Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

lxc: add missing deps #25719

Merged
merged 2 commits into from
Feb 24, 2025
Merged

lxc: add missing deps #25719

merged 2 commits into from
Feb 24, 2025

Conversation

graysky2
Copy link
Contributor

@graysky2 graysky2 commented Jan 10, 2025

Several deps are missing based the output of lxc-checkconfig shown below before this commit is applied.

CONFIG_IP_NF_TARGET_MASQUERADE and CONFIG_IP6_NF_TARGET_MASQUERADE are only needed for lxc-net which we do not package.

% lxc-checkconfig | grep missing
Cgroup device: missing
CONFIG_IP_NF_TARGET_MASQUERADE: missing
CONFIG_IP6_NF_TARGET_MASQUERADE: missing
CONFIG_NETFILTER_XT_TARGET_CHECKSUM: missing
FUSE (for use with lxcfs): missing
checkpoint restore: missing
CONFIG_UNIX_DIAG: missing
CONFIG_INET_DIAG: missing
CONFIG_PACKET_DIAG: missing
CONFIG_NETLINK_DIAG: missing

Additionally, two new patches have been added which remove checks for options that OpenWrt currently does not package and can serve are false positives for missing items from our kernel config, namely:
lxc-net and lxc-checkpoint

After applying this commit, below is the output showing that the kernel
config[1] should pass all tests for functionality:

% CONFIG=config ./lxc-checkconfig
LXC version 6.0.3

--- Namespaces ---
Namespaces: enabled
Utsname namespace: enabled
Ipc namespace: enabled
Pid namespace: enabled
User namespace: enabled
Network namespace: enabled
Namespace limits:
  cgroup: 383849
  ipc: 383849
  mnt: 383849
  net: 383849
  pid: 383849
  time: 383849
  user: 383849
  uts: 383849

--- Control groups ---
Cgroups: enabled
Cgroup namespace: enabled
Cgroup v1 mount points:
Cgroup v2 mount points:
 - /sys/fs/cgroup
Cgroup device: enabled
Cgroup sched: enabled
Cgroup cpu account: enabled
Cgroup memory controller: enabled
Cgroup cpuset: enabled

--- Misc ---
Veth pair device: enabled, loaded
Macvlan: enabled, not loaded
Vlan: enabled, not loaded
Bridges: enabled, loaded
Advanced netfilter: enabled, loaded
CONFIG_NETFILTER_XT_TARGET_CHECKSUM: enabled, not loaded
CONFIG_NETFILTER_XT_MATCH_COMMENT: enabled, loaded

--- Checkpoint/Restore ---
checkpoint restore: missing
CONFIG_FHANDLE: enabled
CONFIG_EVENTFD: enabled
CONFIG_EPOLL: enabled
CONFIG_UNIX_DIAG: enabled
CONFIG_INET_DIAG: enabled
CONFIG_PACKET_DIAG: enabled
CONFIG_NETLINK_DIAG: enabled
File capabilities: enabled
  1. Generated on 23-Feb-2025 running bcm27xx/bcm2712 on r28869+1

Maintainer: @ratkaj

graysky2 added a commit to graysky2/openwrt that referenced this pull request Jan 10, 2025
These four symbols are needed to satisfy lxc dependencies.

Note - this needs to be merged before openwrt/packages#25719

Signed-off-by: John Audia <[email protected]>
@graysky2 graysky2 force-pushed the lxc-missing branch 2 times, most recently from d30a6d2 to 9873c93 Compare January 10, 2025 02:57
graysky2 added a commit to graysky2/openwrt that referenced this pull request Jan 10, 2025
These four symbols are needed to satisfy lxc dependencies.

Note - this needs to be merged before openwrt/packages#25719

Signed-off-by: John Audia <[email protected]>
graysky2 added a commit to graysky2/openwrt that referenced this pull request Jan 10, 2025
These symbols are needed to satisfy lxc dependencies.

Note - this needs to be merged before openwrt/packages#25719

Signed-off-by: John Audia <[email protected]>
graysky2 added a commit to graysky2/openwrt that referenced this pull request Jan 12, 2025
These symbols are needed to satisfy lxc dependencies.

Note - this needs to be merged before openwrt/packages#25719

Signed-off-by: John Audia <[email protected]>
graysky2 added a commit to graysky2/openwrt that referenced this pull request Jan 20, 2025
These symbols are needed to satisfy lxc dependencies.

Note - this needs to be merged before openwrt/packages#25719

Signed-off-by: John Audia <[email protected]>
@graysky2 graysky2 force-pushed the lxc-missing branch 2 times, most recently from 71979b6 to 445ef22 Compare January 20, 2025 12:43
hauke pushed a commit to graysky2/openwrt that referenced this pull request Jan 20, 2025
These symbols are needed to satisfy lxc dependencies.

Note - this needs to be merged before openwrt/packages#25719

Signed-off-by: John Audia <[email protected]>
Link: openwrt#17553
Signed-off-by: Hauke Mehrtens <[email protected]>
@graysky2
Copy link
Contributor Author

@hauke - I don't know if @ratkaj is actively maintaining the lxc packages anymore. #24564 has been unanswered since July of last year.

We do not package lxc-net or lxcfs so remove the lines within
lxc-checkconfig that looks forCONFIG_IP_NF_TARGET_MASQUERADE and
CONFIG_IP6_NF_TARGET_MASQUERADE which, as far as I know, is the only
part of lxc that needs them. Also remove the check for FUSE since we do
not pakcage lxcfs.

Without this commit, users will see these two as missing.

Signed-off-by: John Audia <[email protected]>
@graysky2 graysky2 force-pushed the lxc-missing branch 2 times, most recently from b25f665 to fe78ce6 Compare February 23, 2025 12:11
@1715173329
Copy link
Member

please bump PKG_RELEASE.

Several deps are missing based the output of lxc-checkconfig shown below
before this commit is applied.

CONFIG_IP_NF_TARGET_MASQUERADE and CONFIG_IP6_NF_TARGET_MASQUERADE are
only needed for lxc-net which we do not package.

% lxc-checkconfig | grep missing
Cgroup device: missing
CONFIG_IP_NF_TARGET_MASQUERADE: missing
CONFIG_IP6_NF_TARGET_MASQUERADE: missing
CONFIG_NETFILTER_XT_TARGET_CHECKSUM: missing
FUSE (for use with lxcfs): missing
checkpoint restore: missing
CONFIG_UNIX_DIAG: missing
CONFIG_INET_DIAG: missing
CONFIG_PACKET_DIAG: missing
CONFIG_NETLINK_DIAG: missing

Additionally, two new patches have been added which remove checks for
options that OpenWrt currently does not package and can serve are
false positives for missing items from our kernel config, namely:
lxc-net and lxc-checkpoint

After applying this commit, below is the output showing that the kernel
config[1] should pass all tests for functionality:

% CONFIG=config ./lxc-checkconfig
LXC version 6.0.3

--- Namespaces ---
Namespaces: enabled
Utsname namespace: enabled
Ipc namespace: enabled
Pid namespace: enabled
User namespace: enabled
Network namespace: enabled
Namespace limits:
  cgroup: 383849
  ipc: 383849
  mnt: 383849
  net: 383849
  pid: 383849
  time: 383849
  user: 383849
  uts: 383849

--- Control groups ---
Cgroups: enabled
Cgroup namespace: enabled
Cgroup v1 mount points:
Cgroup v2 mount points:
 - /sys/fs/cgroup
Cgroup device: enabled
Cgroup sched: enabled
Cgroup cpu account: enabled
Cgroup memory controller: enabled
Cgroup cpuset: enabled

--- Misc ---
Veth pair device: enabled, loaded
Macvlan: enabled, not loaded
Vlan: enabled, not loaded
Bridges: enabled, loaded
Advanced netfilter: enabled, loaded
CONFIG_NETFILTER_XT_TARGET_CHECKSUM: enabled, not loaded
CONFIG_NETFILTER_XT_MATCH_COMMENT: enabled, loaded

--- Checkpoint/Restore ---
checkpoint restore: missing
CONFIG_FHANDLE: enabled
CONFIG_EVENTFD: enabled
CONFIG_EPOLL: enabled
CONFIG_UNIX_DIAG: enabled
CONFIG_INET_DIAG: enabled
CONFIG_PACKET_DIAG: enabled
CONFIG_NETLINK_DIAG: enabled
File capabilities: enabled

1. Generated on 23-Feb-2025 running bcm27xx/bcm2712 on r28869+1

Signed-off-by: John Audia <[email protected]>
@graysky2
Copy link
Contributor Author

please bump PKG_RELEASE.

Done, thanks

@1715173329 1715173329 merged commit ba7e4dc into openwrt:master Feb 24, 2025
2 of 12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants