mbox series

[SRU,J:kvm,0/1] support k8s minimal configuration for eBPF

Message ID 20240726155736.1356172-1-thibault.ferrante@canonical.com
Headers show
Series support k8s minimal configuration for eBPF | expand

Message

Thibault Ferrante July 26, 2024, 3:57 p.m. UTC 
BugLink: https://bugs.launchpad.net/bugs/2073973

[ Impact ]

Unable to run k8s and other software relying on Cilium.

[ Fix ]

Enable required configs and prerequisite.
Which consist of:
CONFIG_BPF_JIT
CONFIG_BPF_JIT_DEFAULT_ON
CONFIG_NET_EGRESS
CONFIG_NET_SCHED
CONFIG_NET_SCH_INGRESS
CONFIG_NET_CLS
CONFIG_NET_CLS_CGROUP
CONFIG_NET_CLS_BPF
CONFIG_NET_CLS_ACT
CONFIG_NET_SCH_FIFO
CONFIG_CRYPTO_USER_API
CONFIG_CRYPTO_USER_API_HASH
CONFIG_SCHEDSTATS

These configs are already enabled in generic kernel.

[ Test Plan ]

Tested with Cilium successfully

[ Where problems could occur ]

eBPF misbehavior.
Network regression due to enable network configuration.

Thibault Ferrante (1):
  UBUNTU: [Config] kvm: Enable minimal subset of config for k8s support

 debian.kvm/config/annotations | 141 ++++++++++++++++------------------
 1 file changed, 65 insertions(+), 76 deletions(-)

Comments

John Cabaj July 26, 2024, 9:51 p.m. UTC | #1 
On 7/26/24 10:57 AM, Thibault Ferrante wrote:
> BugLink: https://bugs.launchpad.net/bugs/2073973
> 
> [ Impact ]
> 
> Unable to run k8s and other software relying on Cilium.
> 
> [ Fix ]
> 
> Enable required configs and prerequisite.
> Which consist of:
> CONFIG_BPF_JIT
> CONFIG_BPF_JIT_DEFAULT_ON
> CONFIG_NET_EGRESS
> CONFIG_NET_SCHED
> CONFIG_NET_SCH_INGRESS
> CONFIG_NET_CLS
> CONFIG_NET_CLS_CGROUP
> CONFIG_NET_CLS_BPF
> CONFIG_NET_CLS_ACT
> CONFIG_NET_SCH_FIFO
> CONFIG_CRYPTO_USER_API
> CONFIG_CRYPTO_USER_API_HASH
> CONFIG_SCHEDSTATS
> 
> These configs are already enabled in generic kernel.
> 
> [ Test Plan ]
> 
> Tested with Cilium successfully
> 
> [ Where problems could occur ]
> 
> eBPF misbehavior.
> Network regression due to enable network configuration.
> 
> Thibault Ferrante (1):
>   UBUNTU: [Config] kvm: Enable minimal subset of config for k8s support
> 
>  debian.kvm/config/annotations | 141 ++++++++++++++++------------------
>  1 file changed, 65 insertions(+), 76 deletions(-)
> 

Acked-by: John Cabaj <john.cabaj@canonical.com>
Noah Wager July 29, 2024, 7:22 p.m. UTC | #2 
On Fri, Jul 26, 2024 at 05:57:35PM +0200, Thibault Ferrante wrote:
> BugLink: https://bugs.launchpad.net/bugs/2073973
> 
> [ Impact ]
> 
> Unable to run k8s and other software relying on Cilium.
> 
> [ Fix ]
> 
> Enable required configs and prerequisite.
> Which consist of:
> CONFIG_BPF_JIT
> CONFIG_BPF_JIT_DEFAULT_ON
> CONFIG_NET_EGRESS
> CONFIG_NET_SCHED
> CONFIG_NET_SCH_INGRESS
> CONFIG_NET_CLS
> CONFIG_NET_CLS_CGROUP
> CONFIG_NET_CLS_BPF
> CONFIG_NET_CLS_ACT
> CONFIG_NET_SCH_FIFO
> CONFIG_CRYPTO_USER_API
> CONFIG_CRYPTO_USER_API_HASH
> CONFIG_SCHEDSTATS
> 
> These configs are already enabled in generic kernel.
> 
> [ Test Plan ]
> 
> Tested with Cilium successfully
> 
> [ Where problems could occur ]
> 
> eBPF misbehavior.
> Network regression due to enable network configuration.
> 
> Thibault Ferrante (1):
>   UBUNTU: [Config] kvm: Enable minimal subset of config for k8s support
> 
>  debian.kvm/config/annotations | 141 ++++++++++++++++------------------
>  1 file changed, 65 insertions(+), 76 deletions(-)
> 
> -- 
> 2.43.0
> 
> 
> -- 
> kernel-team mailing list
> kernel-team@lists.ubuntu.com
> https://lists.ubuntu.com/mailman/listinfo/kernel-team

Acked-by: Noah Wager <noah.wager@canonical.com>
Stefan Bader July 31, 2024, 9:42 a.m. UTC | #3 
On 26.07.24 17:57, Thibault Ferrante wrote:
> BugLink: https://bugs.launchpad.net/bugs/2073973
> 
> [ Impact ]
> 
> Unable to run k8s and other software relying on Cilium.
> 
> [ Fix ]
> 
> Enable required configs and prerequisite.
> Which consist of:
> CONFIG_BPF_JIT
> CONFIG_BPF_JIT_DEFAULT_ON
> CONFIG_NET_EGRESS
> CONFIG_NET_SCHED
> CONFIG_NET_SCH_INGRESS
> CONFIG_NET_CLS
> CONFIG_NET_CLS_CGROUP
> CONFIG_NET_CLS_BPF
> CONFIG_NET_CLS_ACT
> CONFIG_NET_SCH_FIFO
> CONFIG_CRYPTO_USER_API
> CONFIG_CRYPTO_USER_API_HASH
> CONFIG_SCHEDSTATS
> 
> These configs are already enabled in generic kernel.
> 
> [ Test Plan ]
> 
> Tested with Cilium successfully
> 
> [ Where problems could occur ]
> 
> eBPF misbehavior.
> Network regression due to enable network configuration.
> 
> Thibault Ferrante (1):
>    UBUNTU: [Config] kvm: Enable minimal subset of config for k8s support
> 
>   debian.kvm/config/annotations | 141 ++++++++++++++++------------------
>   1 file changed, 65 insertions(+), 76 deletions(-)
> 

Applied to jammy:linux-kvm/master-next. Thanks.

-Stefan