Manabu Ori orimanabu

## w4-pod-to-clusterip-different-node-ovs-oftrace-src.txt
[core@worker-4 ~]$ sudo ovs-vsctl --columns=ofport find interface external_ids:iface-id=proj1_client
ofport              : 19
[core@worker-4 ~]$ sudo ovs-appctl ofproto/trace --ct-next new,trk br-int in_port=19,dl_src=0a:58:0a:83:02:28,dl_dst=0a:58:0a:83:02:01,tcp,nw_src=10.131.2.40,nw_dst=172.30.11.18,tcp_src=33333,tcp_dst=80,nw_ttl=64,dp_hash=1
Flow: dp_hash=0x1,tcp,in_port=19,vlan_tci=0x0000,dl_src=0a:58:0a:83:02:28,dl_dst=0a:58:0a:83:02:01,nw_src=10.131.2.40,nw_dst=172.30.11.18,nw_tos=0,nw_ecn=0,nw_ttl=64,tp_src=33333,tp_dst=80,tcp_flags=0

bridge("br-int")
----------------
 0. in_port=19, priority 100, cookie 0x680ddb98
    set_field:0x2d->reg13
    set_field:0xd->reg11

## w4-pod-to-clusterip-different-node-ovs.txt
##
## ovn-trace command line
##

oc -n openshift-ovn-kubernetes exec -c ovnkube-node ovnkube-node-k2bsf -- \
ovn-trace -p /ovn-cert/tls.key -c /ovn-cert/tls.crt -C /ovn-ca/ca-bundle.crt --db 'ssl:172.16.13.102:9642' \
worker-4 --ct new '
inport == "proj1_client" &&
eth.src == 0a:58:0a:83:02:28 &&
eth.dst == 0a:58:0a:83:02:01 &&

## w4-pod-to-clusterip-different-node-detail-with-lb-dst.txt
##
## ovn-trace command line
##

oc -n openshift-ovn-kubernetes exec -c ovnkube-node ovnkube-node-k2bsf -- \
ovn-trace -p /ovn-cert/tls.key -c /ovn-cert/tls.crt -C /ovn-ca/ca-bundle.crt --db 'ssl:172.16.13.102:9642' \
worker-4 --ct new '
inport == "proj1_client" &&
eth.src == 0a:58:0a:83:02:28 &&
eth.dst == 0a:58:0a:83:02:01 &&

## w4-pod-to-clusterip-different-node-detail.txt
##
## ovn-trace command line
##

# oc -n openshift-ovn-kubernetes exec -c northd ovnkube-master-h2qh7 -- \
# ovn-trace -p /ovn-cert/tls.key -c /ovn-cert/tls.crt -C /ovn-ca/ca-bundle.crt --db 'ssl:172.16.13.102:9642' \
# worker-4 --ct new ' \
# inport == \"proj1_client\" &&
# eth.src == 0a:58:0a:83:02:28 &&
# eth.dst == 0a:58:0a:83:02:01 &&

## ansible_v2.9_collection_test.txt
[root@rhel7 collections_set]# cat podman.yml
---

- hosts: all
  gather_facts: no
  collections:
  - community.general
  tasks:
  - name: podman image
    podman_image:

## libkrun_cs8.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                orimanabu
                / libkrun_cs8.md
            
            
              Last active
              March 23, 2021 01:30
            
              
                libkrun on CentOS Stream 8
              
          
    sudo sed -i -e 's/enabled=0/enabled=1/' /etc/yum.repos.d/CentOS-Stream-PowerTools.repo
sudo dnf install -y git vim-enhanced yum-utils rust cargo python3 python3-virtualenv make tar gcc patch flex bison bc elfutils-libelf-devel elfutils podman dmidecode strace lsof psmisc glibc-static
mkdir /tmp/venv
virtualenv-3 /tmp/venv
. /tmp/venv/bin/activate
pip3 install pyelftools

git clone https://github.com/containers/libkrunfw
git clone https://github.com/containers/libkrun

  
## mount_rhcos_qcow2_root_partition_log.txt
$ sudo qemu-nbd --connect /dev/nbd0 rhcos-4.5.2-x86_64-openstack.x86_64.qcow2

