Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

genpolicy: reenable checking the OCI version #9593

Open
sprt opened this issue May 3, 2024 · 0 comments · May be fixed by #9606
Open

genpolicy: reenable checking the OCI version #9593

sprt opened this issue May 3, 2024 · 0 comments · May be fixed by #9606
Labels
enhancement Improvement to an existing feature

Comments

@sprt
Copy link
Contributor

sprt commented May 3, 2024

See #9592.

@sprt sprt added enhancement Improvement to an existing feature needs-review Needs to be assessed by the team. and removed needs-review Needs to be assessed by the team. labels May 3, 2024
sprt added a commit to sprt/kata-containers that referenced this issue May 3, 2024
The CH v39 upgrade in kata-containers#9575 is currently blocked because of a bug in the
Mariner host kernel. To address this, we temporarily tweak the Mariner
CI to use an Ubuntu host and the Kata guest kernel, while retaining the
Mariner initrd. This is tracked in kata-containers#9594.

Importantly, this allows us to preserve CI for genpolicy. We had to
tweak the default rules.rego however, as the OCI version is now
different in the Ubuntu host. This is tracked in kata-containers#9593.

Signed-off-by: Aurélien Bombo <abombo@microsoft.com>
sprt added a commit to sprt/kata-containers that referenced this issue May 3, 2024
The CH v39 upgrade in kata-containers#9575 is currently blocked because of a bug in the
Mariner host kernel. To address this, we temporarily tweak the Mariner
CI to use an Ubuntu host and the Kata guest kernel, while retaining the
Mariner initrd. This is tracked in kata-containers#9594.

Importantly, this allows us to preserve CI for genpolicy. We had to
tweak the default rules.rego however, as the OCI version is now
different in the Ubuntu host. This is tracked in kata-containers#9593.

This change has been tested together with CH v39 in kata-containers#9588.

Signed-off-by: Aurélien Bombo <abombo@microsoft.com>
Redent0r added a commit to microsoft/kata-containers that referenced this issue May 8, 2024
Fixes: kata-containers#9593

Signed-off-by: Saul Paredes <saulparedes@microsoft.com>
Redent0r added a commit to microsoft/kata-containers that referenced this issue May 8, 2024
Fixes: kata-containers#9593

Signed-off-by: Saul Paredes <saulparedes@microsoft.com>
Redent0r added a commit to microsoft/kata-containers that referenced this issue May 9, 2024
Fixes: kata-containers#9593

Signed-off-by: Saul Paredes <saulparedes@microsoft.com>
Redent0r added a commit to microsoft/kata-containers that referenced this issue May 13, 2024
Fixes: kata-containers#9593

Signed-off-by: Saul Paredes <saulparedes@microsoft.com>
Redent0r added a commit to microsoft/kata-containers that referenced this issue May 14, 2024
- reenable checking the OCI version
- only update containerd config if using cbl-mariner

Fixes: kata-containers#9593

Signed-off-by: Saul Paredes <saulparedes@microsoft.com>
Redent0r added a commit to microsoft/kata-containers that referenced this issue May 14, 2024
- reenable checking the OCI version
- only update containerd config if using cbl-mariner

Fixes: kata-containers#9593

Signed-off-by: Saul Paredes <saulparedes@microsoft.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement Improvement to an existing feature
Projects
Issue backlog
  
To do
Development

Successfully merging a pull request may close this issue.

1 participant