Uploaded image for project: 'OpenShift Virtualization'
  1. OpenShift Virtualization
  2. CNV-20983

[2123209] CNV runs non-root VMs by default which removes cap_sys_nice from the launchers and caused the real time VM failed to boot up

XMLWordPrintable

    • Important
    • None

      Description of problem:
      After the env upgrade from OCP4.10.26 to OCP4.11.1/OCP-V4.11.0, the real time VM can't boot up since it's run as non-root VM by default. Please check the attached 'virt-handler.log' for details.

      Conclude what Vladik Romanovsky said about the root cause of the issue as follows:

      '''
      CNV runs non-root VMs by default now, this removes cap_sys_nice from the launchers. The problem is that CNV makes this switch before upstream KubeVirt did: https://github.com/kubevirt/kubevirt/blob/782b82aff8adc516d98421466ab9e43835efb89c/pkg/virt-controller/services/rendercontainer.go#L244
      '''

      Version-Release number of selected component (if applicable):
      OpenShift Virtualization: 4.11.0
      Openshift: 4.11.1

      How reproducible:
      100%

      Steps to Reproduce:
      1. Upgrade env to OCP4.11.1/OCP-V4.11.0
      2. Try to boot up a real time VM created formerly
      3.

      Actual results:
      It's found the VM failed to boot up successfully.

      Expected results:
      The VM could boot up without issue.

      Additional info:

              jgil@redhat.com Jordi Gil
              ngu@redhat.com Nini Gu
              Kedar Bidarkar Kedar Bidarkar
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: