Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
[net] Disable prio and cls cgroups to make working cgroup2 sock match…
…ing (sonic-net#198) * Unset CONFIG_CGROUP_NET_CLASSID, CONFIG_CGROUP_NET_PRIO and depended modules CONFIG_NET_CLS_CGROUP, CONFIG_NETFILTER_XT_MATCH_CGROUP in Kconfig to disable those v1 cgroups. The system contains programs, which use both groups v1 and v2, e.g. docker uses net_prio, net_cls and "ip vrf" uses cgroup2 socket matching. But, Linux kernel does not allow to work with net_prio, net_cls and socket matching from cgroup2 in the same time. Link to comment in source file: https://elixir.bootlin.com/linux/v4.19.156/source/include/linux/cgroup-defs.h#L745 The related warning, appearing on startup: "sonic INFO kernel: [ 14.057746] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation". Disabling of net_prio and net_cls will prevent this conflict and make programs, which uses cgroup2 socket matching, to be working correct. Signed-off-by: Maksym Belei <Maksym_Belei@jabil.com>
- Loading branch information