You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@openwhisk.apache.org by Henry Zektser <ja...@gmail.com> on 2019/05/13 01:44:21 UTC
CRI-O support?
Evening folks.. just tried to deploy OpenWhisk to a trial OpenShift 4
cluster, and ran into an interesting problem.. The invokers are trying to
run docker, which doesn’t actually exist.. Seems OS4 has gone completely
cri-o/podman.. In searching the GitHub issues, I see no references to this,
nor any in the docs.. are there plans in the works to address this? A
workaround I don’t know about? Or is this just not going to be a supported
configuration?
Re: Re: CRI-O support?
Posted by David P Grove <gr...@us.ibm.com>.
Henry Zektser <ja...@gmail.com> wrote on 05/14/2019 09:22:55 AM:
>
> Dave,
> I can confirm that approach works — I found that flag late last
> night :) It deploys with a minor tweak to the nginx config, and I’m
> able to invoke actions via WSK. Is there a downside to this over the
> host-mapped docker socket? I presume performance?
Great!
The main downside to the KubernetesContainerFactory is performance:
1. extracting the user logs for the executed actions via the Kubernetes API
is horrifically slow. Because a container can't be reused for another
invocation until we get the logs out for the previous invocation, this
significantly degrades overall system throughput. You can hack around this
by configuring the system with an alternate LogStoreProvider (see
configurationChoices.md [1]), but its not a great solution.
2. cold starts have at least a 3x increase in latency (Kubernetes container
creation is _really_ slow). This is partially mitigated by OpenWhisk's
reuse of containers, but still could matter for some work loads.
--dave
[1]
https://github.com/apache/incubator-openwhisk-deploy-kube/blob/master/docs/configurationChoices.md
Re: CRI-O support?
Posted by Henry Zektser <ja...@gmail.com>.
Dave,
I can confirm that approach works — I found that flag late last night :) It
deploys with a minor tweak to the nginx config, and I’m able to invoke
actions via WSK. Is there a downside to this over the host-mapped docker
socket? I presume performance?
On May 14, 2019 at 9:14:58 AM, David P Grove (groved@us.ibm.com) wrote:
Henry Zektser <ja...@gmail.com> wrote on 05/13/2019 08:50:11 AM:
>
> I guess what I’m trying to articulate is that openwhisk-deploy-kube fails
> in the case of OpenShift 4. I wanted to get the groups thoughts and
> confirm I’m not missing anything before I try to hammer in CRI-O support
—
> which appears like it won’t be that easy.
Hi Henry,
It would be great if we could get openwhisk-deploy-kube to work on
OpenShift4.
I don't have access to an OS4 system to help you directly, but happy
to provide advice & help get fixes into the code to make it work.
I'd suggest for the first cut to use the KubernetesContainerFactory
instead of the DockerContainerFactory. This should avoid the invoker
problems. To do this, add the following to your mycluster.yaml for the
Helm template command.
invoker:
containerFactory:
impl: kubernetes
kubernetes:
agent:
enabled: false
--dave
Re: CRI-O support?
Posted by Henry Zektser <ja...@gmail.com>.
I gave that a shot, as well as trying to symlink docker.sock to point to
crio.sock — that did not work I’m afraid.. The Kubernetes factory seemed to
work just fine, I’m just not clear on what the pros/cons of that are.
On May 14, 2019 at 9:20:59 AM, Don Schenck (don.schenck@gmail.com) wrote:
Since Podman is compatible, can you alias it to 'docker' and see if that
works?
On Tue, May 14, 2019 at 9:14 AM David P Grove <gr...@us.ibm.com> wrote:
> Henry Zektser <ja...@gmail.com> wrote on 05/13/2019 08:50:11 AM:
>
> >
> > I guess what I’m trying to articulate is that openwhisk-deploy-kube
fails
> > in the case of OpenShift 4. I wanted to get the groups thoughts and
> > confirm I’m not missing anything before I try to hammer in CRI-O
support
> —
> > which appears like it won’t be that easy.
>
> Hi Henry,
>
> It would be great if we could get openwhisk-deploy-kube to work on
> OpenShift4.
>
> I don't have access to an OS4 system to help you directly, but
> happy
> to provide advice & help get fixes into the code to make it work.
>
> I'd suggest for the first cut to use the KubernetesContainerFactory
> instead of the DockerContainerFactory. This should avoid the invoker
> problems. To do this, add the following to your mycluster.yaml for the
> Helm template command.
>
> invoker:
> containerFactory:
> impl: kubernetes
> kubernetes:
> agent:
> enabled: false
>
> --dave
>
--
I'm also on Twitter (@DonSchenck), Facebook (DonSchenck) and Skype
(schenckdon).
Re: CRI-O support?
Posted by Don Schenck <do...@gmail.com>.
Since Podman is compatible, can you alias it to 'docker' and see if that
works?
On Tue, May 14, 2019 at 9:14 AM David P Grove <gr...@us.ibm.com> wrote:
> Henry Zektser <ja...@gmail.com> wrote on 05/13/2019 08:50:11 AM:
>
> >
> > I guess what I’m trying to articulate is that openwhisk-deploy-kube fails
> > in the case of OpenShift 4. I wanted to get the groups thoughts and
> > confirm I’m not missing anything before I try to hammer in CRI-O support
> —
> > which appears like it won’t be that easy.
>
> Hi Henry,
>
> It would be great if we could get openwhisk-deploy-kube to work on
> OpenShift4.
>
> I don't have access to an OS4 system to help you directly, but
> happy
> to provide advice & help get fixes into the code to make it work.
>
> I'd suggest for the first cut to use the KubernetesContainerFactory
> instead of the DockerContainerFactory. This should avoid the invoker
> problems. To do this, add the following to your mycluster.yaml for the
> Helm template command.
>
> invoker:
> containerFactory:
> impl: kubernetes
> kubernetes:
> agent:
> enabled: false
>
> --dave
>
--
I'm also on Twitter (@DonSchenck), Facebook (DonSchenck) and Skype
(schenckdon).
Re: CRI-O support?
Posted by David P Grove <gr...@us.ibm.com>.
Henry Zektser <ja...@gmail.com> wrote on 05/13/2019 08:50:11 AM:
>
> I guess what I’m trying to articulate is that openwhisk-deploy-kube fails
> in the case of OpenShift 4. I wanted to get the groups thoughts and
> confirm I’m not missing anything before I try to hammer in CRI-O support
—
> which appears like it won’t be that easy.
Hi Henry,
It would be great if we could get openwhisk-deploy-kube to work on
OpenShift4.
I don't have access to an OS4 system to help you directly, but happy
to provide advice & help get fixes into the code to make it work.
I'd suggest for the first cut to use the KubernetesContainerFactory
instead of the DockerContainerFactory. This should avoid the invoker
problems. To do this, add the following to your mycluster.yaml for the
Helm template command.
invoker:
containerFactory:
impl: kubernetes
kubernetes:
agent:
enabled: false
--dave
documenting OpenShift/OKD deployment (was CRI-O support)
Posted by David P Grove <gr...@us.ibm.com>.
Hi Henry,
I've tried to write up some guidance using your emails on how to
deploy on OS4 using openwhisk-deploy-kube.
The PR is here [1].
I'm sure it is incomplete, so it would be greatly appreciated if you
could help flesh out the PR. You can either comment or submit PRs against
my fork/branch and I'll merge them in. Anything that makes it easier for
you to add docs.
thanks,
--dave
[1] https://github.com/apache/incubator-openwhisk-deploy-kube/pull/465
From: Henry Zektser <ja...@gmail.com>
To: Sven Lange-Last <sv...@de.ibm.com>,
dev@openwhisk.apache.org
Date: 05/13/2019 08:50 AM
Subject: Re: CRI-O support?
Hey Sven,
I guess what I’m trying to articulate is that openwhisk-deploy-kube fails
in the case of OpenShift 4.. I wanted to get the groups thoughts and
confirm I’m not missing anything before I try to hammer in CRI-O support —
which appears like it won’t be that easy. Here’s what I’m seeing — in
painful detail — so I apologize for the long dump in advance. This is all
done on a bare-naked OS4 deploy (
https://urldefense.proofpoint.com/v2/url?u=https-3A__try.openshift.com&d=DwIFaQ&c=jf_iaSHvJObTbx-siA1ZOg&r=Fe4FicGBU_20P2yihxV-apaNSFb6BSj6AlkptSF2gMk&m=JQ2OhHrNe2rRbL8Mqbz13ZpzhZgORYrA00cV3bHC4ng&s=0bvsTVRzU46DOMIgMvhNmwRs4TrUI8ub4Qpy0kfnrws&e=
) in AWS.
