Skip to content

Custom cgroup path does not work in containerd 1.2.5 #3133

@relyt0925

Description

@relyt0925

The ability to set cgroup path does not work in containerd 1.2.5

/etc/containerd/config.toml

root@stage-dal10-cr0519b5b831f247ca9edcce1fc91ea21e-w3:~# cat /etc/containerd/config.toml 
root = "/var/data/cripersistentstorage"
state = "/run/containerd"
oom_score = 0

[grpc]
  address = "/run/containerd/containerd.sock"
  uid = 0
  gid = 0
  max_recv_message_size = 16777216
  max_send_message_size = 16777216

[debug]
  address = ""
  uid = 0
  gid = 0
  level = ""

[metrics]
  address = "10.93.252.121:10210"
  grpc_histogram = false

[cgroup]
  path = "/podruntime/runtime"

[plugins]
  [plugins.cgroups]
    no_prometheus = false
  [plugins.cri]
    stream_server_address = "127.0.0.1"
    stream_server_port = "0"
    enable_selinux = false
    sandbox_image = "registry.ng.bluemix.net/armada-master/pause:3.1"
    stats_collect_period = 10
    systemd_cgroup = false
    enable_tls_streaming = false
    [plugins.cri.containerd]
      snapshotter = "overlayfs"
      [plugins.cri.containerd.default_runtime]
        runtime_type = "io.containerd.runtime.v1.linux"
        runtime_engine = ""
        runtime_root = ""
      [plugins.cri.containerd.untrusted_workload_runtime]
        runtime_type = ""
        runtime_engine = ""
        runtime_root = ""
    [plugins.cri.cni]
      bin_dir = "/opt/cni/bin"
      conf_dir = "/etc/cni/net.d"
      conf_template = ""
    [plugins.cri.registry]
      [plugins.cri.registry.mirrors]
        [plugins.cri.registry.mirrors."docker.io"]
          endpoint = ["https://registry-1.docker.io"]
      [plugins.cri.registry.auths]
        [plugins.cri.registry.auths."https://registry.ng.bluemix.net/armada-master"]
          username = "token"
          password = "XXXXX"
  [plugins.diff-service]
    default = ["walking"]
  [plugins.linux]
    shim = "containerd-shim"
    runtime = "runc"
    runtime_root = ""
    no_shim = false
    shim_debug = false
  [plugins.scheduler]
    pause_threshold = 0.02
    deletion_threshold = 0
    mutation_threshold = 100
    schedule_delay = "0s"
    startup_delay = "100ms"
root@stage-dal10-cr0519b5b831f247ca9edcce1fc91ea21e-w3:~# 

I would expect the containerd shims to be created in the /podruntime/runtime group per usual. However, they do not and instead live under containerd.service

root@stage-dal10-cr0519b5b831f247ca9edcce1fc91ea21e-w3:~# systemd-cgls | grep containerd
│ ├─containerd.service
│ │ ├─ 7337 containerd-shim -namespace k8s.io -workdir /var/data/cripersisten...
│ │ ├─ 7855 /usr/local/bin/containerd
│ │ ├─ 8337 containerd-shim -namespace k8s.io -workdir /var/data/cripersisten...
│ │ ├─ 8413 containerd-shim -namespace k8s.io -workdir /var/data/cripersisten...
│ │ ├─ 8498 containerd-shim -namespace k8s.io -workdir /var/data/cripersisten...
│ │ ├─ 8611 containerd-shim -namespace k8s.io -workdir /var/data/cripersisten...
│ │ ├─ 8646 containerd-shim -namespace k8s.io -workdir /var/data/cripersisten...
│ │ ├─ 8746 containerd-shim -namespace k8s.io -workdir /var/data/cripersisten...
│ │ ├─ 8822 containerd-shim -namespace k8s.io -workdir /var/data/cripersisten...
│ │ ├─ 9616 containerd-shim -namespace k8s.io -workdir /var/data/cripersisten...
│ │ ├─ 9860 containerd-shim -namespace k8s.io -workdir /var/data/cripersisten...
│ │ ├─10681 containerd-shim -namespace k8s.io -workdir /var/data/cripersisten...
│ │ ├─10829 containerd-shim -namespace k8s.io -workdir /var/data/cripersisten...
│ │ ├─10857 containerd-shim -namespace k8s.io -workdir /var/data/cripersisten...
│ │ ├─10920 containerd-shim -namespace k8s.io -workdir /var/data/cripersisten...
│ │ ├─11134 containerd-shim -namespace k8s.io -workdir /var/data/cripersisten...
│ │ ├─11320 containerd-shim -namespace k8s.io -workdir /var/data/cripersisten...
│ │ ├─11406 containerd-shim -namespace k8s.io -workdir /var/data/cripersisten...
│ │ ├─11487 containerd-shim -namespace k8s.io -workdir /var/data/cripersisten...
│ │ ├─11564 containerd-shim -namespace k8s.io -workdir /var/data/cripersisten...
│ │ ├─11685 containerd-shim -namespace k8s.io -workdir /var/data/cripersisten...
│ │ ├─14466 containerd-shim -namespace k8s.io -workdir /var/data/cripersisten...
│ │ ├─22919 containerd-shim -namespace k8s.io -workdir /var/data/cripersisten...
│ │ ├─22931 containerd-shim -namespace k8s.io -workdir /var/data/cripersisten...
│ │ ├─23119 containerd-shim -namespace k8s.io -workdir /var/data/cripersisten...

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions