Why do we need crun?

CRI-O defaults to crun under certain conditions, mostly Cgroups V2 I think

ok-to-build-iso

Hi @afbjorklund, building a new ISO failed.
See the logs at: https://storage.cloud.google.com/minikube-builds/logs/11679/iso-84/iso_build.txt

KIC is currently including crun 1.2 from kubic, hopefully both are compatible with podman ?

      crun |  100:1.2-2 | http://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/xUbuntu_20.04  Packages

EDIT: Reverted the upgrade

ok-to-build-iso

Hi @afbjorklund, we have updated your PR with the reference to newly built ISO. Pull the changes locally if you want to test with them or update your PR further.

ok-to-build-iso

Hi @afbjorklund, we have updated your PR with the reference to newly built ISO. Pull the changes locally if you want to test with them or update your PR further.

/ok-to-test

kvm2 driver with docker runtime

+----------------+----------+---------------------+
|    COMMAND     | MINIKUBE | MINIKUBE (PR 11679) |
+----------------+----------+---------------------+
| minikube start | 53.5s    | 52.1s               |
| enable ingress | 28.4s    | 29.6s               |
+----------------+----------+---------------------+

docker driver with docker runtime

+----------------+----------+---------------------+
|    COMMAND     | MINIKUBE | MINIKUBE (PR 11679) |
+----------------+----------+---------------------+
| minikube start | 26.3s    | 26.1s               |
| enable ingress | 22.3s    | 23.8s               |
+----------------+----------+---------------------+

docker driver with containerd runtime

+----------------+----------+---------------------+
|    COMMAND     | MINIKUBE | MINIKUBE (PR 11679) |
+----------------+----------+---------------------+
| minikube start | 42.8s    | 43.2s               |
| enable ingress | 21.3s    | 22.3s               |
+----------------+----------+---------------------+

These are the flake rates of all failed tests.

Too many tests failed - See test logs for more details.

To see the flake rates of all tests by environment, click here.

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: afbjorklund, spowelljr

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Any work planned for crun 1.2+, like crun 1.4.4 ?

Currently there are no Ubuntu 20.04 binaries after Podman 3.4.2 and crun 1.2, so left it the same in the ISO... Might have to use binaries also in KIC, if we want to bump to 3.4.4 and 1.4.x

Is there anything important?

@afbjorklund Ok, good to know -- just interested in when the fixed CVEs were going to be included

It seems like podman gave up on packaging mid-air, so I think we will have to use some PPA or do our own packages

https://build.opensuse.org/project/show/devel:kubic:libcontainers:stable

• podman 3.4.2

• crun 1.2

I think it is left to each OS vendor, because

https://koji.fedoraproject.org/koji/packageinfo?packageID=9688

minikube uses podman for building images and for loading images, so normally it is cri-o runc that is the runtime.

Using minikube to run containers with podman is probably unsupported. Can use podman machine for that instead.

I think it is left to each OS vendor, because

https://koji.fedoraproject.org/koji/packageinfo?packageID=9688

Yeah well, it seems that it would require changing distribution

https://packages.ubuntu.com/focal/crun

Currently we are using vendor packages, but they stopped updating them.

So might have to reconsider that.

Note, https://podman.io/blogs/2022/03/06/why_no_podman4_f35.html