Bug 2004961
| Summary: | output of "crictl inspectp" is not complete | ||
|---|---|---|---|
| Product: | OpenShift Container Platform | Reporter: | Peter Hunt <pehunt> |
| Component: | Node | Assignee: | Peter Hunt <pehunt> |
| Node sub component: | CRI-O | QA Contact: | Sunil Choudhary <schoudha> |
| Status: | CLOSED ERRATA | Docs Contact: | |
| Severity: | medium | ||
| Priority: | medium | CC: | aos-bugs, rravaiol, schoudha |
| Version: | 4.9 | ||
| Target Milestone: | --- | ||
| Target Release: | 4.9.z | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | 2004609 | Environment: | |
| Last Closed: | 2021-10-18 17:51:49 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2004609 | ||
| Bug Blocks: | |||
|
Comment 1
Peter Hunt
2021-09-16 13:51:55 UTC
PR merged Verified on 4.9 rc7 build.
$ oc get clusterversion
NAME VERSION AVAILABLE PROGRESSING SINCE STATUS
version 4.9.0-rc.7 True False 18h Cluster version is 4.9.0-rc.7
sh-4.4# crictl inspectp ab4fbb6a0467c
{
"status": {
"id": "ab4fbb6a0467c73a7d17e9822e1d06b9f7dcccd4e596ad1004b8c2e52ac10c74",
"metadata": {
"attempt": 0,
"name": "multus-fhmbb",
"namespace": "openshift-multus",
"uid": "43219567-0f5f-4293-9b68-14545a6b476d"
},
"state": "SANDBOX_READY",
"createdAt": "2021-10-12T11:27:34.393603437Z",
"network": {
"additionalIps": [],
"ip": ""
},
"linux": {
"namespaces": {
"options": {
"ipc": "POD",
"network": "NODE",
"pid": "CONTAINER",
"targetId": ""
}
}
},
"labels": {
"app": "multus",
"component": "network",
"controller-revision-hash": "696564755",
"io.kubernetes.container.name": "POD",
"io.kubernetes.pod.name": "multus-fhmbb",
"io.kubernetes.pod.namespace": "openshift-multus",
"io.kubernetes.pod.uid": "43219567-0f5f-4293-9b68-14545a6b476d",
"openshift.io/component": "network",
"pod-template-generation": "1",
"type": "infra"
},
"annotations": {
"kubernetes.io/config.seen": "2021-10-12T11:27:32.242331813Z",
"kubernetes.io/config.source": "api"
},
"runtimeHandler": ""
},
"info": {
"runtimeSpec": {
"ociVersion": "1.0.2-dev",
"process": {
"user": {
"uid": 0,
"gid": 0
},
"args": [
"/usr/bin/pod"
],
"env": [
"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
"TERM=xterm"
],
"cwd": "/",
"capabilities": {
"bounding": [
"CAP_CHOWN",
"CAP_DAC_OVERRIDE",
"CAP_FSETID",
"CAP_FOWNER",
"CAP_SETGID",
"CAP_SETUID",
"CAP_SETPCAP",
"CAP_NET_BIND_SERVICE",
"CAP_KILL"
],
"effective": [
"CAP_CHOWN",
"CAP_DAC_OVERRIDE",
"CAP_FSETID",
"CAP_FOWNER",
"CAP_SETGID",
"CAP_SETUID",
"CAP_SETPCAP",
"CAP_NET_BIND_SERVICE",
"CAP_KILL"
],
"inheritable": [
"CAP_CHOWN",
"CAP_DAC_OVERRIDE",
"CAP_FSETID",
"CAP_FOWNER",
"CAP_SETGID",
"CAP_SETUID",
"CAP_SETPCAP",
"CAP_NET_BIND_SERVICE",
"CAP_KILL"
],
"permitted": [
"CAP_CHOWN",
"CAP_DAC_OVERRIDE",
"CAP_FSETID",
"CAP_FOWNER",
"CAP_SETGID",
"CAP_SETUID",
"CAP_SETPCAP",
"CAP_NET_BIND_SERVICE",
"CAP_KILL"
]
},
"oomScoreAdj": -998,
"selinuxLabel": "system_u:system_r:container_t:s0:c301,c874"
},
"root": {
"path": "/var/lib/containers/storage/overlay/614a220622c5290656ba7835bff6a03efff205e7762f918ec10d0318980c66df/merged",
"readonly": true
},
"hostname": "sunilc1210491-hc9hl-worker-a-v6mj2.c.openshift-qe.internal",
"mounts": [
{
"destination": "/proc",
"type": "proc",
"source": "proc",
"options": [
"nosuid",
"noexec",
"nodev"
]
},
{
"destination": "/dev",
"type": "tmpfs",
"source": "tmpfs",
"options": [
"nosuid",
"strictatime",
"mode=755",
"size=65536k"
]
},
{
"destination": "/dev/pts",
"type": "devpts",
"source": "devpts",
"options": [
"nosuid",
"noexec",
"newinstance",
"ptmxmode=0666",
"mode=0620",
"gid=5"
]
},
{
"destination": "/dev/mqueue",
"type": "mqueue",
"source": "mqueue",
"options": [
"nosuid",
"noexec",
"nodev"
]
},
{
"destination": "/sys",
"type": "sysfs",
"source": "sysfs",
"options": [
"nosuid",
"noexec",
"nodev",
"ro"
]
},
{
"destination": "/etc/resolv.conf",
"type": "bind",
"source": "/run/containers/storage/overlay-containers/ab4fbb6a0467c73a7d17e9822e1d06b9f7dcccd4e596ad1004b8c2e52ac10c74/userdata/resolv.conf",
"options": [
"ro",
"bind",
"nodev",
"nosuid",
"noexec"
]
},
{
"destination": "/dev/shm",
"type": "bind",
"source": "/run/containers/storage/overlay-containers/ab4fbb6a0467c73a7d17e9822e1d06b9f7dcccd4e596ad1004b8c2e52ac10c74/userdata/shm",
"options": [
"rw",
"bind"
]
},
{
"destination": "/etc/hostname",
"type": "bind",
"source": "/run/containers/storage/overlay-containers/ab4fbb6a0467c73a7d17e9822e1d06b9f7dcccd4e596ad1004b8c2e52ac10c74/userdata/hostname",
"options": [
"ro",
"bind",
"nodev",
"nosuid",
"noexec"
]
}
],
"annotations": {
"kubernetes.io/config.source": "api",
"io.kubernetes.pod.name": "multus-fhmbb",
"io.kubernetes.container.name": "POD",
"io.kubernetes.cri-o.PortMappings": "[]",
"io.kubernetes.cri-o.Annotations": "{\"kubernetes.io/config.seen\":\"2021-10-12T11:27:32.242331813Z\",\"kubernetes.io/config.source\":\"api\"}",
"io.kubernetes.cri-o.KubeName": "multus-fhmbb",
"controller-revision-hash": "696564755",
"app": "multus",
"io.kubernetes.cri-o.Labels": "{\"pod-template-generation\":\"1\",\"io.kubernetes.pod.uid\":\"43219567-0f5f-4293-9b68-14545a6b476d\",\"io.kubernetes.pod.namespace\":\"openshift-multus\",\"type\":\"infra\",\"io.kubernetes.container.name\":\"POD\",\"component\":\"network\",\"controller-revision-hash\":\"696564755\",\"app\":\"multus\",\"io.kubernetes.pod.name\":\"multus-fhmbb\",\"openshift.io/component\":\"network\"}",
"io.kubernetes.cri-o.ContainerType": "sandbox",
"io.kubernetes.cri-o.SandboxID": "ab4fbb6a0467c73a7d17e9822e1d06b9f7dcccd4e596ad1004b8c2e52ac10c74",
"org.systemd.property.CollectMode": "'inactive-or-failed'",
"io.kubernetes.cri-o.MountPoint": "/var/lib/containers/storage/overlay/614a220622c5290656ba7835bff6a03efff205e7762f918ec10d0318980c66df/merged",
"io.kubernetes.cri-o.Namespace": "openshift-multus",
"io.kubernetes.cri-o.Name": "k8s_multus-fhmbb_openshift-multus_43219567-0f5f-4293-9b68-14545a6b476d_0",
"io.kubernetes.cri-o.Image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ba0643d21fdd3d65ff8a031daa9c3e12c957d2ecdce1859dfd37faa9a67a8968",
"io.kubernetes.cri-o.ContainerName": "k8s_POD_multus-fhmbb_openshift-multus_43219567-0f5f-4293-9b68-14545a6b476d_0",
"io.kubernetes.cri-o.NamespaceOptions": "{\"network\":2,\"pid\":1}",
"io.kubernetes.cri-o.HostNetwork": "true",
"io.kubernetes.cri-o.CgroupParent": "kubepods-burstable-pod43219567_0f5f_4293_9b68_14545a6b476d.slice",
"kubernetes.io/config.seen": "2021-10-12T11:27:32.242331813Z",
"io.kubernetes.cri-o.Metadata": "{\"Name\":\"multus-fhmbb\",\"UID\":\"43219567-0f5f-4293-9b68-14545a6b476d\",\"Namespace\":\"openshift-multus\",\"Attempt\":0}",
"io.kubernetes.cri-o.PrivilegedRuntime": "true",
"io.kubernetes.cri-o.ResolvPath": "/run/containers/storage/overlay-containers/ab4fbb6a0467c73a7d17e9822e1d06b9f7dcccd4e596ad1004b8c2e52ac10c74/userdata/resolv.conf",
"io.container.manager": "cri-o",
"openshift.io/component": "network",
"io.kubernetes.cri-o.SeccompProfilePath": "runtime/default",
"io.kubernetes.cri-o.ShmPath": "/run/containers/storage/overlay-containers/ab4fbb6a0467c73a7d17e9822e1d06b9f7dcccd4e596ad1004b8c2e52ac10c74/userdata/shm",
"io.kubernetes.pod.namespace": "openshift-multus",
"io.kubernetes.cri-o.HostnamePath": "/run/containers/storage/overlay-containers/ab4fbb6a0467c73a7d17e9822e1d06b9f7dcccd4e596ad1004b8c2e52ac10c74/userdata/hostname",
"io.kubernetes.cri-o.Spoofed": "true",
"io.kubernetes.pod.uid": "43219567-0f5f-4293-9b68-14545a6b476d",
"io.kubernetes.cri-o.RuntimeHandler": "",
"pod-template-generation": "1",
"type": "infra",
"component": "network",
"io.kubernetes.cri-o.ContainerID": "ab4fbb6a0467c73a7d17e9822e1d06b9f7dcccd4e596ad1004b8c2e52ac10c74",
"io.kubernetes.cri-o.HostName": "sunilc1210491-hc9hl-worker-a-v6mj2.c.openshift-qe.internal",
"io.kubernetes.cri-o.Created": "2021-10-12T11:27:34.393603437Z",
"io.kubernetes.cri-o.LogPath": "/var/log/pods/openshift-multus_multus-fhmbb_43219567-0f5f-4293-9b68-14545a6b476d/ab4fbb6a0467c73a7d17e9822e1d06b9f7dcccd4e596ad1004b8c2e52ac10c74.log"
},
"linux": {
"resources": {
"devices": [
{
"allow": false,
"access": "rwm"
}
],
"cpu": {
"shares": 2
}
},
"cgroupsPath": "kubepods-burstable-pod43219567_0f5f_4293_9b68_14545a6b476d.slice:crio:ab4fbb6a0467c73a7d17e9822e1d06b9f7dcccd4e596ad1004b8c2e52ac10c74",
"namespaces": [
{
"type": "pid"
},
{
"type": "network",
"path": "/var/run/netns/54f3fa1b-07f1-47e9-80de-736683e82121"
},
{
"type": "ipc",
"path": "/var/run/ipcns/54f3fa1b-07f1-47e9-80de-736683e82121"
},
{
"type": "uts",
"path": "/var/run/utsns/54f3fa1b-07f1-47e9-80de-736683e82121"
},
{
"type": "mount"
}
],
"seccomp": {
"defaultAction": "SCMP_ACT_ERRNO",
"architectures": [
"SCMP_ARCH_X86_64",
"SCMP_ARCH_X86",
"SCMP_ARCH_X32"
],
"syscalls": [
{
"names": [
"accept",
"accept4",
"access",
"alarm",
"bind",
"brk",
"capget",
"capset",
"chdir",
"chmod",
"chown",
"chown32",
"clock_getres",
"clock_gettime",
"clock_nanosleep",
"close",
"connect",
"copy_file_range",
"creat",
"dup",
"dup2",
"dup3",
"epoll_create",
"epoll_create1",
"epoll_ctl",
"epoll_ctl_old",
"epoll_pwait",
"epoll_wait",
"epoll_wait_old",
"eventfd",
"eventfd2",
"execve",
"execveat",
"exit",
"exit_group",
"faccessat",
"fadvise64",
"fadvise64_64",
"fallocate",
"fanotify_mark",
"fchdir",
"fchmod",
"fchmodat",
"fchown",
"fchown32",
"fchownat",
"fcntl",
"fcntl64",
"fdatasync",
"fgetxattr",
"flistxattr",
"flock",
"fork",
"fremovexattr",
"fsetxattr",
"fstat",
"fstat64",
"fstatat64",
"fstatfs",
"fstatfs64",
"fsync",
"ftruncate",
"ftruncate64",
"futex",
"futimesat",
"getcpu",
"getcwd",
"getdents",
"getdents64",
"getegid",
"getegid32",
"geteuid",
"geteuid32",
"getgid",
"getgid32",
"getgroups",
"getgroups32",
"getitimer",
"getpeername",
"getpgid",
"getpgrp",
"getpid",
"getppid",
"getpriority",
"getrandom",
"getresgid",
"getresgid32",
"getresuid",
"getresuid32",
"getrlimit",
"get_robust_list",
"getrusage",
"getsid",
"getsockname",
"getsockopt",
"get_thread_area",
"gettid",
"gettimeofday",
"getuid",
"getuid32",
"getxattr",
"inotify_add_watch",
"inotify_init",
"inotify_init1",
"inotify_rm_watch",
"io_cancel",
"ioctl",
