Patch submitted: https://lists.ubuntu.com/archives/kernel-
team/2024-July/152466.html

** Description changed:

- We are trying to get eBPF to work for microk8s in the LXD's
- `ubuntu:22.04` images which use the `-kvm` variant.
+ [ Impact ]
  
- With this kernel we are getting this error:
+ Unable to run k8s and other software relying on Cilium.
  
- level=warning msg="Unable to ensure that BPF JIT compilation is enabled. This 
can be ignored when Cilium is running inside non-host network namespace (e.g. 
with kin
- d or minikube)" error="could not open the sysctl file 
/host/proc/sys/net/core/bpf_jit_enable: open 
/host/proc/sys/net/core/bpf_jit_enable: no such file or directory
- " subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1
+ [ Fix ]
  
- We've confirmed this works fine in the 22.04 generic kernel, so please
- can we have similar eBPF support in the `-kvm` variant kernel.
+ Enable required configs and prerequisite.
+ Which consist of:
+ CONFIG_BPF_JIT
+ CONFIG_BPF_JIT_DEFAULT_ON
+ CONFIG_NET_EGRESS
+ CONFIG_NET_SCHED
+ CONFIG_NET_SCH_INGRESS
+ CONFIG_NET_CLS
+ CONFIG_NET_CLS_CGROUP
+ CONFIG_NET_CLS_BPF
+ CONFIG_NET_CLS_ACT
+ CONFIG_NET_SCH_FIFO
+ CONFIG_CRYPTO_USER_API
+ CONFIG_CRYPTO_USER_API_HASH
+ CONFIG_SCHEDSTATS
  
+ These configs are already enabled in generic kernel.
  
- Suspect we need these config options enabled:
+ [ Test Plan ]
  
- ```
- CONFIG_BPF_SYSCALL=y
- CONFIG_BPF_JIT=y
- ```
+ Tested with Cilium.
  
+ [ Where problems could occur ]
  
- It would also be useful to ensure that the kernel config is available in 
/proc/config.gz or /boot/config (if not already) so that applications can 
discover which config options are enabled.
+ eBPF misbehavior.
+ Network regression due to enable network configuration.

** Description changed:

  [ Impact ]
  
  Unable to run k8s and other software relying on Cilium.
  
  [ Fix ]
  
  Enable required configs and prerequisite.
  Which consist of:
  CONFIG_BPF_JIT
  CONFIG_BPF_JIT_DEFAULT_ON
  CONFIG_NET_EGRESS
  CONFIG_NET_SCHED
  CONFIG_NET_SCH_INGRESS
  CONFIG_NET_CLS
  CONFIG_NET_CLS_CGROUP
  CONFIG_NET_CLS_BPF
  CONFIG_NET_CLS_ACT
  CONFIG_NET_SCH_FIFO
  CONFIG_CRYPTO_USER_API
  CONFIG_CRYPTO_USER_API_HASH
  CONFIG_SCHEDSTATS
  
  These configs are already enabled in generic kernel.
  
  [ Test Plan ]
  
- Tested with Cilium.
+ Tested with Cilium successfully.
  
  [ Where problems could occur ]
  
  eBPF misbehavior.
  Network regression due to enable network configuration.

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux-kvm in Ubuntu.
https://bugs.launchpad.net/bugs/2073973

Title:
  Add eBPF support to ubuntu:22.04 -kvm variant kernel

Status in cloud-images:
  New
Status in linux-kvm package in Ubuntu:
  New
Status in linux-kvm source package in Jammy:
  In Progress

Bug description:
  [ Impact ]

  Unable to run k8s and other software relying on Cilium.

  [ Fix ]

  Enable required configs and prerequisite.
  Which consist of:
  CONFIG_BPF_JIT
  CONFIG_BPF_JIT_DEFAULT_ON
  CONFIG_NET_EGRESS
  CONFIG_NET_SCHED
  CONFIG_NET_SCH_INGRESS
  CONFIG_NET_CLS
  CONFIG_NET_CLS_CGROUP
  CONFIG_NET_CLS_BPF
  CONFIG_NET_CLS_ACT
  CONFIG_NET_SCH_FIFO
  CONFIG_CRYPTO_USER_API
  CONFIG_CRYPTO_USER_API_HASH
  CONFIG_SCHEDSTATS

  These configs are already enabled in generic kernel.

  [ Test Plan ]

  Tested with Cilium successfully.

  [ Where problems could occur ]

  eBPF misbehavior.
  Network regression due to enable network configuration.

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-images/+bug/2073973/+subscriptions


-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to