cri: stop recommending disable_cgroup

AkihiroSuda · AkihiroSuda · commit 7a0c8b6b750c · 2023-10-06T03:07:59.000+09:00
Disabling cgroup is no longer needed since cgroup v2 Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp> (cherry picked from commit 8ffb03d) (cherry-pick was not clean) Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
diff --git a/pkg/cri/server/service_linux.go b/pkg/cri/server/service_linux.go
@@ -33,8 +33,8 @@ const networkAttachCount = 2
 // initPlatform handles linux specific initialization for the CRI service.
 func (c *criService) initPlatform() (err error) {
 	if userns.RunningInUserNS() {
-		if !(c.config.DisableCgroup && !c.apparmorEnabled() && c.config.RestrictOOMScoreAdj) {
-			logrus.Warn("Running containerd in a user namespace typically requires disable_cgroup, disable_apparmor, restrict_oom_score_adj set to be true")
+		if c.apparmorEnabled() || !c.config.RestrictOOMScoreAdj {
+			logrus.Warn("Running CRI plugin in a user namespace typically requires disable_apparmor and restrict_oom_score_adj to be true")
 		}
 	}
 

Original file line number	Diff line number	Diff line change
`@@ -33,8 +33,8 @@ const networkAttachCount = 2`
`33`	`33`	`// initPlatform handles linux specific initialization for the CRI service.`
`34`	`34`	`func (c *criService) initPlatform() (err error) {`
`35`	`35`	`if userns.RunningInUserNS() {`
`36`		`- if !(c.config.DisableCgroup && !c.apparmorEnabled() && c.config.RestrictOOMScoreAdj) {`
`37`		`- logrus.Warn("Running containerd in a user namespace typically requires disable_cgroup, disable_apparmor, restrict_oom_score_adj set to be true")`
	`36`	`+ if c.apparmorEnabled() \|\| !c.config.RestrictOOMScoreAdj {`
	`37`	`+ logrus.Warn("Running CRI plugin in a user namespace typically requires disable_apparmor and restrict_oom_score_adj to be true")`
`38`	`38`	`}`
`39`	`39`	`}`
`40`	`40`