1. Label the worker nodes
oc label node ip-10-0-143-24.us-east-2.compute.internal
openwhisk-role=invoker
oc label node ip-10-0-144-49.us-east-2.compute.internal
openwhisk-role=invoker
oc label node ip-10-0-166-72.us-east-2.compute.internal
openwhisk-role=invoker
2. Because OpenShift doesn’t allow arbitrary UIDs by default, I allow them
explicitly
oc adm policy add-scc-to-user anyuid -z default
oc adm policy add-scc-to-user privileged -z default
oc adm policy add-scc-to-user anyuid -z openwhisk-core
oc adm policy add-scc-to-user privileged -z openwhisk-core
3. From the tip of master for incubator-openwhisk-deploy-kube, I run the
helm chart
helm template ./helm/openwhisk --namespace=openwhisk --name=openwhisk | oc
create -f -
4. Grab coffee while things come up :)
5. Comment out resolver kube-dns.kube-system; in the nginx ConfigMap — this
actually causes a crash loop in OpenShift. Then restart the pod. It comes
up happy.
6. NOTE: This is where the problem lies. The openwhisk-invoker-* pods sit
in initCrashLoopBackOff. The logs for these all show the same thing in the
docker-pull-runtimes container — no docker = ansible failure. The complete
log of the init container is at the bottom of this message.
I’ll confess this new release from RedHat has me re-learning 50% of what I
solidly had a grasp on 2 weeks ago, but I think the net/net is, this
deployment is expecting to connect to the docker socket on the underlying
host. I can see that in the YAML for the pod;
volumeMounts:
- name: dockersock
mountPath: /var/run/docker.sock
Given OS4 only runs on RedHat CoreOS now, and doesn’t even deploy docker..
I believe there’s a problem here? I suppose it’s conceivable if I map the
CRI-O socket instead, the docker client might work? I haven’t tried it yet
— I’ve left my deploy bone-stock in case any of the devs would like to see
some additional dumps/debug data/etc before I start messing around with it…
I’m happy to be the guinea pig if anyones got a workaround.. Also happy to
start working on CRI-O support if that’s what we really need here, though
again, not sure that’s going to be easy or quick.
[WARNING]: Unable to parse /etc/ansible/hosts as an inventory source
[WARNING]: No inventory was parsed, only implicit localhost is available
[WARNING]: provided hosts list is empty, only localhost is available. Note
that the implicit localhost does not match 'all' PLAY [localhost]
*************************************************************** TASK
[Gathering Facts] *********************************************************
ok: [localhost] TASK [docker login]
************************************************************ skipping:
[localhost] TASK [Display runtime manifest]
************************************************ ok: [localhost] => {
"runtimes_manifest": { "blackboxes": [ { "name": "dockerskeleton",
"prefix": "openwhisk", "tag": "3d6ee06" } ], "runtimes": { "ballerina": [ {
"attached": { "attachmentName": "codefile", "attachmentType": "text/plain"
}, "default": true, "deprecated": false, "image": { "name":
"action-ballerina-v0.990.2", "prefix": "openwhisk", "tag": "d049638" },
"kind": "ballerina:0.990" } ], "dotnet": [ { "attached": {
"attachmentName": "codefile", "attachmentType": "text/plain" }, "default":
true, "deprecated": false, "image": { "name": "action-dotnet-v2.2",
"prefix": "openwhisk", "tag": "50df3ba" }, "kind": "dotnet:2.2",
"requireMain": true } ], "go": [ { "attached": { "attachmentName":
"codefile", "attachmentType": "text/plain" }, "default": true,
"deprecated": false, "image": { "name": "actionloop-golang-v1.11",
"prefix": "openwhisk", "tag": "ddd3299" }, "kind": "go:1.11" } ], "java": [
{ "attached": { "attachmentName": "jarfile", "attachmentType":
"application/java-archive" }, "default": true, "deprecated": false,
"image": { "name": "java8action", "prefix": "openwhisk", "tag": "9f27bab"
}, "kind": "java", "requireMain": true } ], "nodejs": [ { "attached": {
"attachmentName": "codefile", "attachmentType": "text/plain" }, "default":
false, "deprecated": false, "image": { "name": "nodejs6action", "prefix":
"openwhisk", "tag": "ab224ab" }, "kind": "nodejs:6" }, { "attached": {
"attachmentName": "codefile", "attachmentType": "text/plain" }, "default":
false, "deprecated": false, "image": { "name": "action-nodejs-v8",
"prefix": "openwhisk", "tag": "ab224ab" }, "kind": "nodejs:8" }, {
"attached": { "attachmentName": "codefile", "attachmentType": "text/plain"
}, "default": true, "deprecated": false, "image": { "name":
"action-nodejs-v10", "prefix": "openwhisk", "tag": "ab224ab" }, "kind":
"nodejs:10", "stemCells": [ { "count": 2, "memory": "256 MB" } ] }, {
"attached": { "attachmentName": "codefile", "attachmentType": "text/plain"
}, "default": false, "deprecated": false, "image": { "name":
"action-nodejs-v12", "prefix": "openwhisk", "tag": "ab224ab" }, "kind":
"nodejs:12" } ], "php": [ { "attached": { "attachmentName": "codefile",
"attachmentType": "text/plain" }, "default": true, "deprecated": false,
"image": { "name": "action-php-v7.3", "prefix": "openwhisk", "tag":
"9c5d3d7" }, "kind": "php:7.3" } ], "python": [ { "attached": {
"attachmentName": "codefile", "attachmentType": "text/plain" }, "default":
false, "deprecated": false, "image": { "name": "python2action", "prefix":
"openwhisk", "tag": "d6a8920" }, "kind": "python:2" }, { "attached": {
"attachmentName": "codefile", "attachmentType": "text/plain" }, "default":
true, "deprecated": false, "image": { "name": "python3action", "prefix":
"openwhisk", "tag": "aaeb2ff" }, "kind": "python:3" } ], "ruby": [ {
"attached": { "attachmentName": "codefile", "attachmentType": "text/plain"
}, "default": true, "deprecated": false, "image": { "name":
"action-ruby-v2.5", "prefix": "openwhisk", "tag": "b1afb74" }, "kind":
"ruby:2.5" } ], "swift": [ { "attached": { "attachmentName": "codefile",
"attachmentType": "text/plain" }, "default": true, "deprecated": false,
"image": { "name": "action-swift-v4.2", "prefix": "openwhisk", "tag":
"019024d" }, "kind": "swift:4.2" } ] } } } TASK [Process runtime manifest]
************************************************ ok: [localhost] TASK [pull
runtime action images per manifest] *********************************
failed: [localhost] (item={u'prefix': u'openwhisk', u'tag': u'd049638',
u'name': u'action-ballerina-v0.990.2'}) => {"changed": true, "cmd": "docker
pull openwhisk/action-ballerina-v0.990.2:d049638", "delta":
"0:00:00.381501", "end": "2019-05-13 12:44:05.599610", "item": {"name":
"action-ballerina-v0.990.2", "prefix": "openwhisk", "tag": "d049638"},
"msg": "non-zero return code", "rc": 1, "start": "2019-05-13
12:44:05.218109", "stderr": "Cannot connect to the Docker daemon. Is the
docker daemon running on this host?", "stderr_lines": ["Cannot connect to
the Docker daemon. Is the docker daemon running on this host?"], "stdout":
"Warning: failed to get default registry endpoint from daemon (Cannot
connect to the Docker daemon. Is the docker daemon running on this host?).
Using system default:
https://urldefense.proofpoint.com/v2/url?u=https-3A__index.docker.io_v1_&d=DwIFaQ&c=jf_iaSHvJObTbx-siA1ZOg&r=Fe4FicGBU_20P2yihxV-apaNSFb6BSj6AlkptSF2gMk&m=JQ2OhHrNe2rRbL8Mqbz13ZpzhZgORYrA00cV3bHC4ng&s=MkSaEw3ozq7Js0_mpxgOUNJlGxoCjPvXJgHyu64Q7bs&e=
", "stdout_lines":
["Warning: failed to get default registry endpoint from daemon (Cannot
connect to the Docker daemon. Is the docker daemon running on this host?).
Using system default:
https://urldefense.proofpoint.com/v2/url?u=https-3A__index.docker.io_v1_&d=DwIFaQ&c=jf_iaSHvJObTbx-siA1ZOg&r=Fe4FicGBU_20P2yihxV-apaNSFb6BSj6AlkptSF2gMk&m=JQ2OhHrNe2rRbL8Mqbz13ZpzhZgORYrA00cV3bHC4ng&s=MkSaEw3ozq7Js0_mpxgOUNJlGxoCjPvXJgHyu64Q7bs&e=
"]} failed: [localhost]
(item={u'prefix': u'openwhisk', u'tag': u'019024d', u'name':
u'action-swift-v4.2'}) => {"changed": true, "cmd": "docker pull
openwhisk/action-swift-v4.2:019024d", "delta": "0:00:00.298633", "end":
"2019-05-13 12:44:06.048738", "item": {"name": "action-swift-v4.2",
"prefix": "openwhisk", "tag": "019024d"}, "msg": "non-zero return code",
"rc": 1, "start": "2019-05-13 12:44:05.750105", "stderr": "Cannot connect
to the Docker daemon. Is the docker daemon running on this host?",
"stderr_lines": ["Cannot connect to the Docker daemon. Is the docker daemon
running on this host?"], "stdout": "Warning: failed to get default registry
endpoint from daemon (Cannot connect to the Docker daemon. Is the docker
daemon running on this host?). Using system default:
https://urldefense.proofpoint.com/v2/url?u=https-3A__index.docker.io_v1_&d=DwIFaQ&c=jf_iaSHvJObTbx-siA1ZOg&r=Fe4FicGBU_20P2yihxV-apaNSFb6BSj6AlkptSF2gMk&m=JQ2OhHrNe2rRbL8Mqbz13ZpzhZgORYrA00cV3bHC4ng&s=MkSaEw3ozq7Js0_mpxgOUNJlGxoCjPvXJgHyu64Q7bs&e=
", "stdout_lines": ["Warning: failed to get
default registry endpoint from daemon (Cannot connect to the Docker daemon.
Is the docker daemon running on this host?). Using system default:
https://urldefense.proofpoint.com/v2/url?u=https-3A__index.docker.io_v1_&d=DwIFaQ&c=jf_iaSHvJObTbx-siA1ZOg&r=Fe4FicGBU_20P2yihxV-apaNSFb6BSj6AlkptSF2gMk&m=JQ2OhHrNe2rRbL8Mqbz13ZpzhZgORYrA00cV3bHC4ng&s=MkSaEw3ozq7Js0_mpxgOUNJlGxoCjPvXJgHyu64Q7bs&e=
"]} failed: [localhost] (item={u'prefix':
u'openwhisk', u'tag': u'9f27bab', u'name': u'java8action'}) => {"changed":
true, "cmd": "docker pull openwhisk/java8action:9f27bab", "delta":
"0:00:00.314633", "end": "2019-05-13 12:44:06.533496", "item": {"name":
"java8action", "prefix": "openwhisk", "tag": "9f27bab"}, "msg": "non-zero
return code", "rc": 1, "start": "2019-05-13 12:44:06.218863", "stderr":
"Cannot connect to the Docker daemon. Is the docker daemon running on this
host?", "stderr_lines": ["Cannot connect to the Docker daemon. Is the
docker daemon running on this host?"], "stdout": "Warning: failed to get
default registry endpoint from daemon (Cannot connect to the Docker daemon.
Is the docker daemon running on this host?). Using system default:
https://urldefense.proofpoint.com/v2/url?u=https-3A__index.docker.io_v1_&d=DwIFaQ&c=jf_iaSHvJObTbx-siA1ZOg&r=Fe4FicGBU_20P2yihxV-apaNSFb6BSj6AlkptSF2gMk&m=JQ2OhHrNe2rRbL8Mqbz13ZpzhZgORYrA00cV3bHC4ng&s=MkSaEw3ozq7Js0_mpxgOUNJlGxoCjPvXJgHyu64Q7bs&e=
", "stdout_lines": ["Warning: failed to get
default registry endpoint from daemon (Cannot connect to the Docker daemon.
Is the docker daemon running on this host?). Using system default:
https://urldefense.proofpoint.com/v2/url?u=https-3A__index.docker.io_v1_&d=DwIFaQ&c=jf_iaSHvJObTbx-siA1ZOg&r=Fe4FicGBU_20P2yihxV-apaNSFb6BSj6AlkptSF2gMk&m=JQ2OhHrNe2rRbL8Mqbz13ZpzhZgORYrA00cV3bHC4ng&s=MkSaEw3ozq7Js0_mpxgOUNJlGxoCjPvXJgHyu64Q7bs&e=
"]} failed: [localhost] (item={u'prefix':
u'openwhisk', u'tag': u'ddd3299', u'name': u'actionloop-golang-v1.11'}) =>
{"changed": true, "cmd": "docker pull
openwhisk/actionloop-golang-v1.11:ddd3299", "delta": "0:00:00.297243",
"end": "2019-05-13 12:44:07.098680", "item": {"name":
"actionloop-golang-v1.11", "prefix": "openwhisk", "tag": "ddd3299"}, "msg":
"non-zero return code", "rc": 1, "start": "2019-05-13 12:44:06.801437",
"stderr": "Cannot connect to the Docker daemon. Is the docker daemon
running on this host?", "stderr_lines": ["Cannot connect to the Docker
daemon. Is the docker daemon running on this host?"], "stdout": "Warning:
failed to get default registry endpoint from daemon (Cannot connect to the
Docker daemon. Is the docker daemon running on this host?). Using system
default:
https://urldefense.proofpoint.com/v2/url?u=https-3A__index.docker.io_v1_&d=DwIFaQ&c=jf_iaSHvJObTbx-siA1ZOg&r=Fe4FicGBU_20P2yihxV-apaNSFb6BSj6AlkptSF2gMk&m=JQ2OhHrNe2rRbL8Mqbz13ZpzhZgORYrA00cV3bHC4ng&s=MkSaEw3ozq7Js0_mpxgOUNJlGxoCjPvXJgHyu64Q7bs&e=
", "stdout_lines": ["Warning: failed to
get default registry endpoint from daemon (Cannot connect to the Docker
daemon. Is the docker daemon running on this host?). Using system default:
https://urldefense.proofpoint.com/v2/url?u=https-3A__index.docker.io_v1_&d=DwIFaQ&c=jf_iaSHvJObTbx-siA1ZOg&r=Fe4FicGBU_20P2yihxV-apaNSFb6BSj6AlkptSF2gMk&m=JQ2OhHrNe2rRbL8Mqbz13ZpzhZgORYrA00cV3bHC4ng&s=MkSaEw3ozq7Js0_mpxgOUNJlGxoCjPvXJgHyu64Q7bs&e=
"]} failed: [localhost] (item={u'prefix':
u'openwhisk', u'tag': u'ab224ab', u'name': u'nodejs6action'}) =>
{"changed": true, "cmd": "docker pull openwhisk/nodejs6action:ab224ab",
"delta": "0:00:00.444807", "end": "2019-05-13 12:44:07.696461", "item":
{"name": "nodejs6action", "prefix": "openwhisk", "tag": "ab224ab"}, "msg":
"non-zero return code", "rc": 1, "start": "2019-05-13 12:44:07.251654",
"stderr": "Cannot connect to the Docker daemon. Is the docker daemon
running on this host?", "stderr_lines": ["Cannot connect to the Docker
daemon. Is the docker daemon running on this host?"], "stdout": "Warning:
failed to get default registry endpoint from daemon (Cannot connect to the
Docker daemon. Is the docker daemon running on this host?). Using system
default:
https://urldefense.proofpoint.com/v2/url?u=https-3A__index.docker.io_v1_&d=DwIFaQ&c=jf_iaSHvJObTbx-siA1ZOg&r=Fe4FicGBU_20P2yihxV-apaNSFb6BSj6AlkptSF2gMk&m=JQ2OhHrNe2rRbL8Mqbz13ZpzhZgORYrA00cV3bHC4ng&s=MkSaEw3ozq7Js0_mpxgOUNJlGxoCjPvXJgHyu64Q7bs&e=
", "stdout_lines": ["Warning: failed to
get default registry endpoint from daemon (Cannot connect to the Docker
daemon. Is the docker daemon running on this host?). Using system default:
https://urldefense.proofpoint.com/v2/url?u=https-3A__index.docker.io_v1_&d=DwIFaQ&c=jf_iaSHvJObTbx-siA1ZOg&r=Fe4FicGBU_20P2yihxV-apaNSFb6BSj6AlkptSF2gMk&m=JQ2OhHrNe2rRbL8Mqbz13ZpzhZgORYrA00cV3bHC4ng&s=MkSaEw3ozq7Js0_mpxgOUNJlGxoCjPvXJgHyu64Q7bs&e=
"]} failed: [localhost] (item={u'prefix':
u'openwhisk', u'tag': u'ab224ab', u'name': u'action-nodejs-v8'}) =>
{"changed": true, "cmd": "docker pull openwhisk/action-nodejs-v8:ab224ab",
"delta": "0:00:00.506225", "end": "2019-05-13 12:44:08.458140", "item":
{"name": "action-nodejs-v8", "prefix": "openwhisk", "tag": "ab224ab"},
"msg": "non-zero return code", "rc": 1, "start": "2019-05-13
12:44:07.951915", "stderr": "Cannot connect to the Docker daemon. Is the
docker daemon running on this host?", "stderr_lines": ["Cannot connect to
the Docker daemon. Is the docker daemon running on this host?"], "stdout":
"Warning: failed to get default registry endpoint from daemon (Cannot
connect to the Docker daemon. Is the docker daemon running on this host?).
Using system default:
https://urldefense.proofpoint.com/v2/url?u=https-3A__index.docker.io_v1_&d=DwIFaQ&c=jf_iaSHvJObTbx-siA1ZOg&r=Fe4FicGBU_20P2yihxV-apaNSFb6BSj6AlkptSF2gMk&m=JQ2OhHrNe2rRbL8Mqbz13ZpzhZgORYrA00cV3bHC4ng&s=MkSaEw3ozq7Js0_mpxgOUNJlGxoCjPvXJgHyu64Q7bs&e=
", "stdout_lines":
["Warning: failed to get default registry endpoint from daemon (Cannot
connect to the Docker daemon. Is the docker daemon running on this host?).
Using system default:
https://urldefense.proofpoint.com/v2/url?u=https-3A__index.docker.io_v1_&d=DwIFaQ&c=jf_iaSHvJObTbx-siA1ZOg&r=Fe4FicGBU_20P2yihxV-apaNSFb6BSj6AlkptSF2gMk&m=JQ2OhHrNe2rRbL8Mqbz13ZpzhZgORYrA00cV3bHC4ng&s=MkSaEw3ozq7Js0_mpxgOUNJlGxoCjPvXJgHyu64Q7bs&e=
"]} failed: [localhost]
(item={u'prefix': u'openwhisk', u'tag': u'ab224ab', u'name':
u'action-nodejs-v10'}) => {"changed": true, "cmd": "docker pull
openwhisk/action-nodejs-v10:ab224ab", "delta": "0:00:00.392248", "end":
"2019-05-13 12:44:09.024233", "item": {"name": "action-nodejs-v10",
"prefix": "openwhisk", "tag": "ab224ab"}, "msg": "non-zero return code",
"rc": 1, "start": "2019-05-13 12:44:08.631985", "stderr": "Cannot connect
to the Docker daemon. Is the docker daemon running on this host?",
"stderr_lines": ["Cannot connect to the Docker daemon. Is the docker daemon
running on this host?"], "stdout": "Warning: failed to get default registry
endpoint from daemon (Cannot connect to the Docker daemon. Is the docker
daemon running on this host?). Using system default:
https://urldefense.proofpoint.com/v2/url?u=https-3A__index.docker.io_v1_&d=DwIFaQ&c=jf_iaSHvJObTbx-siA1ZOg&r=Fe4FicGBU_20P2yihxV-apaNSFb6BSj6AlkptSF2gMk&m=JQ2OhHrNe2rRbL8Mqbz13ZpzhZgORYrA00cV3bHC4ng&s=MkSaEw3ozq7Js0_mpxgOUNJlGxoCjPvXJgHyu64Q7bs&e=
", "stdout_lines": ["Warning: failed to get
default registry endpoint from daemon (Cannot connect to the Docker daemon.
Is the docker daemon running on this host?). Using system default:
https://urldefense.proofpoint.com/v2/url?u=https-3A__index.docker.io_v1_&d=DwIFaQ&c=jf_iaSHvJObTbx-siA1ZOg&r=Fe4FicGBU_20P2yihxV-apaNSFb6BSj6AlkptSF2gMk&m=JQ2OhHrNe2rRbL8Mqbz13ZpzhZgORYrA00cV3bHC4ng&s=MkSaEw3ozq7Js0_mpxgOUNJlGxoCjPvXJgHyu64Q7bs&e=
"]} failed: [localhost] (item={u'prefix':
u'openwhisk', u'tag': u'ab224ab', u'name': u'action-nodejs-v12'}) =>
{"changed": true, "cmd": "docker pull openwhisk/action-nodejs-v12:ab224ab",
"delta": "0:00:00.366956", "end": "2019-05-13 12:44:09.564138", "item":
{"name": "action-nodejs-v12", "prefix": "openwhisk", "tag": "ab224ab"},
"msg": "non-zero return code", "rc": 1, "start": "2019-05-13
12:44:09.197182", "stderr": "Cannot connect to the Docker daemon. Is the
docker daemon running on this host?", "stderr_lines": ["Cannot connect to
the Docker daemon. Is the docker daemon running on this host?"], "stdout":
"Warning: failed to get default registry endpoint from daemon (Cannot
connect to the Docker daemon. Is the docker daemon running on this host?).
Using system default:
https://urldefense.proofpoint.com/v2/url?u=https-3A__index.docker.io_v1_&d=DwIFaQ&c=jf_iaSHvJObTbx-siA1ZOg&r=Fe4FicGBU_20P2yihxV-apaNSFb6BSj6AlkptSF2gMk&m=JQ2OhHrNe2rRbL8Mqbz13ZpzhZgORYrA00cV3bHC4ng&s=MkSaEw3ozq7Js0_mpxgOUNJlGxoCjPvXJgHyu64Q7bs&e=
", "stdout_lines":
["Warning: failed to get default registry endpoint from daemon (Cannot
connect to the Docker daemon. Is the docker daemon running on this host?).
Using system default:
https://urldefense.proofpoint.com/v2/url?u=https-3A__index.docker.io_v1_&d=DwIFaQ&c=jf_iaSHvJObTbx-siA1ZOg&r=Fe4FicGBU_20P2yihxV-apaNSFb6BSj6AlkptSF2gMk&m=JQ2OhHrNe2rRbL8Mqbz13ZpzhZgORYrA00cV3bHC4ng&s=MkSaEw3ozq7Js0_mpxgOUNJlGxoCjPvXJgHyu64Q7bs&e=
"]} failed: [localhost]
(item={u'prefix': u'openwhisk', u'tag': u'd6a8920', u'name':
u'python2action'}) => {"changed": true, "cmd": "docker pull
openwhisk/python2action:d6a8920", "delta": "0:00:00.316099", "end":
"2019-05-13 12:44:10.013803", "item": {"name": "python2action", "prefix":
"openwhisk", "tag": "d6a8920"}, "msg": "non-zero return code", "rc": 1,
"start": "2019-05-13 12:44:09.697704", "stderr": "Cannot connect to the
Docker daemon. Is the docker daemon running on this host?", "stderr_lines":
["Cannot connect to the Docker daemon. Is the docker daemon running on this
host?"], "stdout": "Warning: failed to get default registry endpoint from
daemon (Cannot connect to the Docker daemon. Is the docker daemon running
on this host?). Using system default:
https://urldefense.proofpoint.com/v2/url?u=https-3A__index.docker.io_v1_&d=DwIFaQ&c=jf_iaSHvJObTbx-siA1ZOg&r=Fe4FicGBU_20P2yihxV-apaNSFb6BSj6AlkptSF2gMk&m=JQ2OhHrNe2rRbL8Mqbz13ZpzhZgORYrA00cV3bHC4ng&s=MkSaEw3ozq7Js0_mpxgOUNJlGxoCjPvXJgHyu64Q7bs&e=
",
"stdout_lines": ["Warning: failed to get default registry endpoint from
daemon (Cannot connect to the Docker daemon. Is the docker daemon running
on this host?). Using system default:
https://urldefense.proofpoint.com/v2/url?u=https-3A__index.docker.io_v1_&d=DwIFaQ&c=jf_iaSHvJObTbx-siA1ZOg&r=Fe4FicGBU_20P2yihxV-apaNSFb6BSj6AlkptSF2gMk&m=JQ2OhHrNe2rRbL8Mqbz13ZpzhZgORYrA00cV3bHC4ng&s=MkSaEw3ozq7Js0_mpxgOUNJlGxoCjPvXJgHyu64Q7bs&e=
"]}
failed: [localhost] (item={u'prefix': u'openwhisk', u'tag': u'aaeb2ff',
u'name': u'python3action'}) => {"changed": true, "cmd": "docker pull
openwhisk/python3action:aaeb2ff", "delta": "0:00:00.328495", "end":
"2019-05-13 12:44:10.491397", "item": {"name": "python3action", "prefix":
"openwhisk", "tag": "aaeb2ff"}, "msg": "non-zero return code", "rc": 1,
"start": "2019-05-13 12:44:10.162902", "stderr": "Cannot connect to the
Docker daemon. Is the docker daemon running on this host?", "stderr_lines":
["Cannot connect to the Docker daemon. Is the docker daemon running on this
host?"], "stdout": "Warning: failed to get default registry endpoint from
daemon (Cannot connect to the Docker daemon. Is the docker daemon running
on this host?). Using system default:
https://urldefense.proofpoint.com/v2/url?u=https-3A__index.docker.io_v1_&d=DwIFaQ&c=jf_iaSHvJObTbx-siA1ZOg&r=Fe4FicGBU_20P2yihxV-apaNSFb6BSj6AlkptSF2gMk&m=JQ2OhHrNe2rRbL8Mqbz13ZpzhZgORYrA00cV3bHC4ng&s=MkSaEw3ozq7Js0_mpxgOUNJlGxoCjPvXJgHyu64Q7bs&e=
",
"stdout_lines": ["Warning: failed to get default registry endpoint from
daemon (Cannot connect to the Docker daemon. Is the docker daemon running
on this host?). Using system default:
https://urldefense.proofpoint.com/v2/url?u=https-3A__index.docker.io_v1_&d=DwIFaQ&c=jf_iaSHvJObTbx-siA1ZOg&r=Fe4FicGBU_20P2yihxV-apaNSFb6BSj6AlkptSF2gMk&m=JQ2OhHrNe2rRbL8Mqbz13ZpzhZgORYrA00cV3bHC4ng&s=MkSaEw3ozq7Js0_mpxgOUNJlGxoCjPvXJgHyu64Q7bs&e=
"]}
failed: [localhost] (item={u'prefix': u'openwhisk', u'tag': u'50df3ba',
u'name': u'action-dotnet-v2.2'}) => {"changed": true, "cmd": "docker pull
openwhisk/action-dotnet-v2.2:50df3ba", "delta": "0:00:00.297934", "end":
"2019-05-13 12:44:10.915641", "item": {"name": "action-dotnet-v2.2",
"prefix": "openwhisk", "tag": "50df3ba"}, "msg": "non-zero return code",
"rc": 1, "start": "2019-05-13 12:44:10.617707", "stderr": "Cannot connect
to the Docker daemon. Is the docker daemon running on this host?",
"stderr_lines": ["Cannot connect to the Docker daemon. Is the docker daemon
running on this host?"], "stdout": "Warning: failed to get default registry
endpoint from daemon (Cannot connect to the Docker daemon. Is the docker
daemon running on this host?). Using system default:
https://urldefense.proofpoint.com/v2/url?u=https-3A__index.docker.io_v1_&d=DwIFaQ&c=jf_iaSHvJObTbx-siA1ZOg&r=Fe4FicGBU_20P2yihxV-apaNSFb6BSj6AlkptSF2gMk&m=JQ2OhHrNe2rRbL8Mqbz13ZpzhZgORYrA00cV3bHC4ng&s=MkSaEw3ozq7Js0_mpxgOUNJlGxoCjPvXJgHyu64Q7bs&e=
", "stdout_lines": ["Warning: failed to get
default registry endpoint from daemon (Cannot connect to the Docker daemon.
Is the docker daemon running on this host?). Using system default:
https://urldefense.proofpoint.com/v2/url?u=https-3A__index.docker.io_v1_&d=DwIFaQ&c=jf_iaSHvJObTbx-siA1ZOg&r=Fe4FicGBU_20P2yihxV-apaNSFb6BSj6AlkptSF2gMk&m=JQ2OhHrNe2rRbL8Mqbz13ZpzhZgORYrA00cV3bHC4ng&s=MkSaEw3ozq7Js0_mpxgOUNJlGxoCjPvXJgHyu64Q7bs&e=
"]} failed: [localhost] (item={u'prefix':
u'openwhisk', u'tag': u'9c5d3d7', u'name': u'action-php-v7.3'}) =>
{"changed": true, "cmd": "docker pull openwhisk/action-php-v7.3:9c5d3d7",
"delta": "0:00:00.478724", "end": "2019-05-13 12:44:11.567208", "item":
{"name": "action-php-v7.3", "prefix": "openwhisk", "tag": "9c5d3d7"},
"msg": "non-zero return code", "rc": 1, "start": "2019-05-13
12:44:11.088484", "stderr": "Cannot connect to the Docker daemon. Is the
docker daemon running on this host?", "stderr_lines": ["Cannot connect to
the Docker daemon. Is the docker daemon running on this host?"], "stdout":
"Warning: failed to get default registry endpoint from daemon (Cannot
connect to the Docker daemon. Is the docker daemon running on this host?).
Using system default:
https://urldefense.proofpoint.com/v2/url?u=https-3A__index.docker.io_v1_&d=DwIFaQ&c=jf_iaSHvJObTbx-siA1ZOg&r=Fe4FicGBU_20P2yihxV-apaNSFb6BSj6AlkptSF2gMk&m=JQ2OhHrNe2rRbL8Mqbz13ZpzhZgORYrA00cV3bHC4ng&s=MkSaEw3ozq7Js0_mpxgOUNJlGxoCjPvXJgHyu64Q7bs&e=
", "stdout_lines":
["Warning: failed to get default registry endpoint from daemon (Cannot
connect to the Docker daemon. Is the docker daemon running on this host?).
Using system default:
https://urldefense.proofpoint.com/v2/url?u=https-3A__index.docker.io_v1_&d=DwIFaQ&c=jf_iaSHvJObTbx-siA1ZOg&r=Fe4FicGBU_20P2yihxV-apaNSFb6BSj6AlkptSF2gMk&m=JQ2OhHrNe2rRbL8Mqbz13ZpzhZgORYrA00cV3bHC4ng&s=MkSaEw3ozq7Js0_mpxgOUNJlGxoCjPvXJgHyu64Q7bs&e=
"]} failed: [localhost]
(item={u'prefix': u'openwhisk', u'tag': u'b1afb74', u'name':
u'action-ruby-v2.5'}) => {"changed": true, "cmd": "docker pull
openwhisk/action-ruby-v2.5:b1afb74", "delta": "0:00:00.301577", "end":
"2019-05-13 12:44:12.131735", "item": {"name": "action-ruby-v2.5",
"prefix": "openwhisk", "tag": "b1afb74"}, "msg": "non-zero return code",
"rc": 1, "start": "2019-05-13 12:44:11.830158", "stderr": "Cannot connect
to the Docker daemon. Is the docker daemon running on this host?",
"stderr_lines": ["Cannot connect to the Docker daemon. Is the docker daemon
running on this host?"], "stdout": "Warning: failed to get default registry
endpoint from daemon (Cannot connect to the Docker daemon. Is the docker
daemon running on this host?). Using system default:
https://urldefense.proofpoint.com/v2/url?u=https-3A__index.docker.io_v1_&d=DwIFaQ&c=jf_iaSHvJObTbx-siA1ZOg&r=Fe4FicGBU_20P2yihxV-apaNSFb6BSj6AlkptSF2gMk&m=JQ2OhHrNe2rRbL8Mqbz13ZpzhZgORYrA00cV3bHC4ng&s=MkSaEw3ozq7Js0_mpxgOUNJlGxoCjPvXJgHyu64Q7bs&e=
", "stdout_lines": ["Warning: failed to get
default registry endpoint from daemon (Cannot connect to the Docker daemon.
Is the docker daemon running on this host?). Using system default:
https://urldefense.proofpoint.com/v2/url?u=https-3A__index.docker.io_v1_&d=DwIFaQ&c=jf_iaSHvJObTbx-siA1ZOg&r=Fe4FicGBU_20P2yihxV-apaNSFb6BSj6AlkptSF2gMk&m=JQ2OhHrNe2rRbL8Mqbz13ZpzhZgORYrA00cV3bHC4ng&s=MkSaEw3ozq7Js0_mpxgOUNJlGxoCjPvXJgHyu64Q7bs&e=
"]} to retry, use: --limit
@/invoker-scripts/playbook.retry PLAY RECAP
*********************************************************************
localhost : ok=3 changed=0 unreachable=0 failed=1
On May 13, 2019 at 1:23:29 AM, Sven Lange-Last (sven.lange-last@de.ibm.com)
wrote:
Hello Henry,
at the moment, there is no support for CRI-O / podman as container
provider for OpenWhisk. I'm also not aware of any efforts or intentions in
this area - but I may have missed that.
There is support for running OpenWhisk on top of a Kubernetes cluster [1].
When using that approach, OpenWhisk uses Kube to manage action containers.
What are your requirements? Will OpenWhisk Kube support satisfy your
needs?
[1]
https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_apache_incubator-2Dopenwhisk-2Ddeploy-2Dkube&d=DwIFaQ&c=jf_iaSHvJObTbx-siA1ZOg&r=Fe4FicGBU_20P2yihxV-apaNSFb6BSj6AlkptSF2gMk&m=JQ2OhHrNe2rRbL8Mqbz13ZpzhZgORYrA00cV3bHC4ng&s=1BtV_yDCqYbXJ2iP9jgsX6EsH1yk0I513SXAzTCmlKU&e=
Mit freundlichen Grüßen / Regards,
Sven Lange-Last
Senior Software Engineer
IBM Cloud Functions
Apache OpenWhisk
E-mail: sven.lange-last@de.ibm.com
Find me on:
Schoenaicher Str. 220
Boeblingen, 71032
Germany
IBM Deutschland Research & Development GmbH
Vorsitzende des Aufsichtsrats: Martina Koederitz
Geschäftsführung: Dirk Wittkopp
Sitz der Gesellschaft: Böblingen / Registergericht: Amtsgericht Stuttgart,
HRB 243294
Henry Zektser <ja...@gmail.com> wrote on 2019/05/13 03:44:21:
> From: Henry Zektser <ja...@gmail.com>
> To: dev@openwhisk.apache.org
> Date: 2019/05/13 03:44
> Subject: CRI-O support?
>
> Evening folks.. just tried to deploy OpenWhisk to a trial OpenShift 4
> cluster, and ran into an interesting problem.. The invokers are trying
to
> run docker, which doesn?t actually exist.. Seems OS4 has gone completely
> cri-o/podman.. In searching the GitHub issues, I see no references to
this,
> nor any in the docs.. are there plans in the works to address this? A
> workaround I don?t know about? Or is this just not going to be a
supported
> configuration?
Re: CRI-O support?
Posted by Henry Zektser <ja...@gmail.com>.
Hey Sven,
I guess what I’m trying to articulate is that openwhisk-deploy-kube fails
in the case of OpenShift 4.. I wanted to get the groups thoughts and
confirm I’m not missing anything before I try to hammer in CRI-O support —
which appears like it won’t be that easy. Here’s what I’m seeing — in
painful detail — so I apologize for the long dump in advance. This is all
done on a bare-naked OS4 deploy (https://try.openshift.com) in AWS.
1. Label the worker nodes
oc label node ip-10-0-143-24.us-east-2.compute.internal
openwhisk-role=invoker
oc label node ip-10-0-144-49.us-east-2.compute.internal
openwhisk-role=invoker
oc label node ip-10-0-166-72.us-east-2.compute.internal
openwhisk-role=invoker
2. Because OpenShift doesn’t allow arbitrary UIDs by default, I allow them
explicitly
oc adm policy add-scc-to-user anyuid -z default
oc adm policy add-scc-to-user privileged -z default
oc adm policy add-scc-to-user anyuid -z openwhisk-core
oc adm policy add-scc-to-user privileged -z openwhisk-core
3. From the tip of master for incubator-openwhisk-deploy-kube, I run the
helm chart
helm template ./helm/openwhisk --namespace=openwhisk --name=openwhisk | oc
create -f -
4. Grab coffee while things come up :)
5. Comment out resolver kube-dns.kube-system; in the nginx ConfigMap — this
actually causes a crash loop in OpenShift. Then restart the pod. It comes
up happy.
6. NOTE: This is where the problem lies. The openwhisk-invoker-* pods sit
in initCrashLoopBackOff. The logs for these all show the same thing in the
docker-pull-runtimes container — no docker = ansible failure. The complete
log of the init container is at the bottom of this message.
I’ll confess this new release from RedHat has me re-learning 50% of what I
solidly had a grasp on 2 weeks ago, but I think the net/net is, this
deployment is expecting to connect to the docker socket on the underlying
host. I can see that in the YAML for the pod;
volumeMounts:
- name: dockersock
mountPath: /var/run/docker.sock
Given OS4 only runs on RedHat CoreOS now, and doesn’t even deploy docker..
I believe there’s a problem here? I suppose it’s conceivable if I map the
CRI-O socket instead, the docker client might work? I haven’t tried it yet
— I’ve left my deploy bone-stock in case any of the devs would like to see
some additional dumps/debug data/etc before I start messing around with it…
I’m happy to be the guinea pig if anyones got a workaround.. Also happy to
start working on CRI-O support if that’s what we really need here, though
again, not sure that’s going to be easy or quick.
[WARNING]: Unable to parse /etc/ansible/hosts as an inventory source
[WARNING]: No inventory was parsed, only implicit localhost is available
[WARNING]: provided hosts list is empty, only localhost is available. Note
that the implicit localhost does not match 'all' PLAY [localhost]
*************************************************************** TASK
[Gathering Facts] *********************************************************
ok: [localhost] TASK [docker login]
************************************************************ skipping:
[localhost] TASK [Display runtime manifest]
************************************************ ok: [localhost] => {
"runtimes_manifest": { "blackboxes": [ { "name": "dockerskeleton",
"prefix": "openwhisk", "tag": "3d6ee06" } ], "runtimes": { "ballerina": [ {
"attached": { "attachmentName": "codefile", "attachmentType": "text/plain"
}, "default": true, "deprecated": false, "image": { "name":
"action-ballerina-v0.990.2", "prefix": "openwhisk", "tag": "d049638" },
"kind": "ballerina:0.990" } ], "dotnet": [ { "attached": {
"attachmentName": "codefile", "attachmentType": "text/plain" }, "default":
true, "deprecated": false, "image": { "name": "action-dotnet-v2.2",
"prefix": "openwhisk", "tag": "50df3ba" }, "kind": "dotnet:2.2",
"requireMain": true } ], "go": [ { "attached": { "attachmentName":
"codefile", "attachmentType": "text/plain" }, "default": true,
"deprecated": false, "image": { "name": "actionloop-golang-v1.11",
"prefix": "openwhisk", "tag": "ddd3299" }, "kind": "go:1.11" } ], "java": [
{ "attached": { "attachmentName": "jarfile", "attachmentType":
"application/java-archive" }, "default": true, "deprecated": false,
"image": { "name": "java8action", "prefix": "openwhisk", "tag": "9f27bab"
}, "kind": "java", "requireMain": true } ], "nodejs": [ { "attached": {
"attachmentName": "codefile", "attachmentType": "text/plain" }, "default":
false, "deprecated": false, "image": { "name": "nodejs6action", "prefix":
"openwhisk", "tag": "ab224ab" }, "kind": "nodejs:6" }, { "attached": {
"attachmentName": "codefile", "attachmentType": "text/plain" }, "default":
false, "deprecated": false, "image": { "name": "action-nodejs-v8",
"prefix": "openwhisk", "tag": "ab224ab" }, "kind": "nodejs:8" }, {
"attached": { "attachmentName": "codefile", "attachmentType": "text/plain"
}, "default": true, "deprecated": false, "image": { "name":
"action-nodejs-v10", "prefix": "openwhisk", "tag": "ab224ab" }, "kind":
"nodejs:10", "stemCells": [ { "count": 2, "memory": "256 MB" } ] }, {
"attached": { "attachmentName": "codefile", "attachmentType": "text/plain"
}, "default": false, "deprecated": false, "image": { "name":
"action-nodejs-v12", "prefix": "openwhisk", "tag": "ab224ab" }, "kind":
"nodejs:12" } ], "php": [ { "attached": { "attachmentName": "codefile",
"attachmentType": "text/plain" }, "default": true, "deprecated": false,
"image": { "name": "action-php-v7.3", "prefix": "openwhisk", "tag":
"9c5d3d7" }, "kind": "php:7.3" } ], "python": [ { "attached": {
"attachmentName": "codefile", "attachmentType": "text/plain" }, "default":
false, "deprecated": false, "image": { "name": "python2action", "prefix":
"openwhisk", "tag": "d6a8920" }, "kind": "python:2" }, { "attached": {
"attachmentName": "codefile", "attachmentType": "text/plain" }, "default":
true, "deprecated": false, "image": { "name": "python3action", "prefix":
"openwhisk", "tag": "aaeb2ff" }, "kind": "python:3" } ], "ruby": [ {
"attached": { "attachmentName": "codefile", "attachmentType": "text/plain"
}, "default": true, "deprecated": false, "image": { "name":
"action-ruby-v2.5", "prefix": "openwhisk", "tag": "b1afb74" }, "kind":
"ruby:2.5" } ], "swift": [ { "attached": { "attachmentName": "codefile",
"attachmentType": "text/plain" }, "default": true, "deprecated": false,
"image": { "name": "action-swift-v4.2", "prefix": "openwhisk", "tag":
"019024d" }, "kind": "swift:4.2" } ] } } } TASK [Process runtime manifest]
************************************************ ok: [localhost] TASK [pull
runtime action images per manifest] *********************************
failed: [localhost] (item={u'prefix': u'openwhisk', u'tag': u'd049638',
u'name': u'action-ballerina-v0.990.2'}) => {"changed": true, "cmd": "docker
pull openwhisk/action-ballerina-v0.990.2:d049638", "delta":
"0:00:00.381501", "end": "2019-05-13 12:44:05.599610", "item": {"name":
"action-ballerina-v0.990.2", "prefix": "openwhisk", "tag": "d049638"},
"msg": "non-zero return code", "rc": 1, "start": "2019-05-13
12:44:05.218109", "stderr": "Cannot connect to the Docker daemon. Is the
docker daemon running on this host?", "stderr_lines": ["Cannot connect to
the Docker daemon. Is the docker daemon running on this host?"], "stdout":
"Warning: failed to get default registry endpoint from daemon (Cannot
connect to the Docker daemon. Is the docker daemon running on this host?).
Using system default: https://index.docker.io/v1/", "stdout_lines":
["Warning: failed to get default registry endpoint from daemon (Cannot
connect to the Docker daemon. Is the docker daemon running on this host?).
Using system default: https://index.docker.io/v1/"]} failed: [localhost]
(item={u'prefix': u'openwhisk', u'tag': u'019024d', u'name':
u'action-swift-v4.2'}) => {"changed": true, "cmd": "docker pull
openwhisk/action-swift-v4.2:019024d", "delta": "0:00:00.298633", "end":
"2019-05-13 12:44:06.048738", "item": {"name": "action-swift-v4.2",
"prefix": "openwhisk", "tag": "019024d"}, "msg": "non-zero return code",
"rc": 1, "start": "2019-05-13 12:44:05.750105", "stderr": "Cannot connect
to the Docker daemon. Is the docker daemon running on this host?",
"stderr_lines": ["Cannot connect to the Docker daemon. Is the docker daemon
running on this host?"], "stdout": "Warning: failed to get default registry
endpoint from daemon (Cannot connect to the Docker daemon. Is the docker
daemon running on this host?). Using system default:
https://index.docker.io/v1/", "stdout_lines": ["Warning: failed to get
default registry endpoint from daemon (Cannot connect to the Docker daemon.
Is the docker daemon running on this host?). Using system default:
https://index.docker.io/v1/"]} failed: [localhost] (item={u'prefix':
u'openwhisk', u'tag': u'9f27bab', u'name': u'java8action'}) => {"changed":
true, "cmd": "docker pull openwhisk/java8action:9f27bab", "delta":
"0:00:00.314633", "end": "2019-05-13 12:44:06.533496", "item": {"name":
"java8action", "prefix": "openwhisk", "tag": "9f27bab"}, "msg": "non-zero
return code", "rc": 1, "start": "2019-05-13 12:44:06.218863", "stderr":
"Cannot connect to the Docker daemon. Is the docker daemon running on this
host?", "stderr_lines": ["Cannot connect to the Docker daemon. Is the
docker daemon running on this host?"], "stdout": "Warning: failed to get
default registry endpoint from daemon (Cannot connect to the Docker daemon.
Is the docker daemon running on this host?). Using system default:
https://index.docker.io/v1/", "stdout_lines": ["Warning: failed to get
default registry endpoint from daemon (Cannot connect to the Docker daemon.
Is the docker daemon running on this host?). Using system default:
https://index.docker.io/v1/"]} failed: [localhost] (item={u'prefix':
u'openwhisk', u'tag': u'ddd3299', u'name': u'actionloop-golang-v1.11'}) =>
{"changed": true, "cmd": "docker pull
openwhisk/actionloop-golang-v1.11:ddd3299", "delta": "0:00:00.297243",
"end": "2019-05-13 12:44:07.098680", "item": {"name":
"actionloop-golang-v1.11", "prefix": "openwhisk", "tag": "ddd3299"}, "msg":
"non-zero return code", "rc": 1, "start": "2019-05-13 12:44:06.801437",
"stderr": "Cannot connect to the Docker daemon. Is the docker daemon
running on this host?", "stderr_lines": ["Cannot connect to the Docker
daemon. Is the docker daemon running on this host?"], "stdout": "Warning:
failed to get default registry endpoint from daemon (Cannot connect to the
Docker daemon. Is the docker daemon running on this host?). Using system
default: https://index.docker.io/v1/", "stdout_lines": ["Warning: failed to
get default registry endpoint from daemon (Cannot connect to the Docker
daemon. Is the docker daemon running on this host?). Using system default:
https://index.docker.io/v1/"]} failed: [localhost] (item={u'prefix':
u'openwhisk', u'tag': u'ab224ab', u'name': u'nodejs6action'}) =>
{"changed": true, "cmd": "docker pull openwhisk/nodejs6action:ab224ab",
"delta": "0:00:00.444807", "end": "2019-05-13 12:44:07.696461", "item":
{"name": "nodejs6action", "prefix": "openwhisk", "tag": "ab224ab"}, "msg":
"non-zero return code", "rc": 1, "start": "2019-05-13 12:44:07.251654",
"stderr": "Cannot connect to the Docker daemon. Is the docker daemon
running on this host?", "stderr_lines": ["Cannot connect to the Docker
daemon. Is the docker daemon running on this host?"], "stdout": "Warning:
failed to get default registry endpoint from daemon (Cannot connect to the
Docker daemon. Is the docker daemon running on this host?). Using system
default: https://index.docker.io/v1/", "stdout_lines": ["Warning: failed to
get default registry endpoint from daemon (Cannot connect to the Docker
daemon. Is the docker daemon running on this host?). Using system default:
https://index.docker.io/v1/"]} failed: [localhost] (item={u'prefix':
u'openwhisk', u'tag': u'ab224ab', u'name': u'action-nodejs-v8'}) =>
{"changed": true, "cmd": "docker pull openwhisk/action-nodejs-v8:ab224ab",
"delta": "0:00:00.506225", "end": "2019-05-13 12:44:08.458140", "item":
{"name": "action-nodejs-v8", "prefix": "openwhisk", "tag": "ab224ab"},
"msg": "non-zero return code", "rc": 1, "start": "2019-05-13
12:44:07.951915", "stderr": "Cannot connect to the Docker daemon. Is the
docker daemon running on this host?", "stderr_lines": ["Cannot connect to
the Docker daemon. Is the docker daemon running on this host?"], "stdout":
"Warning: failed to get default registry endpoint from daemon (Cannot
connect to the Docker daemon. Is the docker daemon running on this host?).
Using system default: https://index.docker.io/v1/", "stdout_lines":
["Warning: failed to get default registry endpoint from daemon (Cannot
connect to the Docker daemon. Is the docker daemon running on this host?).
Using system default: https://index.docker.io/v1/"]} failed: [localhost]
(item={u'prefix': u'openwhisk', u'tag': u'ab224ab', u'name':
u'action-nodejs-v10'}) => {"changed": true, "cmd": "docker pull
openwhisk/action-nodejs-v10:ab224ab", "delta": "0:00:00.392248", "end":
"2019-05-13 12:44:09.024233", "item": {"name": "action-nodejs-v10",
"prefix": "openwhisk", "tag": "ab224ab"}, "msg": "non-zero return code",
"rc": 1, "start": "2019-05-13 12:44:08.631985", "stderr": "Cannot connect
to the Docker daemon. Is the docker daemon running on this host?",
"stderr_lines": ["Cannot connect to the Docker daemon. Is the docker daemon
running on this host?"], "stdout": "Warning: failed to get default registry
endpoint from daemon (Cannot connect to the Docker daemon. Is the docker
daemon running on this host?). Using system default:
https://index.docker.io/v1/", "stdout_lines": ["Warning: failed to get
default registry endpoint from daemon (Cannot connect to the Docker daemon.
Is the docker daemon running on this host?). Using system default:
https://index.docker.io/v1/"]} failed: [localhost] (item={u'prefix':
u'openwhisk', u'tag': u'ab224ab', u'name': u'action-nodejs-v12'}) =>
{"changed": true, "cmd": "docker pull openwhisk/action-nodejs-v12:ab224ab",
"delta": "0:00:00.366956", "end": "2019-05-13 12:44:09.564138", "item":
{"name": "action-nodejs-v12", "prefix": "openwhisk", "tag": "ab224ab"},
"msg": "non-zero return code", "rc": 1, "start": "2019-05-13
12:44:09.197182", "stderr": "Cannot connect to the Docker daemon. Is the
docker daemon running on this host?", "stderr_lines": ["Cannot connect to
the Docker daemon. Is the docker daemon running on this host?"], "stdout":
"Warning: failed to get default registry endpoint from daemon (Cannot
connect to the Docker daemon. Is the docker daemon running on this host?).
Using system default: https://index.docker.io/v1/", "stdout_lines":
["Warning: failed to get default registry endpoint from daemon (Cannot
connect to the Docker daemon. Is the docker daemon running on this host?).
