Shulou(Shulou.com)06/01 Report--

This article mainly introduces how to achieve the installation and use of Kata and the problems encountered, has a certain reference value, interested friends can refer to, I hope you can learn a lot after reading this article, the following let the editor take you to understand it.

Characteristics of kata

Security runs in a dedicated kernel, provides isolation of network, I / O, and memory, and can be enforced by hardware through virtualized VT extensions.

Compatibility supports industry standards, including OCI container formats, Kubernetes CRI interfaces, and legacy virtualization technologies

Performance provides performance consistent with standard Linux containers; increases isolation without increasing the performance of standard virtual machines

Simply eliminates the need to nest containers within a complete virtual machine; the standard interface makes it easy to insert and get started.

Installation and easy to use

Installation

Source / etc/os-releasesudo yum- y install yum-utilsARCH=$ (arch) BRANCH= "${BRANCH:-master}" sudo-E yum-config-manager-- add-repo "http://download.opensuse.org/repositories/home:/katacontainers:/releases:/${ARCH}:/${BRANCH}/CentOS_${VERSION_ID}/home:katacontainers:releases:${ARCH}:${BRANCH}.repo"sudo-E yum- y install kata-runtime kata-proxy kata-shim"

Note: BRANCH corresponding to the system, some versions are not so complete, the author uses master corresponding to no centos7, reported 404, so the use of "stable-1.10".

Http://download.opensuse.org/repositories/home:/katacontainers:/releases:/${ARCH}:/stable-1.10/CentOS_${VERSION_ID}/home:katacontainers:releases:${ARCH}:stable-1.10.repo

Verify that kata installation is not complete

Sudo kata-runtime kata-checkSystem is capable of running Kata ContainersSystem can currently create Kata Containers

Docker installation

Yum remove-y docker docker-common container-selinux docker-selinux docker-engineyum install-y yum-utilsyum-config-manager-- add-repo https://download.docker.com/linux/centos/docker-ce.repoyum makecache fastyum install docker-cesystemctl start docker

Docker integration

Configuration file / etc/systemd/system/docker.service.d/kata-containers.conf

[Service] Type=simpleExecStart=ExecStart=/usr/bin/dockerd-D-default-runtime runc-add-runtime kata-runtime=/usr/bin/kata-runtime

Restart docker

Systemctl daemon-reload systemctl restart docker.servicedocker info | grep runtime

Start a container for verification, and here the author starts two, using different methods

Docker run-d-name centos-latest-runtime kata-runtime centos:latest sleep 3600

Errors encountered during installation

Q: errors that can occur in the VmWare used

1 、 ERROR: System is not capable of running Kata Containers2 、 ERRO [0000] CPU property not found

A: turn on "Intel VT-x/EPT" in the settings of the virtual machine

Q: the error is as follows: "ERROR: could not insert 'vhost_vsock': Device or resource busy"

WARN [0000] modprobe insert module failed: modprobe: ERROR: could not insert 'vhost_vsock': Device or resource busy arch=amd64 error= "exit status 1" module=vhost_vsock name=kata-runtime pid=1932 source=runtimeERRO [0000] kernel property not found arch=amd64 description= "Host Support for Linux VM Sockets" name=vhost_vsock pid=1932 source=runtime type=moduleSystem is capable of running Kata ContainersSystem can currently create Kata Containers

A: the reason is that linux detects that when running in a vmware environment, some vmware modules are loaded and vsock is used, resulting in a conflict

Sudo tee / etc/modprobe.d/blacklist-vmware.conf

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.