf0b29e3111961acf7edfd6a11e097f1e03c214de2e6aa4d288b3b15df -r /usr/bin/crun -b /var/lib/containers/storage/overlay-containers/a687aeaf0b29e3111961acf7edfd6a11e097f1e03c214de2e6aa4d288b3b15df/userdata -p /var/run/containers/storage/overlay-containers/a687aeaf0b29e3111961acf7edfd6a11e097f1e03c214de2e6aa4d288b3b15df/userdata/pidfile -n admiring_panini --exit-dir /var/run/libpod/exits --socket-dir-path /var/run/libpod/socket -s -l k8s-file:/var/lib/containers/storage/overlay-containers/a687aeaf0b29e3111961acf7edfd6a11e097f1e03c214de2e6aa4d288b3b15df/userdata/ctr.log --log-level debug --syslog -t --conmon-pidfile /var/run/containers/storage/overlay-containers/a687aeaf0b29e3111961acf7edfd6a11e097f1e03c214de2e6aa4d288b3b15df/userdata/conmon.pid --exit-command /usr/bin/podman --exit-command-arg --root --exit-command-arg /var/lib/containers/storage --exit-command-arg --runroot --exit-command-arg /var/run/containers/storage --exit-command-arg --log-level --exit-command-arg debug --exit-command-arg --cgroup-manager --exit-command-arg systemd --exit-command-arg --tmpdir --exit-command-arg /var/run/libpod --exit-command-arg --runtime --exit-command-arg crun --exit-command-arg --storage-driver --exit-command-arg overlay --exit-command-arg --storage-opt --exit-command-arg overlay.mountopt=nodev,metacopy=on --exit-command-arg --events-backend --exit-command-arg journald --exit-command-arg --syslog --exit-command-arg true --exit-command-arg container --exit-command-arg cleanup --exit-command-arg a687aeaf0b29e3111961acf7edfd6a11e097f1e03c214de2e6aa4d288b3b15df]"
INFO[0000] Running conmon under slice machine.slice and unitName libpod-conmon-a687aeaf0b29e3111961acf7edfd6a11e097f1e03c214de2e6aa4d288b3b15df.scope
DEBU[0000] Received: -1
DEBU[0000] Cleaning up container a687aeaf0b29e3111961acf7edfd6a11e097f1e03c214de2e6aa4d288b3b15df
DEBU[0000] Tearing down network namespace at /var/run/netns/cni-f7486c24-a8da-28e4-d115-aa76370d8c33 for container a687aeaf0b29e3111961acf7edfd6a11e097f1e03c214de2e6aa4d288b3b15df
INFO[0000] About to del CNI network lo (type=loopback)
INFO[0000] Got pod network &{Name:admiring_panini Namespace:admiring_panini ID:a687aeaf0b29e3111961acf7edfd6a11e097f1e03c214de2e6aa4d288b3b15df NetNS:/var/run/netns/cni-f7486c24-a8da-28e4-d115-aa76370d8c33 Networks:[{Name:podman Ifname:eth0}] RuntimeConfig:map[podman:{IP: MAC: PortMappings:[] Bandwidth:<nil> IpRanges:[]}]}
INFO[0000] About to del CNI network podman (type=bridge)
DEBU[0000] unmounted container "a687aeaf0b29e3111961acf7edfd6a11e097f1e03c214de2e6aa4d288b3b15df"
DEBU[0000] ExitCode msg: "open executable: permission denied: oci runtime permission denied error"
Error: open executable: Permission denied: OCI runtime permission denied error
[root@dev waddles]#
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment