For my Docker container Selinux is enabled and set to "Enforcing" mode. We have 2 container running in our system. But for one container both "MountLabel" and "ProcessLabel" is configured , as shown below : docker inspect <container1_ID> | grep…
I built a yocto distro (rocko) for my BBB using kernel linux-ti-staging-4.14 with a custom device tree. Since I need to port an old project from Debian to Yocto, I also needed to enable the UIO features in the kernel,…
I am experiencing a lot of CPU throttling (see nginx graph below, other pods often 25% to 50%) in my Kubernetes cluster (k8s v1.18.12, running 4.9.0-11-amd64 #1 SMP Debian 4.9.189-3+deb9u2 (2019-11-11) x86_64 GNU/Linux). Due to backports, I do not know…
I added an udev rule to generate a separate link to a special tty device. I took the vendor and product id from lsusb: Bus 001 Device 016: ID abcd:1234 Foo Device The dmesg output for the device is: […
Is there capacity within amazon/centos/linux to switch the ordering round of nitro disks? I have an ami which consistently has devices in the incorrect order, by this I mean nvme1n1 and nvme2n1 should be switched round. If I run nvme…
I am trying to write to Extended Control Register 0 (xcr0) on an x86_64 Debian v7 virtual machine. My approach to doing so is through a kernel module (so CPL=0) with some inline assembly. However, I keep getting a general…
I am installing kubernetes using kubeadm on GCP Centos VM and I am getting the following error while running flannel step. Error: [root@master ~]# kubectl apply -f https://raw.githubusercontent.com/coreos/flannel/a70459be0084506e4ec919aa1c114638878db11b/Documentation/kube-flannel.yml clusterrole.rbac.authorization.k8s.io/flannel created clusterrolebinding.rbac.authorization.k8s.io/flannel created serviceaccount/flannel created configmap/kube-flannel-cfg created unable to recognize "https://raw.githubusercontent.com/coreos/flannel/a70459be0084506e4ec919aa1c114638878db11b/Documentation/kube-flannel.yml":…
My apologies if I'm posting this here instead of super user. I was trying to run docker inside real-time group and I came across enabling cgroups - CONFIG_RT_GROUP_SCHED in the kernel to run real-time docker applications (here: https://docs.docker.com/config/containers/resource_constraints/#configure-the-default-cfs-scheduler) I configured…