"io_destroy",
"io_getevents",
"ioprio_get",
"ioprio_set",
"io_setup",
"io_submit",
"ipc",
"kill",
"lchown",
"lchown32",
"lgetxattr",
"link",
"linkat",
"listen",
"listxattr",
"llistxattr",
"_llseek",
"lremovexattr",
"lseek",
"lsetxattr",
"lstat",
"lstat64",
"madvise",
"memfd_create",
"mincore",
"mkdir",
"mkdirat",
"mknod",
"mknodat",
"mlock",
"mlock2",
"mlockall",
"mmap",
"mmap2",
"mprotect",
"mq_getsetattr",
"mq_notify",
"mq_open",
"mq_timedreceive",
"mq_timedsend",
"mq_unlink",
"mremap",
"msgctl",
"msgget",
"msgrcv",
"msgsnd",
"msync",
"munlock",
"munlockall",
"munmap",
"nanosleep",
"newfstatat",
"_newselect",
"open",
"openat",
"pause",
"pipe",
"pipe2",
"poll",
"ppoll",
"prctl",
"pread64",
"preadv",
"prlimit64",
"pselect6",
"pwrite64",
"pwritev",
"read",
"readahead",
"readlink",
"readlinkat",
"readv",
"recv",
"recvfrom",
"recvmmsg",
"recvmsg",
"remap_file_pages",
"removexattr",
"rename",
"renameat",
"renameat2",
"restart_syscall",
"rmdir",
"rt_sigaction",
"rt_sigpending",
"rt_sigprocmask",
"rt_sigqueueinfo",
"rt_sigreturn",
"rt_sigsuspend",
"rt_sigtimedwait",
"rt_tgsigqueueinfo",
"sched_getaffinity",
"sched_getattr",
"sched_getparam",
"sched_get_priority_max",
"sched_get_priority_min",
"sched_getscheduler",
"sched_rr_get_interval",
"sched_setaffinity",
"sched_setattr",
"sched_setparam",
"sched_setscheduler",
"sched_yield",
"seccomp",
"select",
"semctl",
"semget",
"semop",
"semtimedop",
"send",
"sendfile",
"sendfile64",
"sendmmsg",
"sendmsg",
"sendto",
"setfsgid",
"setfsgid32",
"setfsuid",
"setfsuid32",
"setgid",
"setgid32",
"setgroups",
"setgroups32",
"setitimer",
"setpgid",
"setpriority",
"setregid",
"setregid32",
"setresgid",
"setresgid32",
"setresuid",
"setresuid32",
"setreuid",
"setreuid32",
"setrlimit",
"set_robust_list",
"setsid",
"setsockopt",
"set_thread_area",
"set_tid_address",
"setuid",
"setuid32",
"setxattr",
"shmat",
"shmctl",
"shmdt",
"shmget",
"shutdown",
"sigaltstack",
"signalfd",
"signalfd4",
"sigreturn",
"socket",
"socketcall",
"socketpair",
"splice",
"stat",
"stat64",
"statfs",
"statfs64",
"symlink",
"symlinkat",
"sync",
"sync_file_range",
"syncfs",
"sysinfo",
"syslog",
"tee",
"tgkill",
"time",
"timer_create",
"timer_delete",
"timerfd_create",
"timerfd_gettime",
"timerfd_settime",
"timer_getoverrun",
"timer_gettime",
"timer_settime",
"times",
"tkill",
"truncate",
"truncate64",
"ugetrlimit",
"umask",
"uname",
"unlink",
"unlinkat",
"utime",
"utimensat",
"utimes",
"vfork",
"vmsplice",
"wait4",
"waitid",
"waitpid",
"write",
"writev"
],
"action": "SCMP_ACT_ALLOW"
},
{
"names": [
"personality"
],
"action": "SCMP_ACT_ALLOW",
"args": [
{
"index": 0,
"value": 0,
"op": "SCMP_CMP_EQ"
},
{
"index": 0,
"value": 8,
"op": "SCMP_CMP_EQ"
},
{
"index": 0,
"value": 4294967295,
"op": "SCMP_CMP_EQ"
}
]
},
{
"names": [
"chroot"
],
"action": "SCMP_ACT_ALLOW"
},
{
"names": [
"clone"
],
"action": "SCMP_ACT_ALLOW",
"args": [
{
"index": 0,
"value": 2080505856,
"op": "SCMP_CMP_MASKED_EQ"
}
]
},
{
"names": [
"arch_prctl"
],
"action": "SCMP_ACT_ALLOW"
},
{
"names": [
"modify_ldt"
],
"action": "SCMP_ACT_ALLOW"
}
]
},
"mountLabel": "system_u:object_r:container_file_t:s0:c301,c874"
}
}
}
}
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Moderate: OpenShift Container Platform 4.9.0 bug fix and security update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2021:3759 |