Skip to content
This repository was archived by the owner on May 30, 2023. It is now read-only.

Comments

sys-kernel: remove blank kernel module nf-conntrack-ipv4#649

Merged
dongsupark merged 1 commit intomainfrom
dongsu/kernel-remove-ip-conntrack-ipv4
Oct 15, 2020
Merged

sys-kernel: remove blank kernel module nf-conntrack-ipv4#649
dongsupark merged 1 commit intomainfrom
dongsu/kernel-remove-ip-conntrack-ipv4

Conversation

@dongsupark
Copy link
Contributor

So far Flatcar has kept a third-party patch to add a blank kernel module nf-conntrack-ipv4.ko to avoid regression around Kubernetes.
The issue was that kube-proxy with ipvs started using nf-conntrack.ko, which does not exist in Kernel < 4.19.
The patch was originally added by a24dbb6.

However, Kubernetes 1.13 or newer already deals with the issue.
It automatically loads a different Kernel module according to Kernel versions:
nf-conntrack-ipv4 for Kernel < 4.19, and nf-conntrack for Kernel >= 4.19.
See kubernetes/kubernetes@4b90559 .

We can simply remove the Kernel module, as since then all production systems have updated Kubernetes to the newer versions than 1.13.

How to use

./build_packages

Testing done

CI passed.

@dongsupark dongsupark added enhancement New feature or request main labels Oct 15, 2020
@dongsupark dongsupark requested a review from a team October 15, 2020 07:32
@pothos
Copy link
Contributor

pothos commented Oct 15, 2020

Since the kola Kubernetes tests run only on GCE I rebuild the vm-matrix job with that image format. Edit: kola gce here


EAPI=5
COREOS_SOURCE_REVISION=""
COREOS_SOURCE_REVISION="-r1"
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think it's ok to leave the package version at the same revision that it doesn't conflict with #647

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Removed the revision changes.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It anyway conflicts, no idea why, but at least we tried 😄

Copy link
Contributor Author

@dongsupark dongsupark Oct 15, 2020

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Interesting. Manual rebase works just well.
I simply pushed a new rebase to #647

So far Flatcar has kept a third-party patch to add a blank kernel
module `nf-conntrack-ipv4.ko` to avoid regression around Kubernetes.
The issue was that kube-proxy with ipvs started using `nf-conntrack.ko`,
which does not exist in Kernel < 4.19. The patch was originally added by
a24dbb6.

However, Kubernetes 1.13 or newer already deals with the issue. It
automatically loads a different Kernel module according to Kernel
versions: `nf-conntrack-ipv4` for Kernel < 4.19, and `nf-conntrack`
for Kernel >= 4.19.
See kubernetes/kubernetes@4b90559 .

We can simply remove the Kernel module, as since then all production
systems have updated Kubernetes to the newer versions than 1.13.
@dongsupark dongsupark force-pushed the dongsu/kernel-remove-ip-conntrack-ipv4 branch from f32195e to 4a51977 Compare October 15, 2020 09:35
@dongsupark dongsupark merged commit 2c355a4 into main Oct 15, 2020
@dongsupark dongsupark deleted the dongsu/kernel-remove-ip-conntrack-ipv4 branch October 15, 2020 09:36
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

enhancement New feature or request main

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants