I lowered the severity from the original bug, AFAIK no customer is complaining so far.
Pruned bug dependencies
I am talking to local systemd guys about escaping a docker container properly so fuse daemon runs really on the host and restart of docker container won't kill it. Option 1: Newer systemd (v233?) ships systemd-mount, which creates an transient unit file that mounts. Fuse daemon would probably run in its context. In the container we would probably do 'nsenter --mount=/rootfs/proc/1/ns/mnt -- /bin/systemd-mount -t glusterfs -o <opts> <what> <where>' (testing needed). Unfortunately, RHEL7 has too old systemd and systemd-mount is not there and rebase is not planned. Backport could be possible though. Option 2: systemd in RHEL7 has systemd-run command, which creates a transient service and executes something there. kubelet would do `nsenter --mount=/rootfs/proc/1/ns/mnt -- /bin/systemd-run /bin/mount -t glusterfs -o <opts> <what> <where>'. Again, testing needed as I am not sure if the service would not be killed by systemd when /bin/mount finishes and only glusterfs fuse daemon is running. I'm investigating these options. Obviously, both these options will make openshift-node container dependent on the host running systemd. So far that was not hard requirement. Any other smart ideas how to escape a container are welcome.
Tested option 2, this looks working: nsenter --mount=/rootfs/proc/1/ns/mnt -- systemd-run --scope /bin/mount -t glusterfs 172.17.0.2:test_vol /var/lib/origin/openshift.local.volumes/xyz (and nsenter --mount=/rootfs/proc/1/ns/mnt -- umount /var/lib/origin/openshift.local.volumes/xyz) - glusterfs fuse daemon runs in its own systemd slice (=cgroup) with a random name (run-11615.scope) - it is not killed when /bin/mount finishes - it is killed by unmount - the slice is automatically deleted when the last process dies, i.e. after unmount That brings us to hard dependency on systemd on the host... In OpenShift it's probably OK, I am not sure about upstream.
created https://github.com/kubernetes/kubernetes/pull/48430, above systemd-run call is used when it's available on the host, otherwise simple 'nsenter --mount=/rootfs/proc/1/ns/mnt -- mount' is used.
*** This bug has been marked as a duplicate of bug 1472370 ***