a4d9985c38
In case we're running on RHEL7 kernel, which has non-working and broken kernel memory controller, add 'nokmem' build tag so that runc never enables kmem accounting. For more info, see the following runc commit: https://github.com/opencontainers/runc/commit/6a2c1559684 This behavior can be overriden by having `RUNC_NOKMEM` environment variable set (e.g. to empty value to disable setting nokmem). Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com> (cherry picked from commit 8972aa9350d52e4a7e58242447b7a9d2f0c27f37) Signed-off-by: Sebastiaan van Stijn <github@gone.nl> Upstream-commit: 8486ea11ae800a1e6d634b741dfb007ba29f6003 Component: engine
28 lines
843 B
Bash
Executable File
28 lines
843 B
Bash
Executable File
#!/bin/sh
|
|
|
|
# When updating RUNC_COMMIT, also update runc in vendor.conf accordingly
|
|
RUNC_COMMIT=9f1e94488e5e478e084fef997f022565b64b01d9
|
|
|
|
install_runc() {
|
|
# If using RHEL7 kernels (3.10.0 el7), disable kmem accounting/limiting
|
|
if uname -r | grep -q '^3\.10\.0.*\.el7\.'; then
|
|
: ${RUNC_NOKMEM='nokmem'}
|
|
fi
|
|
|
|
# Do not build with ambient capabilities support
|
|
RUNC_BUILDTAGS="${RUNC_BUILDTAGS:-"seccomp apparmor selinux $RUNC_NOKMEM"}"
|
|
|
|
echo "Install runc version $RUNC_COMMIT (build tags: $RUNC_BUILDTAGS)"
|
|
git clone https://github.com/opencontainers/runc.git "$GOPATH/src/github.com/opencontainers/runc"
|
|
cd "$GOPATH/src/github.com/opencontainers/runc"
|
|
git checkout -q "$RUNC_COMMIT"
|
|
if [ -z "$1" ]; then
|
|
target=static
|
|
else
|
|
target="$1"
|
|
fi
|
|
make BUILDTAGS="$RUNC_BUILDTAGS" "$target"
|
|
mkdir -p ${PREFIX}
|
|
cp runc ${PREFIX}/runc
|
|
}
|