k8s.io/test-infra@v0.0.0-20240520184403-27c6b4c223d8/jobs/e2e_node/crio/crio_cgroupsv2_userns.ign (about)

     1  {
     2    "ignition": {
     3      "version": "3.3.0"
     4    },
     5    "kernelArguments": {
     6      "shouldNotExist": [
     7        "mitigations=auto,nosmt"
     8      ]
     9    },
    10    "passwd": {
    11      "users": [
    12        {
    13          "name": "kubelet"
    14        }
    15      ]
    16    },
    17    "storage": {
    18      "files": [
    19        {
    20          "path": "/etc/zincati/config.d/90-disable-auto-updates.toml",
    21          "contents": {
    22            "compression": "",
    23            "source": "data:,%5Bupdates%5D%0Aenabled%20%3D%20false%0A"
    24          },
    25          "mode": 420
    26        },
    27        {
    28          "path": "/root/kubelet-e2e.te",
    29          "contents": {
    30            "compression": "gzip",
    31            "source": "data:;base64,H4sIAAAAAAAC/6RRy07DMBC8+ytG4gwCjkT9lsp1BrTKxjbOWhWK+u+ItiFpE07scWcf83B9aqsSXT1QaY98JV6enhvnCj+rFGJ0uJZ9ZUKy+YNy2FtzC4SPkmpetevAsrd+DUgUWx9J0bzEn5UZCeqHAa0UjJAUTBEKvREpM+JYxIjT/fi7KDHC58zYTguaQofe58tmoW9RGH1P1KgSu/nYybmH3bKufHHT3Dmvmo4TNmt9++f7++cLX7YZLAcWNC6mbdq10vcb7B8aZ3yK+nz+nEjjvgMAAP//f1Vw5EkCAAA="
    32          },
    33          "mode": 420
    34        },
    35        {
    36          "path": "/etc/crio/crio.conf.d/crio.conf",
    37          "contents": {
    38            "compression": "gzip",
    39            "source": "data:;base64,H4sIAAAAAAAC/7SPQWrEMAxF9z5FyH7iE8xJSjAaR8moyFKQ5UJvXzxJKbRQuuisjMX/ek8v2UgnKrDhHCptAt4M065M+X24DmNEz7GH4jGbXqvKGMJRtCZOBefAuiXGN+TeWfDWtjEspnsiWQ1SdhuuwwpcMSy4QmNPZ7cXrEn+vvPzrVO2JnM4v2kHvz/EWrXImoHjjeSheOnJMRQVcrXfkyrl5x1fzG70N+bh/h9Mx+qXO8jCaM9ifwQAAP//eNRpfPABAAA="
    40          },
    41          "mode": 420
    42        },
    43        {
    44          "path": "/etc/sysctl.d/99-e2e-sysctl.conf",
    45          "contents": {
    46            "compression": "gzip",
    47            "source": "data:;base64,H4sIAAAAAAAC/2SQvU7DQBCEez/FSG7BduKf4Eh0NBR06dH6bo1P8d1F3r3EvD2KCJFQqpW+LWbmy/EezMIkjCMvgefi5OynpxUU7B/SaWGy8nzFGuFpdT75AofJCZwgMFu2GOOS5Tg5Cz47oy4GKIvKEwY2lIQh36LsLS5uniGsoBvCxVnGG4+UZj2QHOWD1izHQMIWMcA7n0LyiCN0YmGcaU4sRZZjXXjcY1I9yb4sv5xOaShM9OUt7X5N9N5pWVM1Vp1pNrTth11XjdyZ2tKu3fZmbPuW25eaqOqyHIeJYX9L3QJBC0NjxBwv18HXNo+Ti+y/zNdm0zd11WSPQu+vnwAAAP//xE8bG4oBAAA="
    48          },
    49          "mode": 420
    50        },
    51        {
    52          "path": "/etc/ssh-key-secret/ssh-public",
    53          "contents": {
    54            "source": "data:text/plain;base64,R0NFX1NTSF9QVUJMSUNfS0VZX0ZJTEVfQ09OVEVOVA=="
    55          },
    56          "mode": 420
    57        },
    58        {
    59          "path": "/etc/subuid",
    60          "contents": {
    61            "compression": "gzip",
    62            "source": "data:;base64,H4sIAAAAAAAC/0zMQa6DIBSF4TmrOIkTNXkJaNRXxk5chtaLklpo4JJ2+Q22g05Pzv8VSJGCNjZEnkZ99ckxvME0RlHguVMgUeAP3wNsRN91bY8aDUrnGbwTFtqsc9ZtOc3D6VRn+UvmXCmJciUzp4Nxn194+DVWqD+uuKWFDmKtWiWHRg+N/L/0UrwDAAD///9e1jyoAAAA"
    63          },
    64          "mode": 420
    65        },
    66        {
    67          "path": "/etc/subgid",
    68          "contents": {
    69            "compression": "gzip",
    70            "source": "data:;base64,H4sIAAAAAAAC/0zMQa6DIBSF4TmrOIkTNXkJaNRXxk5chtaLklpo4JJ2+Q22g05Pzv8VSJGCNjZEnkZ99ckxvME0RlHguVMgUeAP3wNsRN91bY8aDUrnGbwTFtqsc9ZtOc3D6VRn+UvmXCmJciUzp4Nxn194+DVWqD+uuKWFDmKtWiWHRg+N/L/0UrwDAAD///9e1jyoAAAA"
    71          },
    72          "mode": 420
    73        },
    74        {
    75          "path": "/etc/crio/crio.conf.d/99-crun.conf",
    76          "contents": {
    77            "compression": "",
    78            "source": "data:,%5Bcrio.runtime%5D%0Adefault_runtime%20%3D%20%22crun%22%0A"
    79          }
    80        }
    81      ]
    82    },
    83    "systemd": {
    84      "units": [
    85        {
    86          "contents": "[Unit]\nDescription=Configure required sysctls.\n\n[Service]\nType=oneshot\nExecStart=/usr/lib/systemd/systemd-sysctl\n\n[Install]\nWantedBy=multi-user.target\n",
    87          "enabled": true,
    88          "name": "configure-sysctl.service"
    89        },
    90        {
    91          "contents": "[Unit]\nDescription=Download and install required tools.\nBefore=crio-install.service\nAfter=NetworkManager-wait-online.service\n\n[Service]\nType=oneshot\nExecStart=rpm-ostree install \\\n  -y \\\n  --apply-live \\\n  --allow-inactive \\\n  dbus-tools \\\n  checkpolicy\n\n[Install]\nWantedBy=multi-user.target\n",
    92          "enabled": true,
    93          "name": "tools-install.service"
    94        },
    95        {
    96          "contents": "[Unit]\nDescription=Setup SELinux policy\nAfter=tools-install.service\n\n[Service]\nType=oneshot\nExecStartPre=setenforce 1\nExecStartPre=checkmodule -M -m -o /root/kubelet-e2e.mod /root/kubelet-e2e.te\nExecStartPre=semodule_package -o /root/kubelet-e2e.pp -m /root/kubelet-e2e.mod\nExecStartPre=semodule -i /root/kubelet-e2e.pp\nExecStartPre=mkdir -p /var/lib/kubelet\nExecStart=chcon -R -u system_u -r object_r -t var_lib_t /var/lib/kubelet\n\n[Install]\nWantedBy=multi-user.target\n",
    97          "enabled": true,
    98          "name": "selinux-install.service"
    99        },
   100        {
   101          "contents": "[Unit]\nDescription=Download and install crio binaries and configurations.\nAfter=selinux-install.service\n\n[Service]\nType=oneshot\nEnvironment=\"SCRIPT_COMMIT=3e02ed6de9f516af9d8884c06ee3d709b2fa413d\"\nEnvironment=\"CRIO_COMMIT=v1.30.0\"\n\nExecStartPre=mount /tmp /tmp -o remount,exec,suid\nExecStartPre=mount -o remount,rw /dev/sda4 /usr\nExecStartPre=bash -c '\\\n  curl --fail --retry 5 --retry-delay 3 --silent --show-error \\\n    https://raw.githubusercontent.com/cri-o/packaging/$SCRIPT_COMMIT/get |\\\n      bash -s -- -t $CRIO_COMMIT'\nExecStartPre=rm -f /etc/cni/net.d/87-podman-bridge.conflist\nExecStartPre=rm -f /etc/crio/crio.conf.d/10-crio.conf\nExecStart=systemctl enable --now crio.service\n\n[Install]\nWantedBy=multi-user.target\n",
   102          "enabled": true,
   103          "name": "crio-install.service"
   104        },
   105        {
   106          "contents": "[Unit]\nDescription=Copy authorized keys\nBefore=crio-install.service\nAfter=NetworkManager-wait-online.service\n\n[Service]\nType=oneshot\nExecStart=/bin/sh -c '\\\n  /usr/bin/mkdir -m 0700 -p /home/core/.ssh \u0026\u0026 \\\n  /usr/bin/cat /etc/ssh-key-secret/ssh-public \\\n    \u003e\u003e /home/core/.ssh/authorized_keys \u0026\u0026 \\\n  /usr/bin/chown -R core:core /home/core/.ssh \u0026\u0026 \\\n  /usr/bin/chmod 0600 /home/core/.ssh/authorized_keys'\n\n[Install]\nWantedBy=multi-user.target\n",
   107          "enabled": true,
   108          "name": "authorized-key.service"
   109        }
   110      ]
   111    }
   112  }