$ lsblk /dev/nbd0
NAME     MAJ:MIN RM  SIZE RO TYPE MOUNTPOINT
nbd0      43:0    0   16G  0 disk
├─nbd0p1  43:1    0  384M  0 part
├─nbd0p2  43:2    0  127M  0 part
├─nbd0p3  43:3    0    1M  0 part
└─nbd0p4  43:4    0    3G  0 part

## coreos_image_mount_root.sh
#!/bin/bash

if [ x"$#" != x"2" ]; then
        echo "$0 image mountpoint"
        exit 1
fi

image=$1; shift
mountpoint=$1; shift
nbd=/dev/nbd0

## multus-daemonset-kube-ansible.yml
---
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
  name: network-attachment-definitions.k8s.cni.cncf.io
spec:
  group: k8s.cni.cncf.io
  scope: Namespaced
  names:
    plural: network-attachment-definitions

## .vimrc
xxx
	[core@worker-4 ~]$ sudo ovs-vsctl --columns=ofport find interface external_ids:iface-id=proj1_client
	ofport : 19
	[core@worker-4 ~]$ sudo ovs-appctl ofproto/trace --ct-next new,trk br-int in_port=19,dl_src=0a:58:0a:83:02:28,dl_dst=0a:58:0a:83:02:01,tcp,nw_src=10.131.2.40,nw_dst=172.30.11.18,tcp_src=33333,tcp_dst=80,nw_ttl=64,dp_hash=1
	Flow: dp_hash=0x1,tcp,in_port=19,vlan_tci=0x0000,dl_src=0a:58:0a:83:02:28,dl_dst=0a:58:0a:83:02:01,nw_src=10.131.2.40,nw_dst=172.30.11.18,nw_tos=0,nw_ecn=0,nw_ttl=64,tp_src=33333,tp_dst=80,tcp_flags=0

	bridge("br-int")
	----------------
	0. in_port=19, priority 100, cookie 0x680ddb98
	set_field:0x2d->reg13
	set_field:0xd->reg11
	##
	## ovn-trace command line
	##

	oc -n openshift-ovn-kubernetes exec -c ovnkube-node ovnkube-node-k2bsf -- \
	ovn-trace -p /ovn-cert/tls.key -c /ovn-cert/tls.crt -C /ovn-ca/ca-bundle.crt --db 'ssl:172.16.13.102:9642' \
	worker-4 --ct new '
	inport == "proj1_client" &&
	eth.src == 0a:58:0a:83:02:28 &&
	eth.dst == 0a:58:0a:83:02:01 &&
	##
	## ovn-trace command line
	##

	# oc -n openshift-ovn-kubernetes exec -c northd ovnkube-master-h2qh7 -- \
	# ovn-trace -p /ovn-cert/tls.key -c /ovn-cert/tls.crt -C /ovn-ca/ca-bundle.crt --db 'ssl:172.16.13.102:9642' \
	# worker-4 --ct new ' \
	# inport == \"proj1_client\" &&
	# eth.src == 0a:58:0a:83:02:28 &&
	# eth.dst == 0a:58:0a:83:02:01 &&
	[root@rhel7 collections_set]# cat podman.yml
	---

	- hosts: all
	gather_facts: no
	collections:
	- community.general
	tasks:
	- name: podman image
	podman_image:
	$ sudo qemu-nbd --connect /dev/nbd0 rhcos-4.5.2-x86_64-openstack.x86_64.qcow2

	$ lsblk /dev/nbd0
	NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
	nbd0 43:0 0 16G 0 disk
	├─nbd0p1 43:1 0 384M 0 part
	├─nbd0p2 43:2 0 127M 0 part
	├─nbd0p3 43:3 0 1M 0 part
	└─nbd0p4 43:4 0 3G 0 part
	#!/bin/bash

	if [ x"$#" != x"2" ]; then
	echo "$0 image mountpoint"
	exit 1
	fi

	image=$1; shift
	mountpoint=$1; shift
	nbd=/dev/nbd0
	---
	apiVersion: apiextensions.k8s.io/v1
	kind: CustomResourceDefinition
	metadata:
	name: network-attachment-definitions.k8s.cni.cncf.io
	spec:
	group: k8s.cni.cncf.io
	scope: Namespaced
	names:
	plural: network-attachment-definitions