podvm: remove mount units

Previously we had /peerpod and /kata-containers bind-mounted to /run to keep the size of the tempFS under /run small. As / is now read-only this does not make sense anymore, so removing it. This triggered a bug in kata-agent/ttrpc-rust as the path of the socket is not created automatically. Adding a workaround to the kata-agent unit until this is fixed upstream. Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
confidential-containers · Dec 4, 2023 · c506d12 · c506d12
1 parent 07bde3a
commit c506d12
Show file tree

Hide file tree

Showing 3 changed files with 2 additions and 24 deletions.
diff --git a/podvm/files/etc/systemd/system/kata-agent.service b/podvm/files/etc/systemd/system/kata-agent.service
@@ -5,6 +5,8 @@ Wants=process-user-data.service
 After=netns@podns.service process-user-data.service
 
 [Service]
+# Temporary fix for
+ExecStartPre=mkdir -p /run/kata-containers
 ExecStart=/usr/local/bin/kata-agent --config /run/peerpod/agent-config.toml
 ExecStartPre=-umount /sys/fs/cgroup/misc
 ExecStopPost=/usr/local/bin/kata-agent-clean --config /run/peerpod/agent-config.toml

diff --git a/podvm/files/etc/systemd/system/run-image.mount b/podvm/files/etc/systemd/system/run-image.mount
diff --git a/podvm/files/etc/systemd/system/run-kata\x2dcontainers.mount b/podvm/files/etc/systemd/system/run-kata\x2dcontainers.mount