7 ms·

Introduction to runc

73 points by prakashdanish 6y ago

eatonphil 6y ago
Unfortunately on mobile the zoom is fixed (I can't zoom out, didn't know that was possible) and I can't see the left and right edges of the text.
- Tepix 6y ago
  I hate when they do that. Here is a bookmarklet that will fix those pages: javascript:document.querySelector('meta[name=viewport]').setAttribute('content','width=device-width,initial-scale=1.0,maximum-scale=10.0,user-scalable=1'); The real fix is of course to complain to the page author.
  - aorth 6y ago
    Reader mode on Firefox does a great job too!
    - sli 6y ago
      Reader mode in Safari on iOS works great as well, but the zoom level doesn't seem to be fixed, either. It's initially zoomed in but I'm able to zoom out and it will stay.
  - deleted 6y ago
    [deleted]
- jpitz 6y ago
  Checking the desktop site checkbox on Android chrome fixed that for me.
  - modeless 6y ago
    Settings > Accessibility > Force Enable Zoom; it's one of the first things I always enable.
- gumby 6y ago
  Why would anyone want to restrict the reader in this way?
  - GoblinSlayer 6y ago
    Incompetence.
nezirus 6y ago
In addition to runc, I'd like to point out an alternative OCI runtime implementation, crun (https://github.com/containers/crun https://github.com/containers/crun). You can play with both either directly, or through Podman (https://podman.io/ https://podman.io/) Useful for cgroups v2 too.
- eatonphil 6y ago
  The really weird thing about this is that latest Fedora (by Red Hat, as is crun) doesn't even support cgroups v2. Or I couldn't figure out how to get it working. I had to disable v2 and go back to v1 and use runc.
  - nezirus 6y ago
    Did you modified your bootloader with following parameter: systemd.unified_cgroup_hierarchy=1 In runtime, you should see the following: mount | grep cgroup cgroup2 on /sys/fs/cgroup type cgroup2 (rw,nosuid,nodev,noexec,relatime,nsdelegate) btw, I use Arch (yeah I know, the standard adage)
- vishvananda 6y ago
  There is also a rust implementation that I wrote in my time at Oracle. Unfortunately they no longer maintain it, but there is a fork with some more recent updates: https://github.com/drahnr/railcar https://github.com/drahnr/railcar
  - sitkack 6y ago
    Sounds like you are no longer at Oracle. Was this at Oracle Cloud in Seattle? Can you talk about their Rust adoption?
- CameronNemo 6y ago
  Pretty sure runc supports cgroups2 these days. Not sure why I would want a lot of new C on my machine, unless I was pressed for storage or RAM. Which I am not. runc is like 5MB, which is pretty small for a Go binary.
eatonphil 6y ago
Are there any runc shims that just use processes (I know, containers are just processes) ignoring network/user/etc namespace isolation and other Linux-specific security features? For example a shim that could run native MacOS processes on MacOS, native FreeBSD binaries on FreeBSD, etc. just by executing the processes directly. The point of this would be to take advantage of the Docker ecosystem for _scheduling_ particularly in developer environments. Specifically I'd like a "docker-compose for processes" that can run on any system and just handles scheduling multiple processes together but without requiring root access to modify init scripts or systemd services at the system level.
- JamesSwift 6y ago
  Isnt that what Foreman and its Procfile handle? https://github.com/ddollar/foreman https://github.com/ddollar/foreman
  - eatonphil 6y ago
    Maybe, but I don't want to learn a new config system. Developers are so familiar with docker-compose I just want to use that.
    - pjmlp 6y ago
      This developer not.
      - eatonphil 6y ago
        Sorry for the overly broad brush. :) But the existence of this shim doesn't mean you have to use it.
        pjmlp 6y ago
        Nor do I have to use Docker.
deleted 6y ago
[deleted]
fetbaffe 6y ago
As a Scandinavian I read this as "Introduction to runk" because c at the end of a word is pronounced as k as long it isn’t an abbreviation. Bit unfortunate. Please downvote.
- flemhans 6y ago
  Isn't that the case in English too? BTW, I can think of very few Danish words that end in c.
  - fetbaffe 6y ago
    In Swedish all of them are either loanwords or abbreviations. https://www.synonymer.se/ordlekar/sv/ord-som-slutar-pa/c https://www.synonymer.se/ordlekar/sv/ord-som-slutar-pa/c
- hobofan 6y ago
  And what is the problem with "runk"?
  - fetbaffe 6y ago
    https://en.m.wiktionary.org/wiki/runk https://en.m.wiktionary.org/wiki/runk
    - twic 6y ago
      Well it is a Docker equivalent.
- wyldfire 6y ago
  As a USian I read it the same way. I have read about 'runc' before. I suppose its authors might prefer //run-see// but I just like the sound of //runk//.
mlang23 6y ago
wget directly to /usr/bin. Am I the only one who cringes upon such a pattern? I am probably too old. I recently almost doubled over when I saw that /sbin is now a symlink to /usr/sbin on bullseye. Even worse, /lib/modules is a symlink to /usr/lib/modules. Try $ find /lib -name \mlx5\ and learn how find treats symlinks.