Using system default: https://index.docker.io/v1/"]} failed: [localhost]
(item={u'prefix': u'openwhisk', u'tag': u'd6a8920', u'name':
u'python2action'}) => {"changed": true, "cmd": "docker pull
openwhisk/python2action:d6a8920", "delta": "0:00:00.316099", "end":
"2019-05-13 12:44:10.013803", "item": {"name": "python2action", "prefix":
"openwhisk", "tag": "d6a8920"}, "msg": "non-zero return code", "rc": 1,
"start": "2019-05-13 12:44:09.697704", "stderr": "Cannot connect to the
Docker daemon. Is the docker daemon running on this host?", "stderr_lines":
["Cannot connect to the Docker daemon. Is the docker daemon running on this
host?"], "stdout": "Warning: failed to get default registry endpoint from
daemon (Cannot connect to the Docker daemon. Is the docker daemon running
on this host?). Using system default: https://index.docker.io/v1/",
"stdout_lines": ["Warning: failed to get default registry endpoint from
daemon (Cannot connect to the Docker daemon. Is the docker daemon running
on this host?). Using system default: https://index.docker.io/v1/"]}
failed: [localhost] (item={u'prefix': u'openwhisk', u'tag': u'aaeb2ff',
u'name': u'python3action'}) => {"changed": true, "cmd": "docker pull
openwhisk/python3action:aaeb2ff", "delta": "0:00:00.328495", "end":
"2019-05-13 12:44:10.491397", "item": {"name": "python3action", "prefix":
"openwhisk", "tag": "aaeb2ff"}, "msg": "non-zero return code", "rc": 1,
"start": "2019-05-13 12:44:10.162902", "stderr": "Cannot connect to the
Docker daemon. Is the docker daemon running on this host?", "stderr_lines":
["Cannot connect to the Docker daemon. Is the docker daemon running on this
host?"], "stdout": "Warning: failed to get default registry endpoint from
daemon (Cannot connect to the Docker daemon. Is the docker daemon running
on this host?). Using system default: https://index.docker.io/v1/",
"stdout_lines": ["Warning: failed to get default registry endpoint from
daemon (Cannot connect to the Docker daemon. Is the docker daemon running
on this host?). Using system default: https://index.docker.io/v1/"]}
failed: [localhost] (item={u'prefix': u'openwhisk', u'tag': u'50df3ba',
u'name': u'action-dotnet-v2.2'}) => {"changed": true, "cmd": "docker pull
openwhisk/action-dotnet-v2.2:50df3ba", "delta": "0:00:00.297934", "end":
"2019-05-13 12:44:10.915641", "item": {"name": "action-dotnet-v2.2",
"prefix": "openwhisk", "tag": "50df3ba"}, "msg": "non-zero return code",
"rc": 1, "start": "2019-05-13 12:44:10.617707", "stderr": "Cannot connect
to the Docker daemon. Is the docker daemon running on this host?",
"stderr_lines": ["Cannot connect to the Docker daemon. Is the docker daemon
running on this host?"], "stdout": "Warning: failed to get default registry
endpoint from daemon (Cannot connect to the Docker daemon. Is the docker
daemon running on this host?). Using system default:
https://index.docker.io/v1/", "stdout_lines": ["Warning: failed to get
default registry endpoint from daemon (Cannot connect to the Docker daemon.
Is the docker daemon running on this host?). Using system default:
https://index.docker.io/v1/"]} failed: [localhost] (item={u'prefix':
u'openwhisk', u'tag': u'9c5d3d7', u'name': u'action-php-v7.3'}) =>
{"changed": true, "cmd": "docker pull openwhisk/action-php-v7.3:9c5d3d7",
"delta": "0:00:00.478724", "end": "2019-05-13 12:44:11.567208", "item":
{"name": "action-php-v7.3", "prefix": "openwhisk", "tag": "9c5d3d7"},
"msg": "non-zero return code", "rc": 1, "start": "2019-05-13
12:44:11.088484", "stderr": "Cannot connect to the Docker daemon. Is the
docker daemon running on this host?", "stderr_lines": ["Cannot connect to
the Docker daemon. Is the docker daemon running on this host?"], "stdout":
"Warning: failed to get default registry endpoint from daemon (Cannot
connect to the Docker daemon. Is the docker daemon running on this host?).
Using system default: https://index.docker.io/v1/", "stdout_lines":
["Warning: failed to get default registry endpoint from daemon (Cannot
connect to the Docker daemon. Is the docker daemon running on this host?).
Using system default: https://index.docker.io/v1/"]} failed: [localhost]
(item={u'prefix': u'openwhisk', u'tag': u'b1afb74', u'name':
u'action-ruby-v2.5'}) => {"changed": true, "cmd": "docker pull
openwhisk/action-ruby-v2.5:b1afb74", "delta": "0:00:00.301577", "end":
"2019-05-13 12:44:12.131735", "item": {"name": "action-ruby-v2.5",
"prefix": "openwhisk", "tag": "b1afb74"}, "msg": "non-zero return code",
"rc": 1, "start": "2019-05-13 12:44:11.830158", "stderr": "Cannot connect
to the Docker daemon. Is the docker daemon running on this host?",
"stderr_lines": ["Cannot connect to the Docker daemon. Is the docker daemon
running on this host?"], "stdout": "Warning: failed to get default registry
endpoint from daemon (Cannot connect to the Docker daemon. Is the docker
daemon running on this host?). Using system default:
https://index.docker.io/v1/", "stdout_lines": ["Warning: failed to get
default registry endpoint from daemon (Cannot connect to the Docker daemon.
Is the docker daemon running on this host?). Using system default:
https://index.docker.io/v1/"]} to retry, use: --limit
@/invoker-scripts/playbook.retry PLAY RECAP
*********************************************************************
localhost : ok=3 changed=0 unreachable=0 failed=1
On May 13, 2019 at 1:23:29 AM, Sven Lange-Last (sven.lange-last@de.ibm.com)
wrote:
Hello Henry,
at the moment, there is no support for CRI-O / podman as container
provider for OpenWhisk. I'm also not aware of any efforts or intentions in
this area - but I may have missed that.
There is support for running OpenWhisk on top of a Kubernetes cluster [1].
When using that approach, OpenWhisk uses Kube to manage action containers.
What are your requirements? Will OpenWhisk Kube support satisfy your
needs?
[1] https://github.com/apache/incubator-openwhisk-deploy-kube
Mit freundlichen Grüßen / Regards,
Sven Lange-Last
Senior Software Engineer
IBM Cloud Functions
Apache OpenWhisk
E-mail: sven.lange-last@de.ibm.com
Find me on:
Schoenaicher Str. 220
Boeblingen, 71032
Germany
IBM Deutschland Research & Development GmbH
Vorsitzende des Aufsichtsrats: Martina Koederitz
Geschäftsführung: Dirk Wittkopp
Sitz der Gesellschaft: Böblingen / Registergericht: Amtsgericht Stuttgart,
HRB 243294
Henry Zektser <ja...@gmail.com> wrote on 2019/05/13 03:44:21:
> From: Henry Zektser <ja...@gmail.com>
> To: dev@openwhisk.apache.org
> Date: 2019/05/13 03:44
> Subject: CRI-O support?
>
> Evening folks.. just tried to deploy OpenWhisk to a trial OpenShift 4
> cluster, and ran into an interesting problem.. The invokers are trying
to
> run docker, which doesn?t actually exist.. Seems OS4 has gone completely
> cri-o/podman.. In searching the GitHub issues, I see no references to
this,
> nor any in the docs.. are there plans in the works to address this? A
> workaround I don?t know about? Or is this just not going to be a
supported
> configuration?
Re: CRI-O support?
Posted by Sven Lange-Last <sv...@de.ibm.com>.
Hello Henry,
at the moment, there is no support for CRI-O / podman as container
provider for OpenWhisk. I'm also not aware of any efforts or intentions in
this area - but I may have missed that.
There is support for running OpenWhisk on top of a Kubernetes cluster [1].
When using that approach, OpenWhisk uses Kube to manage action containers.
What are your requirements? Will OpenWhisk Kube support satisfy your
needs?
[1] https://github.com/apache/incubator-openwhisk-deploy-kube
Mit freundlichen Grüßen / Regards,
Sven Lange-Last
Senior Software Engineer
IBM Cloud Functions
Apache OpenWhisk
E-mail: sven.lange-last@de.ibm.com
Find me on:
Schoenaicher Str. 220
Boeblingen, 71032
Germany
IBM Deutschland Research & Development GmbH
Vorsitzende des Aufsichtsrats: Martina Koederitz
Geschäftsführung: Dirk Wittkopp
Sitz der Gesellschaft: Böblingen / Registergericht: Amtsgericht Stuttgart,
HRB 243294
Henry Zektser <ja...@gmail.com> wrote on 2019/05/13 03:44:21:
> From: Henry Zektser <ja...@gmail.com>
> To: dev@openwhisk.apache.org
> Date: 2019/05/13 03:44
> Subject: CRI-O support?
>
> Evening folks.. just tried to deploy OpenWhisk to a trial OpenShift 4
> cluster, and ran into an interesting problem.. The invokers are trying
to
> run docker, which doesn?t actually exist.. Seems OS4 has gone completely
> cri-o/podman.. In searching the GitHub issues, I see no references to
this,
> nor any in the docs.. are there plans in the works to address this? A
> workaround I don?t know about? Or is this just not going to be a
supported
> configuration?