gabibeyer

#!/bin/bash -x

# Needs reboot after modify selinux/config file to disable selinux

# this is bring ran on a fedora29 ccloudvm instance
# ccloudvm create --cpus 4 --mem 4096 --disk 64 --name KataPodmanDemo fedora29

# The main difference between fed28 and fed29 is that the go and conmon packages are up to date

# install dependencies (tmux/vim optional)

gabibeyer

#!/bin/bash -x

# Needs reboot after modify selinux/config file to disable selinux

# this is bring ran on a fedora28 ccloudvm instance
# ccloudvm create --cpus 4 --mem 4096 --disk 64 --name KataPodmanDemo fedora28

# install dependencies (tmux/vim optional)
sudo yum update -y
sudo yum install -y \

gabibeyer

ROOTLESS

Organize user workspace in place of / Should look similar to:

├── run
│   └── kata-containers
├── usr
│   └── share
│       └── kata-containers

gabibeyer

#!/bin/bash
# running kata-runtime with podman on Fedora 28

# I used ccloudvm for my dev system (this is not required)
ccloudvm create --name podman --mem 4096 --cpus 2 fedora28
ccloudvm connect podman

# update system and install podman
sudo yum update
sudo yum install podman

gabibeyer

lvm-snapshotter

Getting Started

This document sets up an lvm-snapshotter that listens on a specified socket. It assumes that you already have a volume group, and thin logical volume set up, if not some example commands are provided below.

A very beginner guide to setting up a ccloudvm instance with sparse files in replace of disks can be found here: <>

Prerequisites

gabibeyer

#!/bin/bash -e
# some steps require root, so run $sudo -E 

# https://github.com/containerd/cri/blob/master/docs/installation.md

export VERSION="1.2.4"

# install libseccomp2
apt-get update
apt-get install libseccomp2

gabibeyer

package main

import (
	"fmt"
	"math/rand"
	"sync"
	"time"
)

func doTask(fileName string) (string, error) {

gabibeyer

package main

import (
	"fmt"
	"math/rand"
	"sync"
	"time"
)

func getStrings(fileName string) (string, error) {

gabibeyer

package main

import (
	"fmt"
	"math/rand"
	"sync"
	"time"
)

func doTask(fileName string) (string, error) {

gabibeyer

The netfilter hooks in the kernel and where they hook in the packet flow

The figure below calls out

• The netfilter hooks
• The order of table traversal