Daemon to support network restore and Macvlan driver exits experimental #23524

aboch · 2016-06-14T16:28:04Z

This PR brings:

Macvlan driver exits experimental
Live-restore support for libnetwork
- initial commit from @coolljt0725 with modification to adapt to the new design
- Add network restore to support docker live restore container libnetwork#1244 for libnetwork support
- @coolljt0725 commit with the test changes

thaJeztah · 2016-06-14T16:39:29Z

Signed-off-by: Alessandro Boch <aboch@docker.com>

icecrime · 2016-06-14T21:28:57Z

Quick question: is it possible that I run a daemon, initialize a Swarm, change my daemon config to add --live-restore, and reload this configuration? That would be a loophole in the validation process. (cc @crosbymichael)

aboch · 2016-06-14T21:35:02Z

@icecrime Need to think about it. But existing validation logic would have same issue.
Being this to cover a corner case, would this be a good candidate for a bug fix. Do not want to rush a decision on the validation now.

mavenugo · 2016-06-14T21:36:52Z

@aboch no. I added a check if daemon.clusterProvider != nil { in reloadClusterDiscovery to handle this case for --cluster-store configruation.

I think you should do a similar check for --live-restore as well

aboch · 2016-06-14T21:44:37Z

@icecrime @mavenugo Ah, then the same would work with the new check.

I just tested the scenario depicted by @icecrime:

start daemon w/o live-restore
init swarm
stop daemon and restart with --live-restore

daemon start fails with:

FATA[0002] Error creating cluster component: swarm mode is incompatible with --live-restore option

icecrime · 2016-06-14T21:51:01Z

@aboch The scenario I was mentioning was about hot-reloading the configuration, not restarting the daemon!

aboch · 2016-06-14T21:57:32Z

@icecrime Verified the config reload leads to the same validation:

DEBU[0045] Calling GET /v1.24/containers/json           
DEBU[0049] aboch-W540: Initiating bulk sync with nodes [] 
INFO[0071] Got signal to reload configuration, reloading from: /home/alessandro/config.json 
ERRO[0071] Error reconfiguring the daemon: --cluster-store and --cluster-advertise daemon configurations are incompatible with swarm mode 
DEBU[0079] aboch-W540: Initiating bulk sync with nodes []

mavenugo · 2016-06-14T22:18:40Z

@aboch

ERRO[0071] Error reconfiguring the daemon: --cluster-store and --cluster-advertise daemon configurations are incompatible with swarm mode

It should be --live-restore in your case.

aboch · 2016-06-14T22:29:05Z

LOL, I didn't realize the same error message was being printed in different places...
I assumed the same validation function was being executed from different paths

Will take care of it shortly

aboch · 2016-06-14T23:06:38Z

@mavenugo @icecrime Thanks, PTAL, the inner compatibility check is now a property of the config and same function is used for validation in the two paths.

Follows the daemon logs for two hot reloads after the swarm init: In the first one the json config specifies the live restore. In the second one it specifies the cluster store config:

INFO[0053] Got signal to reload configuration, reloading from: /home/alessandro/config.json 
ERRO[0053] Error reconfiguring the daemon: --live-restore daemon configuration is incompatible with swarm mode 

INFO[0068] Got signal to reload configuration, reloading from: /home/alessandro/config.json 
ERRO[0068] Error reconfiguring the daemon: --cluster-store and --cluster-advertise daemon configurations are incompatible with swarm mode 
DEBU[0071] aboch-W540: Initiating bulk sync with nodes []

mlaventure · 2016-06-14T23:41:52Z

@aboch

23:35:56 daemon\daemon.go:380: daemon.configStore.isSwarmCompatible undefined (type *Config has no field or method isSwarmCompatible)
23:35:56 daemon\daemon.go:935: config.isSwarmCompatible undefined (type *Config has no field or method isSwarmCompatible)

Windows failure is genuine.

aboch · 2016-06-14T23:43:09Z

Thanks @mlaventure. Updated.

Signed-off-by: Lei Jitang <leijitang@huawei.com>

icecrime · 2016-06-15T00:47:43Z

LGTM 👍

icecrime · 2016-06-15T00:48:08Z

One failure on janky (related?):

17:12:10 FAIL: docker_cli_links_test.go:32: DockerSuite.TestLinksPingLinkedContainers
17:12:10 
17:12:10 docker_cli_links_test.go:46:
17:12:10     // 3. Ping by hostname
17:12:10     dockerCmd(c, append(runArgs, fmt.Sprintf(pingCmd, "fred", "wilma"))...)
17:12:10 /go/src/github.com/docker/docker/pkg/integration/dockerCmd_utils.go:42:
17:12:10     c.Assert(err, check.IsNil, check.Commentf(quote+"%v"+quote+" failed with errors: %s, %v", strings.Join(args, " "), out, err))
17:12:10 ... value *exec.ExitError = &exec.ExitError{ProcessState:(*os.ProcessState)(0xc8231a3320), Stderr:[]uint8(nil)} ("exit status 137")
17:12:10 ... "run --rm --link container1:alias1 --link container2:alias2 busybox sh -c ping -c 1 fred -W 1 && ping -c 1 wilma -W 1" failed with errors: , exit status 137

aboch · 2016-06-15T01:19:03Z

@icecrime
Not sure, that test pass on my machine:

---> Making bundle: .ensure-nnp-test (in bundles/1.12.0-dev/test-integration-cli)
+ go test -check.f DockerSuite.TestLinksPingLinkedContainers -check.v -check.timeout=5m -test.timeout=360m github.com/docker/docker/integration-cli
INFO: Testing against a local daemon
PASS: docker_cli_links_test.go:32: DockerSuite.TestLinksPingLinkedContainers    1.735s
PASS: docker_cli_links_test.go:50: DockerSuite.TestLinksPingLinkedContainersAfterRename 1.393s
PASS: docker_cli_exec_test.go:365: DockerSuite.TestLinksPingLinkedContainersOnRename    0.640s
OK: 3 passed
PASS
coverage: 10.4% of statements
---> Making bundle: .integration-daemon-stop (in bundles/1.12.0-dev/test-integration-cli)

Let me look at it closer

icecrime · 2016-06-15T01:20:12Z

Hopefully it's unrelated. @crosbymichael will be testing the PR tonight.

crosbymichael · 2016-06-15T01:56:42Z

LGTM

tonistiigi · 2016-06-15T02:05:00Z

Ping test failure in ci, not sure if related.

I would prefer IsSwarmCompatible configs checks to be handled in a layer above cluster and daemon instead of using executor callback that is not designed for these kinds of things. But this would probably require a larger refactor. LGTM

icecrime · 2016-06-15T02:24:40Z

Weird failure in docker-py:

TestNetworks.test_create_network_with_host_driver_fails ____________
02:21:40 /docker-py/tests/integration/network_test.py:91: in test_create_network_with_host_driver_fails
02:21:40     self.client.create_network(net_name, driver='host')
02:21:40 E   Failed: DID NOT RAISE

icecrime · 2016-06-15T02:33:04Z

The failure in docker-py is legitimate, but @aboch is aware and will fix in a followup PR. Amazing that docker-py suite caught it :-)

aboch · 2016-06-15T02:35:00Z

Yes, it is a genuine failure, good docker-py test.
Not a big deal, docker will allow user to create a host network when the one provisioned by the daemon is already present. Second creation will fail.
Will open an issue, should be a simple fix.

coolljt0725 · 2016-06-15T03:41:12Z

👏

dreamcat4 · 2016-06-20T08:39:15Z

Thanks guys - really appreciate this.

ncoolz · 2016-06-28T10:02:41Z

daemon/config_unix.go

@@ -120,3 +121,13 @@ func (config *Config) GetAllRuntimes() map[string]types.Runtime {
 	config.reloadLock.Unlock()
 	return rts
 }
+
+func (config *Config) isSwarmCompatible() error {
+	if config.IsValueSet("cluster-store") || config.IsValueSet("cluster-advertise") {


Why did you change this code from config.ClusterStore != "" to config.IsValueSet("cluster-store")?
As I know, config.IsValueSet() checks only configs which were set in the configuration file.
So this code always returns false even if using --cluster-store option.

aboch · 2016-06-28T17:04:42Z

@ncoolz Thank you for spotting this. In my initial diff I was looking for the config parameter value and tested with that, later I moved to the IsValueSet(), that is a mistake.

Please let me know if you can push a patch to fix this, otherwise I will take care of it.

Thanks again.

ncoolz · 2016-06-28T17:32:33Z

@aboch I will send a PR immediately. Thank you.

thaJeztah · 2016-06-28T17:54:12Z

Thanks @ncoolz!

eungjun-yi · 2016-08-05T05:32:15Z

./experimental/vlan-networks.md still say that macvlan driver is in experimental mode. I think this should be updated.

The Macvlan and Ipvlan drivers are currently in experimental mode in order to incubate Docker users use cases and vet the implementation to ensure a hardened, production ready driver in a future release.

-- https://github.com/docker/docker/blob/master/experimental/vlan-networks.md#user-content-getting-started

GordonTheTurtle added platform/windows status/0-triage labels Jun 14, 2016

aboch mentioned this pull request Jun 14, 2016

Add live restore to Info struct docker/engine-api#277

Closed

Vendoring libnetwork 452dff1

5b79122

Signed-off-by: Alessandro Boch <aboch@docker.com>

icecrime added status/2-code-review and removed platform/windows status/0-triage labels Jun 14, 2016

mavenugo added this to the 1.12.0 milestone Jun 14, 2016

coolljt0725 added 2 commits June 14, 2016 16:45

Daemon to support network restore

ecffb6d

Signed-off-by: Lei Jitang <leijitang@huawei.com>

Add test case for network restore

7d0689a

Signed-off-by: Lei Jitang <leijitang@huawei.com>

icecrime assigned crosbymichael Jun 15, 2016

tonistiigi added the status/4-merge label Jun 15, 2016

tonistiigi removed the status/2-code-review label Jun 15, 2016

icecrime merged commit 9119795 into moby:master Jun 15, 2016

aboch mentioned this pull request Jun 15, 2016

Do not allow host and null network creation #23560

Closed

tonistiigi mentioned this pull request Jun 15, 2016

Fix hanging integration tests #23579

Merged

mavenugo changed the title ~~Daemon to support network restore~~ Daemon to support network restore and Macvlan driver exits experimental Jun 17, 2016

ncoolz reviewed Jun 28, 2016
View reviewed changes

ncoolz mentioned this pull request Jun 28, 2016

Fix check code for --cluster-store and --cluster-advertise in config_… #24050

Merged

thaJeztah mentioned this pull request Jul 20, 2016

Add explicit support for macvlan networks to bash completion #24861

Merged

sfsmithcha mentioned this pull request Aug 10, 2016

macvlan network driver only documented as experimental #25572

Closed

aboch deleted the restore branch December 1, 2016 01:36

andyxning mentioned this pull request Dec 20, 2016

Proposal: Restore running container network settings for containerd integration to support hot upgrade moby/libnetwork#975

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Daemon to support network restore and Macvlan driver exits experimental #23524

Daemon to support network restore and Macvlan driver exits experimental #23524

aboch commented Jun 14, 2016 •

edited by mavenugo

Loading

thaJeztah commented Jun 14, 2016

icecrime commented Jun 14, 2016

aboch commented Jun 14, 2016

mavenugo commented Jun 14, 2016

aboch commented Jun 14, 2016

icecrime commented Jun 14, 2016

aboch commented Jun 14, 2016

mavenugo commented Jun 14, 2016

aboch commented Jun 14, 2016

aboch commented Jun 14, 2016 •

edited

Loading

mlaventure commented Jun 14, 2016

aboch commented Jun 14, 2016 •

edited

Loading

icecrime commented Jun 15, 2016

icecrime commented Jun 15, 2016

aboch commented Jun 15, 2016

icecrime commented Jun 15, 2016

crosbymichael commented Jun 15, 2016

tonistiigi commented Jun 15, 2016

icecrime commented Jun 15, 2016

icecrime commented Jun 15, 2016

aboch commented Jun 15, 2016

coolljt0725 commented Jun 15, 2016

dreamcat4 commented Jun 20, 2016

ncoolz Jun 28, 2016

aboch commented Jun 28, 2016

ncoolz commented Jun 28, 2016

thaJeztah commented Jun 28, 2016

eungjun-yi commented Aug 5, 2016

Daemon to support network restore and Macvlan driver exits experimental #23524

Daemon to support network restore and Macvlan driver exits experimental #23524

Conversation

aboch commented Jun 14, 2016 • edited by mavenugo Loading

thaJeztah commented Jun 14, 2016

icecrime commented Jun 14, 2016

aboch commented Jun 14, 2016

mavenugo commented Jun 14, 2016

aboch commented Jun 14, 2016

icecrime commented Jun 14, 2016

aboch commented Jun 14, 2016

mavenugo commented Jun 14, 2016

aboch commented Jun 14, 2016

aboch commented Jun 14, 2016 • edited Loading

mlaventure commented Jun 14, 2016

aboch commented Jun 14, 2016 • edited Loading

icecrime commented Jun 15, 2016

icecrime commented Jun 15, 2016

aboch commented Jun 15, 2016

icecrime commented Jun 15, 2016

crosbymichael commented Jun 15, 2016

tonistiigi commented Jun 15, 2016

icecrime commented Jun 15, 2016

icecrime commented Jun 15, 2016

aboch commented Jun 15, 2016

coolljt0725 commented Jun 15, 2016

dreamcat4 commented Jun 20, 2016

ncoolz Jun 28, 2016

Choose a reason for hiding this comment

aboch commented Jun 28, 2016

ncoolz commented Jun 28, 2016

thaJeztah commented Jun 28, 2016

eungjun-yi commented Aug 5, 2016

aboch commented Jun 14, 2016 •

edited by mavenugo

Loading

aboch commented Jun 14, 2016 •

edited

Loading

aboch commented Jun 14, 2016 •

edited

Loading