73 points by prakashdanish 6y ago

Unfortunately on mobile the zoom is fixed (I can't zoom out, didn't know that was possible) and I can't see the left and right edges of the text.

Tepix 6y ago
I hate when they do that. Here is a bookmarklet that will fix those pages: javascript:document.querySelector('meta[name=viewport]').setAttribute('content','width=device-width,initial-scale=1.0,maximum-scale=10.0,user-scalable=1'); The real fix is of course to complain to the page author.
- aorth 6y ago
  Reader mode on Firefox does a great job too!
  - sli 6y ago
    Reader mode in Safari on iOS works great as well, but the zoom level doesn't seem to be fixed, either. It's initially zoomed in but I'm able to zoom out and it will stay.
- deleted 6y ago
  [deleted]
jpitz 6y ago
Checking the desktop site checkbox on Android chrome fixed that for me.
- modeless 6y ago
  Settings > Accessibility > Force Enable Zoom; it's one of the first things I always enable.
gumby 6y ago
Why would anyone want to restrict the reader in this way?
- GoblinSlayer 6y ago
  Incompetence.

nezirus 6y ago

In addition to runc, I'd like to point out an alternative OCI runtime implementation, crun (https://github.com/containers/crun https://github.com/containers/crun). You can play with both either directly, or through Podman (https://podman.io/ https://podman.io/) Useful for cgroups v2 too.

eatonphil 6y ago
The really weird thing about this is that latest Fedora (by Red Hat, as is crun) doesn't even support cgroups v2. Or I couldn't figure out how to get it working. I had to disable v2 and go back to v1 and use runc.
- nezirus 6y ago
  Did you modified your bootloader with following parameter: systemd.unified_cgroup_hierarchy=1 In runtime, you should see the following: mount | grep cgroup cgroup2 on /sys/fs/cgroup type cgroup2 (rw,nosuid,nodev,noexec,relatime,nsdelegate) btw, I use Arch (yeah I know, the standard adage)
vishvananda 6y ago
There is also a rust implementation that I wrote in my time at Oracle. Unfortunately they no longer maintain it, but there is a fork with some more recent updates: https://github.com/drahnr/railcar https://github.com/drahnr/railcar
- sitkack 6y ago
  Sounds like you are no longer at Oracle. Was this at Oracle Cloud in Seattle? Can you talk about their Rust adoption?
CameronNemo 6y ago
Pretty sure runc supports cgroups2 these days. Not sure why I would want a lot of new C on my machine, unless I was pressed for storage or RAM. Which I am not. runc is like 5MB, which is pretty small for a Go binary.

eatonphil 6y ago

Are there any runc shims that just use processes (I know, containers are just processes) ignoring network/user/etc namespace isolation and other Linux-specific security features? For example a shim that could run native MacOS processes on MacOS, native FreeBSD binaries on FreeBSD, etc. just by executing the processes directly. The point of this would be to take advantage of the Docker ecosystem for _scheduling_ particularly in developer environments. Specifically I'd like a "docker-compose for processes" that can run on any system and just handles scheduling multiple processes together but without requiring root access to modify init scripts or systemd services at the system level.

JamesSwift 6y ago
Isnt that what Foreman and its Procfile handle? https://github.com/ddollar/foreman https://github.com/ddollar/foreman
- eatonphil 6y ago
  Maybe, but I don't want to learn a new config system. Developers are so familiar with docker-compose I just want to use that.
  - pjmlp 6y ago
    This developer not.
    - eatonphil 6y ago
      Sorry for the overly broad brush. :) But the existence of this shim doesn't mean you have to use it.
      - pjmlp 6y ago
        Nor do I have to use Docker.

deleted 6y ago

[deleted]

fetbaffe 6y ago

As a Scandinavian I read this as "Introduction to runk" because c at the end of a word is pronounced as k as long it isn’t an abbreviation. Bit unfortunate. Please downvote.

flemhans 6y ago
Isn't that the case in English too? BTW, I can think of very few Danish words that end in c.
- fetbaffe 6y ago
  In Swedish all of them are either loanwords or abbreviations. https://www.synonymer.se/ordlekar/sv/ord-som-slutar-pa/c https://www.synonymer.se/ordlekar/sv/ord-som-slutar-pa/c
hobofan 6y ago
And what is the problem with "runk"?
- fetbaffe 6y ago
  https://en.m.wiktionary.org/wiki/runk https://en.m.wiktionary.org/wiki/runk
  - twic 6y ago
    Well it is a Docker equivalent.
wyldfire 6y ago
As a USian I read it the same way. I have read about 'runc' before. I suppose its authors might prefer //run-see// but I just like the sound of //runk//.

mlang23 6y ago

wget directly to /usr/bin. Am I the only one who cringes upon such a pattern? I am probably too old. I recently almost doubled over when I saw that /sbin is now a symlink to /usr/sbin on bullseye. Even worse, /lib/modules is a symlink to /usr/lib/modules. Try $ find /lib -name \mlx5\ and learn how find treats symlinks.