Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Knative on CoCo #12

Merged
merged 10 commits into from
Sep 28, 2023
Merged

Knative on CoCo #12

merged 10 commits into from
Sep 28, 2023

Conversation

csegarragonz
Copy link
Collaborator

@csegarragonz csegarragonz commented Sep 27, 2023

The main issue to run Knative on CoCo is that Knative resolves image tags to digests, and uses those as immutable image references for their revisions and deployments (which should also be immutable).

This introduces two friction-points with Kata Containers (and CoCo):

  1. CoCo wants to always pull an image from the guest (to avoid confidentiality/integrity issues with using the host's cache).
  2. If the image is not cached in the host (the default case for CoCo), the Kata agent can't pull the image as it doesn't recognise it as a valid image ID.

To fix 1, we have to manually delete the image sudo crictl rmi <image_id> after every single invocation. This is very far from ideal, and won't work well with cold-starts. But it is not a show-stopper.

To fix 2, we patch our Kata Containers fork.

Closes #1

@csegarragonz csegarragonz changed the title Knative on Kata Knative on CoCo Sep 28, 2023
@csegarragonz csegarragonz marked this pull request as ready for review September 28, 2023 19:15
@csegarragonz csegarragonz merged commit dda5193 into main Sep 28, 2023
@csegarragonz csegarragonz deleted the knative-kata branch September 28, 2023 19:36
konsougiou pushed a commit to konsougiou/coco-serverless-fyp that referenced this pull request Jun 19, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Knative-on-CoCo
1 participant