kind (Kubernetes in Docker), podman, cgroup controllers and Delegate=yes
Hi all, I packaged kind (Kubernetes in Docker) for openSUSE, as I needed it for a demo at work. The package works, but I noticed something along the way.
The kind docs state how to enable systemd "delegation" for a user, i.e. the cgroup controllers are delegated to the user. https://kind.sigs.k8s.io/docs/user/rootless/ I tried that on my openSUSE tumbleweed machine, and did not work. I added another directory /etc/systemd/system/user@1234.service.d (where 1234 is my uid on the machine, the account comes from LDAP), put the file in it and it also did not work. After several reboots and switching from 'yes' to 'True' and back, I could get it to work. And today it no longer works. Or so I thought. I think I have narrowed it down to "login shells have more cgroup controllers in the output of 'podman info'". Which means I can only use this on one of the virtual terminals, not inside Plasma or tmux or screen. I can prefix the command with "systemd-run --user --scope --property=Delegate=yes", but that makes it a little awkward. So, what would be the best way to solve this? How to get systemd to actually respect the files when starting Plasma? Without konsole having to start a login shell for each window? And regarding packaging, I dropped the idea of shipping the file in /etc/systemd/system/user@.service.d/ (or similar), but would add a README pointing to the docs. For the next one having this issue... :-( Kind Regards, Johannes
participants (1)
-
Johannes Kastl