Uploaded image for project: 'OpenShift Virtualization'
  1. OpenShift Virtualization
  2. CNV-20982

[2123207] CNV runs non-root VMs by default which removes cap_sys_nice from the launchers and caused VM failed to boot up

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Major Major
    • None
    • None
    • CNV Virtualization
    • Important
    • None

      Description of problem:
      After the env upgrade from OCP4.10.26 to OCP4.11.1/OCP-V4.11.0, the real time VM can't boot up since it's run as non-root VM by default. Please check the attached 'virt-handler.log' for details.

      Conclude what Vladik Romanovsky said about the root cause of the issue as follows:

      '''
      CNV runs non-root VMs by default now, this removes cap_sys_nice from the launchers. The problem is that CNV makes this switch before upstream KubeVirt did: https://github.com/kubevirt/kubevirt/blob/782b82aff8adc516d98421466ab9e43835efb89c/pkg/virt-controller/services/rendercontainer.go#L244
      '''

      Version-Release number of selected component (if applicable):
      OpenShift Virtualization: 4.11.0
      Openshift: 4.11.1

      How reproducible:
      100%

      Steps to Reproduce:
      1. Upgrade env to OCP4.11.1/OCP-V4.11.0
      2. Try to boot up a real time VM created formerly
      3.

      Actual results:
      It's found the VM failed to boot up successfully.

      Expected results:
      The VM could boot up without issue.

      Additional info:

              jira-bugzilla-migration RH Bugzilla Integration
              ngu@redhat.com Nini Gu
              Kedar Bidarkar Kedar Bidarkar
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: