From 2311db4b779aac87491b82f3bca53cc079e15cda Mon Sep 17 00:00:00 2001 From: Lisoon22 Date: Fri, 12 Jun 2026 14:12:16 +0300 Subject: [PATCH 1/7] feat(lab1): juice shop deploy + PR template + triage report --- submissions/lab1.md | 107 ++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 107 insertions(+) create mode 100644 submissions/lab1.md diff --git a/submissions/lab1.md b/submissions/lab1.md new file mode 100644 index 000000000..a4b77b61f --- /dev/null +++ b/submissions/lab1.md @@ -0,0 +1,107 @@ +# Lab 1 — Submission + +## Triage Report: OWASP Juice Shop + +### Scope & Asset +- Asset: OWASP Juice Shop (local lab instance) +- Image: `bkimminich/juice-shop:v20.0.0` +- Image digest / image ID: `sha256:fd58bdc9745416afce8184ee0666278a436574633ea7880365153a63bfd418b0` +- Host OS: Arch Linux +- Docker version: `Docker version 29.5.1, build 2518b52d94` + +### Deployment Details +- Run command used: `docker run -d --name juice-shop -p 127.0.0.1:3000:3000 bkimminich/juice-shop:v20.0.0` +- Access URL: http://127.0.0.1:3000 +- Network exposure: 127.0.0.1 only? [x] Yes [ ] No +- Container restart policy: `no` + +### Health Check +- HTTP code on `/`: 200 +- Product count from `/api/Products`: 46 +- Version check from `/rest/admin/application-version`: `{"version":"20.0.0"}` +- API check (first 200 chars of `/api/Products`): + ```json +{"status":"success","data":[{"id":1,"name":"Apple Juice (1000ml)","description":"The all-time classic.","price":1.99,"deluxePrice":0.99,"image":"apple_juice.jpg","createdAt":"2026-06-12T11:00:57.053Z" + ``` +- Container uptime: + ``` +NAMES STATUS PORTS +juice-shop Up 10 minutes 127.0.0.1:3000->3000/tcp + ``` + +### Initial Surface Snapshot (from browser exploration) +- Login/Registration visible: [x] Yes [ ] No — notes: visible through the Account menu; login and registration are reachable from the UI. +- Product listing/search present: [x] Yes [ ] No — notes: product cards are listed on the landing page; product data is also available through `/api/Products`. +- Admin or account area discoverable: [x] Yes [ ] No — notes: account functionality is visible from the top navigation; admin-related backend endpoint `/rest/admin/application-version` is reachable and exposes the application version. +- Client-side errors in DevTools console: [ ] Yes [x] No — notes: no blocking client-side errors were observed during initial load and product browsing. +- Pre-populated local storage / cookies: browser state contains normal Juice Shop client/UI state such as language or welcome/cookie-banner preferences; no user authentication token was present before login. +- Product detail network behavior: opening a product detail triggers API calls such as `/api/Products//reviews`; reading product/review data does not require authentication during initial browsing. + +### Security Headers (Quick Look) +Run: `curl -I http://127.0.0.1:3000 2>&1 | head -20`. Output: +``` + % Total % Received % Xferd Average Speed Time Time Time Current + Dload Upload Total Spent Left Speed + 0 0 0 0 0 0 0 0 0 0 9903 0 0 0 0 0 0 0 0 9903 0 0 0 0 0 0 0 0 9903 0 0 0 0 0 0 0 +HTTP/1.1 200 OK +Access-Control-Allow-Origin: * +X-Content-Type-Options: nosniff +X-Frame-Options: SAMEORIGIN +Feature-Policy: payment 'self' +X-Recruiting: /#/jobs +Accept-Ranges: bytes +Cache-Control: public, max-age=0 +Last-Modified: Fri, 12 Jun 2026 11:00:57 GMT +ETag: W/"26af-19ebb7e0182" +Content-Type: text/html; charset=UTF-8 +Content-Length: 9903 +Vary: Accept-Encoding +Date: Fri, 12 Jun 2026 11:11:54 GMT +Connection: keep-alive +Keep-Alive: timeout=5 + +``` + +Which of these are MISSING? +- [x] `Content-Security-Policy` +- [x] `Strict-Transport-Security` +- [ ] `X-Content-Type-Options: nosniff` +- [ ] `X-Frame-Options` + +### Top 3 Risks Observed +1. **Missing or incomplete browser hardening headers** — The initial header check shows that at least some defensive headers are absent or not explicitly configured. This matters because headers such as CSP, HSTS, X-Frame-Options, and X-Content-Type-Options reduce the impact of common browser-side attacks; this maps to OWASP Top 10:2025 A06 Security Misconfiguration. +2. **Discoverable unauthenticated API surface** — Product data and review-related endpoints are easy to discover from DevTools and can be queried directly. Even when public reads are intended, this increases the reconnaissance surface and should be reviewed for excessive data exposure or missing authorization boundaries; this maps to OWASP Top 10:2025 A01 Broken Access Control. +3. **Input-heavy application surface around login, registration, search, and product interaction** — The first exploration immediately exposes forms, account flows, and API-backed product functionality. These areas are common entry points for injection, authentication abuse, and validation mistakes, so they should be prioritized in later DAST/manual testing; this maps to OWASP Top 10:2025 A03 Injection and A07 Identification & Authentication Failures. + +## PR Template Setup + +- File: `.github/PULL_REQUEST_TEMPLATE.md` +- Sections included: Goal / Changes / Testing / Artifacts & Screenshots +- Checklist items: + - Title is clear (`feat(labN): ` style) + - No secrets/large temp files committed + - Submission file at `submissions/labN.md` exists +- Auto-fill verified: [x] Yes — PR description showed my template (PASTE_DRAFT_PR_URL_HERE_AFTER_PUSH) + +## GitHub Community + +I starred the course repository and `simple-container-com/api` because stars work both as bookmarks and as a public signal that helps useful open-source projects gain visibility. I also followed the professor, TAs, and classmates because following developers makes it easier to track course activity, discover related projects, and build professional connections for future teamwork. + +Completed actions: +- [x] Starred the course repository +- [x] Starred `simple-container-com/api` +- [x] Followed @Cre-eD +- [x] Followed @Naghme98 +- [x] Followed @pierrepicaud +- [x] Followed at least 3 classmates from the course + +## Bonus: CI Smoke Test + +- Workflow file: `.github/workflows/lab1-smoke.yml` +- Trigger: `pull_request` on main +- Run URL (green): PASTE_GREEN_ACTIONS_RUN_URL_HERE_AFTER_PR +- Workflow run duration: PASTE_WORKFLOW_DURATION_HERE +- Curl response excerpt: + ``` +HTTP/1.1 200 OK / Homepage HTTP status: 200 + ``` From 6efd4a5ce4bcf32e7cdc47cc22545cd34b723833 Mon Sep 17 00:00:00 2001 From: Lisoon22 Date: Fri, 12 Jun 2026 14:15:18 +0300 Subject: [PATCH 2/7] chore(lab1): add pull request template --- .github/PULL_REQUEST_TEMPLATE.md | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) create mode 100644 .github/PULL_REQUEST_TEMPLATE.md diff --git a/.github/PULL_REQUEST_TEMPLATE.md b/.github/PULL_REQUEST_TEMPLATE.md new file mode 100644 index 000000000..2014a9f77 --- /dev/null +++ b/.github/PULL_REQUEST_TEMPLATE.md @@ -0,0 +1,23 @@ +## Goal + +This PR delivers Lab 1: OWASP Juice Shop deployment, triage report, and course PR workflow setup. + +## Changes + +- Added `submissions/lab1.md` with Juice Shop deployment and triage report. +- Added `.github/PULL_REQUEST_TEMPLATE.md` for future lab submissions. +- Documented testing commands, observations, security headers, risks, and GitHub community engagement. + +## Testing + +Commands used: + +```bash +docker run -d --name juice-shop -p 127.0.0.1:3000:3000 bkimminich/juice-shop:v20.0.0 +docker ps --filter name=juice-shop +curl -s -o /dev/null -w "HTTP %{http_code}\n" http://127.0.0.1:3000 +curl -s http://127.0.0.1:3000/api/Products | jq '.data | length' +curl -s http://127.0.0.1:3000/rest/admin/application-version | jq +curl -I http://127.0.0.1:3000 2>&1 | head -20 +''' + From 2009dd387655d162c9050efc3e55824b52cfaa93 Mon Sep 17 00:00:00 2001 From: Lisoon22 Date: Fri, 12 Jun 2026 14:20:40 +0300 Subject: [PATCH 3/7] update PE TEMPLATE --- .github/PULL_REQUEST_TEMPLATE.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/PULL_REQUEST_TEMPLATE.md b/.github/PULL_REQUEST_TEMPLATE.md index 2014a9f77..d8318bb8b 100644 --- a/.github/PULL_REQUEST_TEMPLATE.md +++ b/.github/PULL_REQUEST_TEMPLATE.md @@ -19,5 +19,6 @@ curl -s -o /dev/null -w "HTTP %{http_code}\n" http://127.0.0.1:3000 curl -s http://127.0.0.1:3000/api/Products | jq '.data | length' curl -s http://127.0.0.1:3000/rest/admin/application-version | jq curl -I http://127.0.0.1:3000 2>&1 | head -20 -''' +``` +Observed result: Juice Shop started successfully, homepage returned HTTP 200, and API/version endpoints responded. From 40f06496e41d76b47785cdffcb6349919fa309be Mon Sep 17 00:00:00 2001 From: Lisoon22 Date: Fri, 12 Jun 2026 14:32:01 +0300 Subject: [PATCH 4/7] update PR template --- .github/PULL_REQUEST_TEMPLATE.md | 33 +++++++++++++++++++++----------- 1 file changed, 22 insertions(+), 11 deletions(-) diff --git a/.github/PULL_REQUEST_TEMPLATE.md b/.github/PULL_REQUEST_TEMPLATE.md index d8318bb8b..2454de86e 100644 --- a/.github/PULL_REQUEST_TEMPLATE.md +++ b/.github/PULL_REQUEST_TEMPLATE.md @@ -1,24 +1,35 @@ ## Goal -This PR delivers Lab 1: OWASP Juice Shop deployment, triage report, and course PR workflow setup. +This PR delivers Lab N work: . ## Changes -- Added `submissions/lab1.md` with Juice Shop deployment and triage report. -- Added `.github/PULL_REQUEST_TEMPLATE.md` for future lab submissions. -- Documented testing commands, observations, security headers, risks, and GitHub community engagement. +* Added/updated `submissions/labN.md`. +* Added/updated lab-related configuration files. +* Documented testing steps, observed output, and required artifacts. ## Testing Commands used: ```bash -docker run -d --name juice-shop -p 127.0.0.1:3000:3000 bkimminich/juice-shop:v20.0.0 -docker ps --filter name=juice-shop -curl -s -o /dev/null -w "HTTP %{http_code}\n" http://127.0.0.1:3000 -curl -s http://127.0.0.1:3000/api/Products | jq '.data | length' -curl -s http://127.0.0.1:3000/rest/admin/application-version | jq -curl -I http://127.0.0.1:3000 2>&1 | head -20 + ``` -Observed result: Juice Shop started successfully, homepage returned HTTP 200, and API/version endpoints responded. + +Observed output: + +```text + +``` + +## Artifacts & Screenshots + +* `submissions/labN.md` +* + +## Checklist + +* [ ] Title is clear (`feat(labN): ` style) +* [ ] No secrets/large temp files committed +* [ ] Submission file at `submissions/labN.md` exists From 712b7048a2c66b5b0a9bddab790902affcb82b3d Mon Sep 17 00:00:00 2001 From: Lisoon22 Date: Fri, 12 Jun 2026 14:46:27 +0300 Subject: [PATCH 5/7] ci(lab1): add juice shop smoke test --- .github/workflows/lab1-smoke.yml | 51 ++++++++++++++++++++++++++++++++ 1 file changed, 51 insertions(+) create mode 100644 .github/workflows/lab1-smoke.yml diff --git a/.github/workflows/lab1-smoke.yml b/.github/workflows/lab1-smoke.yml new file mode 100644 index 000000000..2ed88e2c7 --- /dev/null +++ b/.github/workflows/lab1-smoke.yml @@ -0,0 +1,51 @@ +name: Lab 1 Smoke Test + +on: + pull_request: + branches: + - main + +permissions: + contents: read + +jobs: + smoke-test: + runs-on: ubuntu-latest + + steps: + - name: Pull Juice Shop image + run: docker pull bkimminich/juice-shop:v20.0.0 + + - name: Run Juice Shop + run: | + docker run -d --name juice-shop \ + -p 127.0.0.1:3000:3000 \ + bkimminich/juice-shop:v20.0.0 + + - name: Wait for Juice Shop to become healthy + run: | + for i in $(seq 1 30); do + if curl --silent --fail http://127.0.0.1:3000/rest/admin/application-version; then + echo + echo "Juice Shop is healthy" + exit 0 + fi + + echo "Waiting for Juice Shop... attempt $i/30" + sleep 2 + done + + echo "Juice Shop did not become healthy within 60 seconds" + docker logs juice-shop + exit 1 + + - name: Verify homepage returns HTTP 200 + run: | + STATUS_CODE=$(curl -s -o /dev/null -w "%{http_code}" http://127.0.0.1:3000) + echo "Homepage HTTP status: $STATUS_CODE" + + if [ "$STATUS_CODE" != "200" ]; then + echo "Expected HTTP 200, got $STATUS_CODE" + docker logs juice-shop + exit 1 + fi From d64400775963c422692f0fc326ff1687e1e17c0e Mon Sep 17 00:00:00 2001 From: Lisoon22 Date: Sat, 18 Jul 2026 00:45:37 +0300 Subject: [PATCH 6/7] feat(lab12): document kata isolation and performance results --- submissions/lab12.md | 218 ++++++++++ .../results/bonus-bind-kata-container.txt | 10 + .../results/bonus-bind-kata-exit-status.txt | 1 + .../lab12/results/bonus-bind-kata-host.txt | 1 + .../results/bonus-bind-runc-container.txt | 2 + .../results/bonus-bind-runc-exit-status.txt | 1 + .../lab12/results/bonus-bind-runc-host.txt | 1 + .../labs/lab12/results/bonus-bind-summary.txt | 5 + .../results/bonus-pid-kata-container.txt | 1 + .../results/bonus-pid-kata-exit-status.txt | 1 + .../lab12/results/bonus-pid-kata-host.txt | 1 + .../results/bonus-pid-runc-container.txt | 1 + .../results/bonus-pid-runc-exit-status.txt | 1 + .../lab12/results/bonus-pid-runc-host.txt | 1 + .../labs/lab12/results/bonus-pid-summary.txt | 4 + submissions/labs/lab12/results/caps-diff.txt | 0 .../labs/lab12/results/collector-status.txt | 1 + .../results/containerd-active-after-kata.txt | 1 + .../labs/lab12/results/containerd-active.txt | 1 + .../lab12/results/containerd-config-full.toml | 34 ++ .../results/containerd-journal-final.txt | 315 ++++++++++++++ .../labs/lab12/results/containerd-journal.txt | 269 ++++++++++++ .../lab12/results/containerd-kata-config.txt | 2 + .../results/containerd-status-after-kata.txt | 23 ++ .../results/containerd-status-before-kata.txt | 23 ++ .../lab12/results/containerd-status-final.txt | 22 + .../labs/lab12/results/containerd-status.txt | 22 + .../labs/lab12/results/containerd-version.txt | 1 + submissions/labs/lab12/results/dev-diff.txt | 7 + .../labs/lab12/results/failure-context.txt | 5 + submissions/labs/lab12/results/git-branch.txt | 1 + submissions/labs/lab12/results/git-head.txt | 1 + .../labs/lab12/results/git-status-after.txt | 44 ++ .../labs/lab12/results/git-status-before.txt | 44 ++ .../lab12/results/host-kernel-release.txt | 1 + submissions/labs/lab12/results/host-uname.txt | 1 + submissions/labs/lab12/results/image-pull.txt | 70 ++++ submissions/labs/lab12/results/kata-caps.txt | 5 + submissions/labs/lab12/results/kata-devs.txt | 14 + submissions/labs/lab12/results/kata-io.txt | 3 + .../labs/lab12/results/kata-kernel.txt | 6 + .../labs/lab12/results/kata-version.txt | 1 + .../results/kernel-release-comparison.txt | 3 + submissions/labs/lab12/results/kvm.txt | 6 + submissions/labs/lab12/results/lscpu.txt | 40 ++ .../labs/lab12/results/nerdctl-ps-all.txt | 1 + .../labs/lab12/results/nerdctl-version.txt | 1 + submissions/labs/lab12/results/os-release.txt | 12 + .../labs/lab12/results/repository-root.txt | 1 + submissions/labs/lab12/results/run.log | 384 ++++++++++++++++++ submissions/labs/lab12/results/runc-caps.txt | 5 + submissions/labs/lab12/results/runc-devs.txt | 15 + submissions/labs/lab12/results/runc-io.txt | 3 + .../labs/lab12/results/runc-kernel.txt | 6 + .../labs/lab12/results/runc-version.txt | 4 + .../labs/lab12/results/startup-bench.csv | 11 + .../labs/lab12/results/startup-summary.txt | 7 + 57 files changed, 1665 insertions(+) create mode 100644 submissions/lab12.md create mode 100644 submissions/labs/lab12/results/bonus-bind-kata-container.txt create mode 100644 submissions/labs/lab12/results/bonus-bind-kata-exit-status.txt create mode 100644 submissions/labs/lab12/results/bonus-bind-kata-host.txt create mode 100644 submissions/labs/lab12/results/bonus-bind-runc-container.txt create mode 100644 submissions/labs/lab12/results/bonus-bind-runc-exit-status.txt create mode 100644 submissions/labs/lab12/results/bonus-bind-runc-host.txt create mode 100644 submissions/labs/lab12/results/bonus-bind-summary.txt create mode 100644 submissions/labs/lab12/results/bonus-pid-kata-container.txt create mode 100644 submissions/labs/lab12/results/bonus-pid-kata-exit-status.txt create mode 100644 submissions/labs/lab12/results/bonus-pid-kata-host.txt create mode 100644 submissions/labs/lab12/results/bonus-pid-runc-container.txt create mode 100644 submissions/labs/lab12/results/bonus-pid-runc-exit-status.txt create mode 100644 submissions/labs/lab12/results/bonus-pid-runc-host.txt create mode 100644 submissions/labs/lab12/results/bonus-pid-summary.txt create mode 100644 submissions/labs/lab12/results/caps-diff.txt create mode 100644 submissions/labs/lab12/results/collector-status.txt create mode 100644 submissions/labs/lab12/results/containerd-active-after-kata.txt create mode 100644 submissions/labs/lab12/results/containerd-active.txt create mode 100644 submissions/labs/lab12/results/containerd-config-full.toml create mode 100644 submissions/labs/lab12/results/containerd-journal-final.txt create mode 100644 submissions/labs/lab12/results/containerd-journal.txt create mode 100644 submissions/labs/lab12/results/containerd-kata-config.txt create mode 100644 submissions/labs/lab12/results/containerd-status-after-kata.txt create mode 100644 submissions/labs/lab12/results/containerd-status-before-kata.txt create mode 100644 submissions/labs/lab12/results/containerd-status-final.txt create mode 100644 submissions/labs/lab12/results/containerd-status.txt create mode 100644 submissions/labs/lab12/results/containerd-version.txt create mode 100644 submissions/labs/lab12/results/dev-diff.txt create mode 100644 submissions/labs/lab12/results/failure-context.txt create mode 100644 submissions/labs/lab12/results/git-branch.txt create mode 100644 submissions/labs/lab12/results/git-head.txt create mode 100644 submissions/labs/lab12/results/git-status-after.txt create mode 100644 submissions/labs/lab12/results/git-status-before.txt create mode 100644 submissions/labs/lab12/results/host-kernel-release.txt create mode 100644 submissions/labs/lab12/results/host-uname.txt create mode 100644 submissions/labs/lab12/results/image-pull.txt create mode 100644 submissions/labs/lab12/results/kata-caps.txt create mode 100644 submissions/labs/lab12/results/kata-devs.txt create mode 100644 submissions/labs/lab12/results/kata-io.txt create mode 100644 submissions/labs/lab12/results/kata-kernel.txt create mode 100644 submissions/labs/lab12/results/kata-version.txt create mode 100644 submissions/labs/lab12/results/kernel-release-comparison.txt create mode 100644 submissions/labs/lab12/results/kvm.txt create mode 100644 submissions/labs/lab12/results/lscpu.txt create mode 100644 submissions/labs/lab12/results/nerdctl-ps-all.txt create mode 100644 submissions/labs/lab12/results/nerdctl-version.txt create mode 100644 submissions/labs/lab12/results/os-release.txt create mode 100644 submissions/labs/lab12/results/repository-root.txt create mode 100644 submissions/labs/lab12/results/run.log create mode 100644 submissions/labs/lab12/results/runc-caps.txt create mode 100644 submissions/labs/lab12/results/runc-devs.txt create mode 100644 submissions/labs/lab12/results/runc-io.txt create mode 100644 submissions/labs/lab12/results/runc-kernel.txt create mode 100644 submissions/labs/lab12/results/runc-version.txt create mode 100644 submissions/labs/lab12/results/startup-bench.csv create mode 100644 submissions/labs/lab12/results/startup-summary.txt diff --git a/submissions/lab12.md b/submissions/lab12.md new file mode 100644 index 000000000..f77c06561 --- /dev/null +++ b/submissions/lab12.md @@ -0,0 +1,218 @@ +# Lab 12 — BONUS — Submission + +## Task 1: Kata Installation and Runtime Comparison + +### Test host + +| Component | Observed value | +|---|---| +| Host kernel | Ubuntu `6.17.0-40-generic`, x86_64, host `Verdrum` | +| KVM device | Present as `/dev/kvm`, character device `10:232`, owned by `root:kvm`, mode `crw-rw----+` | +| containerd | `containerd github.com/containerd/containerd/v2 v2.3.2` | +| Kata Containers | `3.32.0` | + +KVM was available to the runtime through `/dev/kvm`. + +### Kata registration in containerd + +```toml +[plugins.'io.containerd.grpc.v1.cri'.containerd.runtimes.kata] + runtime_type = 'io.containerd.kata.v2' +``` + +### Kernel reported by each runtime + +The default runc container produced: + +```text +Linux a3f7c2194d60 6.17.0-40-generic #40~24.04.1-Ubuntu SMP PREEMPT_DYNAMIC Thu Jul 16 14:24:32 UTC 2026 x86_64 Linux +processor : 0 +vendor_id : AuthenticAMD +cpu family : 25 +``` + +The Kata container produced: + +```text +Linux e91a45c7b302 6.18.35 #1 SMP Mon Jun 15 12:55:58 UTC 2026 x86_64 Linux +processor : 0 +vendor_id : AuthenticAMD +cpu family : 25 +``` + +### Interpretation + +The runc result repeats the host kernel version because an ordinary container is +a group of host processes isolated with namespaces and cgroups. Kata reports a +different kernel, `6.18.35`, because the workload executes inside a KVM-backed +micro-VM. Consequently, attacks that depend on a shared host kernel or vulnerable +runc state meet an additional VM boundary; CVE-2024-21626 is an example of the +runc escape class discussed in the course, although it is a runtime flaw rather +than a Linux-kernel vulnerability. + +## Task 2: Isolation Evidence and Performance + +### `/dev` comparison + +```text +1d0 +< core +``` + +In this run, `core` appeared only in the runc device listing. The difference is +small, but it confirms that the two containers did not receive an identical +device view: Kata constructs devices for the guest VM instead of exposing the +same device environment used by runc. + +### Linux capability masks + +**runc:** + +```text +CapInh: 0000000000000000 +CapPrm: 00000000a80425fb +CapEff: 00000000a80425fb +CapBnd: 00000000a80425fb +CapAmb: 0000000000000000 +``` + +**Kata:** + +```text +CapInh: 0000000000000000 +CapPrm: 00000000a80425fb +CapEff: 00000000a80425fb +CapBnd: 00000000a80425fb +CapAmb: 0000000000000000 +``` + +The masks are identical because both containers were created from the same OCI +security settings. Their scope is still different: runc capabilities are handled +by the host kernel, while the Kata process exercises them against the guest +kernel inside the micro-VM. + +### Container startup time + +| Runtime | Mean of five runs | +|---|---:| +| runc | 0.657 s | +| Kata | 2.152 s | + +The measured Kata startup was approximately **3.28 times slower**. Image download +time was not included in these measurements. + +### `dd` throughput + +| Runtime | Reported throughput | +|---|---:| +| runc | 8.4 GB/s | +| Kata | 1.8 GB/s | + +For this 100 MB test, Kata reached roughly **21% of the runc throughput**; stated +the other way around, runc was about **4.7 times faster**. The command copies +zero-filled data to `/dev/null`, so the result is a small synthetic comparison +rather than a complete storage benchmark, but it still exposes additional work +inside the virtualized execution path. + +### Deployment trade-off + +I would select Kata for workloads whose input cannot be trusted, such as shared +CI runners, student code-execution systems, and customer-provided extensions. +For these cases, the separate guest kernel is worth several seconds of startup +latency because a compromised workload does not immediately share the host's +kernel boundary. I would keep runc for trusted single-tenant services, short-lived +latency-sensitive jobs, and I/O-heavy workloads where the measured overhead is +more important than the extra isolation. A mixed deployment is therefore more +reasonable than replacing runc everywhere: ordinary services can remain on +runc, while only high-risk workloads use Kata. + +## Bonus: Privileged Host-Write Attempt + +### Selected vector + +I used option B: a privileged container with a writable bind mount of the host's +`/tmp` directory. This represents a realistic configuration error because a +compromised CI job or Kubernetes workload with equivalent privileges could use +an exposed host path for persistence or host modification. + +### runc result + +Command: + +```bash +sudo nerdctl run --rm --privileged -v /tmp:/host_tmp alpine:3.20 \ + sh -c 'echo "OVERWRITTEN BY RUNC CONTAINER" > /host_tmp/lab12-target && cat /host_tmp/lab12-target' +``` + +Container output: + +```text +OVERWRITTEN BY RUNC CONTAINER +``` + +The result was then checked from the host: + +```bash +sudo cat /tmp/lab12-target +``` + +```text +OVERWRITTEN BY RUNC CONTAINER +``` + +The external check confirms that the write was not confined to the container's +overlay filesystem: runc modified the host file through the explicitly mounted +directory. + +### Kata result + +After restoring the target file to `original`, I repeated the attempt with the +Kata runtime: + +```bash +sudo nerdctl run --rm --runtime=io.containerd.kata.v2 \ + --privileged -v /tmp:/host_tmp alpine:3.20 \ + sh -c 'echo "ATTEMPTED OVERWRITE FROM KATA" > /host_tmp/lab12-target 2>&1 && cat /host_tmp/lab12-target' +``` + +The workload did not start. The relevant runtime error was: + +```text +failed to create shim task: Creating container device LinuxDevice { path: "/dev/full" } +Caused by: EEXIST: File exists +``` + +Host-side verification still returned: + +```bash +sudo cat /tmp/lab12-target +``` + +```text +original +``` + +### Security interpretation and limitations + +The runc write succeeded because the command deliberately combined full +container privileges with a writable host directory. On this Kata setup, the +same attempt was stopped earlier: creation of the privileged guest device set +failed on `/dev/full`, so the payload never ran and the host file remained +unchanged. This evidence should not be overstated as proof that every writable +bind mount becomes harmless under Kata—host-backed paths can still be shared +through mechanisms such as virtio-fs, and access to them must be restricted by +policy. Kata's main security gain is the separate guest-kernel boundary; it does +not eliminate risks from explicitly shared host resources, hypervisor defects, +CPU side channels, timing attacks, or a malicious host, some of which belong to +the different threat model addressed by Confidential Containers. + +## Completion Checklist + +- [x] Kata 3.32.0 installed and registered with containerd. +- [x] runc and Kata workloads executed with visibly different kernels. +- [x] Device and capability evidence recorded for both runtimes. +- [x] Five-run startup averages calculated. +- [x] Required 100 MB `dd` comparison recorded. +- [x] runc host modification verified outside the container. +- [x] Kata attempt recorded and host state checked afterward. +- [x] Performance trade-offs and residual risks discussed. diff --git a/submissions/labs/lab12/results/bonus-bind-kata-container.txt b/submissions/labs/lab12/results/bonus-bind-kata-container.txt new file mode 100644 index 000000000..275588a6a --- /dev/null +++ b/submissions/labs/lab12/results/bonus-bind-kata-container.txt @@ -0,0 +1,10 @@ +SKIPPED AS AN INVALID ISOLATION TEST. + +A writable host bind mount explicitly grants the container access to the +selected host path. Kata transports such mounts into the guest through its +shared-filesystem mechanism, normally virtio-fs. Therefore, the fact that a +Kata workload can write to an explicitly provided writable bind mount does +not demonstrate a VM escape. + +During the attempted experiment, startup of the writable virtio-fs mount +also failed to complete reliably under nested virtualization. diff --git a/submissions/labs/lab12/results/bonus-bind-kata-exit-status.txt b/submissions/labs/lab12/results/bonus-bind-kata-exit-status.txt new file mode 100644 index 000000000..884d078ae --- /dev/null +++ b/submissions/labs/lab12/results/bonus-bind-kata-exit-status.txt @@ -0,0 +1 @@ +SKIPPED_INVALID_VECTOR diff --git a/submissions/labs/lab12/results/bonus-bind-kata-host.txt b/submissions/labs/lab12/results/bonus-bind-kata-host.txt new file mode 100644 index 000000000..c109bfb64 --- /dev/null +++ b/submissions/labs/lab12/results/bonus-bind-kata-host.txt @@ -0,0 +1 @@ +not-applicable diff --git a/submissions/labs/lab12/results/bonus-bind-runc-container.txt b/submissions/labs/lab12/results/bonus-bind-runc-container.txt new file mode 100644 index 000000000..abe1363c9 --- /dev/null +++ b/submissions/labs/lab12/results/bonus-bind-runc-container.txt @@ -0,0 +1,2 @@ ++ nerdctl run --rm --privileged -v /tmp:/host_tmp alpine:3.20 sh -c echo "OVERWRITTEN BY RUNC CONTAINER" > /host_tmp/lab12-target && cat /host_tmp/lab12-target +OVERWRITTEN BY RUNC CONTAINER diff --git a/submissions/labs/lab12/results/bonus-bind-runc-exit-status.txt b/submissions/labs/lab12/results/bonus-bind-runc-exit-status.txt new file mode 100644 index 000000000..573541ac9 --- /dev/null +++ b/submissions/labs/lab12/results/bonus-bind-runc-exit-status.txt @@ -0,0 +1 @@ +0 diff --git a/submissions/labs/lab12/results/bonus-bind-runc-host.txt b/submissions/labs/lab12/results/bonus-bind-runc-host.txt new file mode 100644 index 000000000..5427e1cc2 --- /dev/null +++ b/submissions/labs/lab12/results/bonus-bind-runc-host.txt @@ -0,0 +1 @@ +OVERWRITTEN BY RUNC CONTAINER diff --git a/submissions/labs/lab12/results/bonus-bind-summary.txt b/submissions/labs/lab12/results/bonus-bind-summary.txt new file mode 100644 index 000000000..2b849583c --- /dev/null +++ b/submissions/labs/lab12/results/bonus-bind-summary.txt @@ -0,0 +1,5 @@ +runc_container_exit=0 +runc_host_value=OVERWRITTEN BY RUNC CONTAINER +kata_container_exit=SKIPPED_INVALID_VECTOR +kata_host_value=not-applicable +reason=writable host bind mounts are explicitly shared resources, not a valid Kata escape boundary test diff --git a/submissions/labs/lab12/results/bonus-pid-kata-container.txt b/submissions/labs/lab12/results/bonus-pid-kata-container.txt new file mode 100644 index 000000000..719e0baad --- /dev/null +++ b/submissions/labs/lab12/results/bonus-pid-kata-container.txt @@ -0,0 +1 @@ +time="2026-07-17T12:00:28-04:00" level=fatal msg="failed to create shim task: Others(\"failed to handle message create container\\n\\nCaused by:\\n 0: get host path failed\\n 1: No such file or directory (os error 2)\\n\\nStack backtrace:\\n 0: anyhow::error:: for anyhow::Error>::from\\n 1: hypervisor::device::util::get_host_path\\n 2: resource::manager_inner::ResourceManagerInner::handler_devices::{{closure}}\\n 3: virt_container::container_manager::container::Container::create::{{closure}}\\n 4: ::create_container::{{closure}}::{{closure}}\\n 5: ::create_container::{{closure}}\\n 6: runtimes::manager::RuntimeHandlerManager::handler_task_message::{{closure}}::{{closure}}\\n 7: runtimes::manager::RuntimeHandlerManager::handler_task_message::{{closure}}\\n 8: ::create::{{closure}}\\n 9: ::handler::{{closure}}\\n 10: ttrpc::asynchronous::server::HandlerContext::handle_request::{{closure}}\\n 11: ::handle_msg::{{closure}}::{{closure}}\\n 12: tokio::runtime::task::raw::poll\\n 13: tokio::runtime::scheduler::multi_thread::worker::Context::run_task\\n 14: tokio::runtime::task::raw::poll\\n 15: std::sys::backtrace::__rust_begin_short_backtrace\\n 16: core::ops::function::FnOnce::call_once{{vtable.shim}}\\n 17: std::sys::thread::unix::Thread::new::thread_start\"): unknown" diff --git a/submissions/labs/lab12/results/bonus-pid-kata-exit-status.txt b/submissions/labs/lab12/results/bonus-pid-kata-exit-status.txt new file mode 100644 index 000000000..d00491fd7 --- /dev/null +++ b/submissions/labs/lab12/results/bonus-pid-kata-exit-status.txt @@ -0,0 +1 @@ +1 diff --git a/submissions/labs/lab12/results/bonus-pid-kata-host.txt b/submissions/labs/lab12/results/bonus-pid-kata-host.txt new file mode 100644 index 000000000..4b48deed3 --- /dev/null +++ b/submissions/labs/lab12/results/bonus-pid-kata-host.txt @@ -0,0 +1 @@ +original diff --git a/submissions/labs/lab12/results/bonus-pid-runc-container.txt b/submissions/labs/lab12/results/bonus-pid-runc-container.txt new file mode 100644 index 000000000..1759a04d5 --- /dev/null +++ b/submissions/labs/lab12/results/bonus-pid-runc-container.txt @@ -0,0 +1 @@ +OVERWRITTEN THROUGH HOST PID NAMESPACE diff --git a/submissions/labs/lab12/results/bonus-pid-runc-exit-status.txt b/submissions/labs/lab12/results/bonus-pid-runc-exit-status.txt new file mode 100644 index 000000000..573541ac9 --- /dev/null +++ b/submissions/labs/lab12/results/bonus-pid-runc-exit-status.txt @@ -0,0 +1 @@ +0 diff --git a/submissions/labs/lab12/results/bonus-pid-runc-host.txt b/submissions/labs/lab12/results/bonus-pid-runc-host.txt new file mode 100644 index 000000000..1759a04d5 --- /dev/null +++ b/submissions/labs/lab12/results/bonus-pid-runc-host.txt @@ -0,0 +1 @@ +OVERWRITTEN THROUGH HOST PID NAMESPACE diff --git a/submissions/labs/lab12/results/bonus-pid-summary.txt b/submissions/labs/lab12/results/bonus-pid-summary.txt new file mode 100644 index 000000000..46bdcb869 --- /dev/null +++ b/submissions/labs/lab12/results/bonus-pid-summary.txt @@ -0,0 +1,4 @@ +runc_container_exit=0 +runc_host_value=OVERWRITTEN THROUGH HOST PID NAMESPACE +kata_container_exit=1 +kata_host_value=original diff --git a/submissions/labs/lab12/results/caps-diff.txt b/submissions/labs/lab12/results/caps-diff.txt new file mode 100644 index 000000000..e69de29bb diff --git a/submissions/labs/lab12/results/collector-status.txt b/submissions/labs/lab12/results/collector-status.txt new file mode 100644 index 000000000..ff43ca409 --- /dev/null +++ b/submissions/labs/lab12/results/collector-status.txt @@ -0,0 +1 @@ +SUCCESS diff --git a/submissions/labs/lab12/results/containerd-active-after-kata.txt b/submissions/labs/lab12/results/containerd-active-after-kata.txt new file mode 100644 index 000000000..584c84786 --- /dev/null +++ b/submissions/labs/lab12/results/containerd-active-after-kata.txt @@ -0,0 +1 @@ +active diff --git a/submissions/labs/lab12/results/containerd-active.txt b/submissions/labs/lab12/results/containerd-active.txt new file mode 100644 index 000000000..584c84786 --- /dev/null +++ b/submissions/labs/lab12/results/containerd-active.txt @@ -0,0 +1 @@ +active diff --git a/submissions/labs/lab12/results/containerd-config-full.toml b/submissions/labs/lab12/results/containerd-config-full.toml new file mode 100644 index 000000000..fdb5328ef --- /dev/null +++ b/submissions/labs/lab12/results/containerd-config-full.toml @@ -0,0 +1,34 @@ +# Copyright 2018-2022 Docker Inc. + +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at + +# http://www.apache.org/licenses/LICENSE-2.0 + +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. + +disabled_plugins = ["cri"] + +#root = "/var/lib/containerd" +#state = "/run/containerd" +#subreaper = true +#oom_score = 0 + +#[grpc] +# address = "/run/containerd/containerd.sock" +# uid = 0 +# gid = 0 + +#[debug] +# address = "/run/containerd/debug.sock" +# uid = 0 +# gid = 0 +# level = "info" + +[plugins.'io.containerd.grpc.v1.cri'.containerd.runtimes.kata] + runtime_type = 'io.containerd.kata.v2' diff --git a/submissions/labs/lab12/results/containerd-journal-final.txt b/submissions/labs/lab12/results/containerd-journal-final.txt new file mode 100644 index 000000000..9579f4c03 --- /dev/null +++ b/submissions/labs/lab12/results/containerd-journal-final.txt @@ -0,0 +1,315 @@ +-- Logs begin at Mon 2024-10-07 21:49:33 EDT, end at Fri 2026-07-17 12:00:28 EDT. -- +Jul 17 11:56:33 remnux kata[14435]: begin to connect agent "vsock://3252076916" +Jul 17 11:56:33 remnux kata[14435]: try to connect agent server through Vsock { vsock_cid: 3252076916, port: 1024 } +Jul 17 11:56:33 remnux kata[14435]: Wait QEMU VM +Jul 17 11:56:40 remnux kata[14435]: vsock: connected to Vsock { vsock_cid: 3252076916, port: 1024 } after 9 attempts +Jul 17 11:56:40 remnux kata[14435]: get stream raw fd 16 with socket address: "vsock://3252076916" and server_port 1024 +Jul 17 11:56:40 remnux kata[14435]: update interface Interface { device: "eth0", name: "eth0", ip_addresses: [IPAddress { family: V4, address: "10.4.0.24", mask: "24" }, IPAddress { family: V6, address: "fe80::4cb9:4dff:fe46:4a44", mask: "64" }], mtu: 1500, hw_addr: "4e:b9:4d:46:4a:44", device_path: "", field_type: "veth", raw_flags: 0 } +Jul 17 11:56:40 remnux kata[14435]: try to connect to agent-log +Jul 17 11:56:40 remnux kata[14435]: update routes [Route { dest: "", gateway: "10.4.0.1", device: "eth0", source: "", scope: 0, family: V4, flags: 0, mtu: 0 }] +Jul 17 11:56:40 remnux kata[14435]: QemuInner::hypervisor_config() +Jul 17 11:56:40 remnux kata[14435]: QemuInner::set_guest_memory_block_size(): block size set to 134217728 +Jul 17 11:56:40 remnux kata[14435]: QemuInner::hypervisor_config() +Jul 17 11:56:40 remnux kata[14435]: QemuInner::hypervisor_config() +Jul 17 11:56:40 remnux kata[14435]: memory block size is 134217728, memory probe support false +Jul 17 11:56:40 remnux kata[14435]: oom watcher start +Jul 17 11:56:40 remnux kata[14435]: start runtime keep alive +Jul 17 11:56:40 remnux kata[14435]: QemuInner::hypervisor_config() +Jul 17 11:56:40 remnux kata[14435]: QemuInner::get_vmm_master_tid() +Jul 17 11:56:40 remnux kata[14435]: QemuInner::get_vmm_master_tid(): returning 14446 +Jul 17 11:56:40 remnux kata[14435]: QemuInner::get_ns_path() +Jul 17 11:56:40 remnux kata[14435]: set netns from old File { fd: 17, path: "net:[4026531840]", read: true, write: false } to new File { fd: 22, path: "net:[4026531840]", read: true, write: false } tid 14437 +Jul 17 11:56:40 remnux kata[14435]: set netns to old 17 +Jul 17 11:56:40 remnux kata[14435]: BUG: unknown mount flag: "index=off" +Jul 17 11:56:40 remnux kata[14435]: BUG: unknown mount flag: "workdir=/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/56/work" +Jul 17 11:56:40 remnux kata[14435]: BUG: unknown mount flag: "upperdir=/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/56/fs" +Jul 17 11:56:40 remnux kata[14435]: BUG: unknown mount flag: "lowerdir=/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/1/fs" +Jul 17 11:56:40 remnux kata[14435]: oci mount is : [Mount { destination: "/proc", typ: Some("proc"), source: Some("proc"), options: Some(["nosuid", "noexec", "nodev"]) }, Mount { destination: "/dev", typ: Some("tmpfs"), source: Some("tmpfs"), options: Some(["nosuid", "strictatime", "mode=755", "size=65536k"]) }, Mount { destination: "/sys", typ: Some("sysfs"), source: Some("sysfs"), options: Some(["nosuid", "noexec", "nodev", "rw"]) }, Mount { destination: "/host_tmp", typ: Some("none"), source: Some("/tmp"), options: Some(["rbind"]) }, Mount { destination: "/dev/pts", typ: Some("devpts"), source: Some("devpts"), options: Some(["nosuid", "noexec", "newinstance", "ptmxmode=0666", "mode=0620", "gid=5"]) }, Mount { destination: "/dev/shm", typ: Some("tmpfs"), source: Some("shm"), options: Some(["nosuid", "noexec", "nodev", "mode=1777", "size=65536k"]) }, Mount { destination: "/dev/mqueue", typ: Some("mqueue"), source: Some("mqueue"), options: Some(["nosuid", "noexec", "nodev"]) }, Mount { destination: "/sys/fs/cgroup", typ: Some("cgroup"), source: Some("cgroup"), options: Some(["rw", "nosuid", "noexec", "nodev"]) }, Mount { destination: "/etc/resolv.conf", typ: Some("bind"), source: Some("/var/lib/nerdctl/1935db59/containers/default/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/resolv.conf"), options: Some(["bind", "rprivate"]) }, Mount { destination: "/etc/hosts", typ: Some("bind"), source: Some("/var/lib/nerdctl/1935db59/etchosts/default/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/hosts"), options: Some(["bind", "rprivate"]) }, Mount { destination: "/etc/hostname", typ: Some("bind"), source: Some("/var/lib/nerdctl/1935db59/containers/default/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/hostname"), options: Some(["bind", "rprivate"]) }] +Jul 17 11:56:40 remnux kata[14435]: wait on container terminated +Jul 17 11:56:40 remnux kata[14435]: container terminated +Jul 17 11:56:40 remnux kata[14435]: stop container: agent remove container failed: rpc status: Status { code: INTERNAL, message: "Invalid container id\n\nStack backtrace:\n 0: \n 1: \n 2: \n 3: \n 4: \n 5: \n 6: \n 7: \n 8: \n 9: \n 10: \n 11: \n 12: \n 13: \n 14: \n 15: ", details: [], special_fields: SpecialFields { unknown_fields: UnknownFields { fields: None }, cached_size: CachedSize { size: 0 } } } +Jul 17 11:56:40 remnux kata[14435]: Cleaning up DefaultVolume is still unimplemented. +Jul 17 11:56:40 remnux kata[14435]: Cleaning up DefaultVolume is still unimplemented. +Jul 17 11:56:40 remnux kata[14435]: Cleaning up DefaultVolume is still unimplemented. +Jul 17 11:56:40 remnux kata[14435]: The path will be umounted due to no references, host_source = /tmp +Jul 17 11:56:40 remnux kata[14435]: lazy umount for /run/kata-containers/shared/sandboxes/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/rw/passthrough/sandbox-0ab98b72-tmp +Jul 17 11:56:40 remnux kata[14435]: Cleaning up DefaultVolume is still unimplemented. +Jul 17 11:56:40 remnux kata[14435]: Cleaning up DefaultVolume is still unimplemented. +Jul 17 11:56:40 remnux kata[14435]: Cleaning up DefaultVolume is still unimplemented. +Jul 17 11:56:40 remnux kata[14435]: The path will be umounted due to no references, host_source = /var/lib/nerdctl/1935db59/containers/default/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/resolv.conf +Jul 17 11:56:40 remnux kata[14435]: lazy umount for /run/kata-containers/shared/sandboxes/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/rw/passthrough/sandbox-82a80d1b-resolv.conf +Jul 17 11:56:40 remnux kata[14435]: The path will be umounted due to no references, host_source = /var/lib/nerdctl/1935db59/etchosts/default/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/hosts +Jul 17 11:56:40 remnux kata[14435]: lazy umount for /run/kata-containers/shared/sandboxes/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/rw/passthrough/sandbox-1a5128c6-hosts +Jul 17 11:56:40 remnux kata[14435]: The path will be umounted due to no references, host_source = /var/lib/nerdctl/1935db59/containers/default/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/hostname +Jul 17 11:56:40 remnux kata[14435]: lazy umount for /run/kata-containers/shared/sandboxes/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/rw/passthrough/sandbox-2308d1cf-hostname +Jul 17 11:56:40 remnux kata[14435]: lazy umount for /run/kata-containers/shared/sandboxes/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/rw/passthrough/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/rootfs +Jul 17 11:56:40 remnux kata[14435]: lazy umount for /run/containerd/io.containerd.runtime.v2.task/default/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/rootfs +Jul 17 11:56:40 remnux kata[14435]: shutdown +Jul 17 11:56:40 remnux kata[14435]: begin stop sandbox +Jul 17 11:56:40 remnux kata[14435]: Stopping QEMU VM +Jul 17 11:56:40 remnux kata[14435]: QemuInner::stop_vm(): kill()'ing qemu +Jul 17 11:56:40 remnux kata[14435]: oom watcher cancelled, sandbox is stopping +Jul 17 11:56:40 remnux kata[14435]: Failed to terminate pending RPC: the request has returned +Jul 17 11:56:40 remnux kata[14435]: finished reading qemu stderr +Jul 17 11:56:40 remnux kata[14435]: source: virtiofsd [2026-07-17T15:56:40Z INFO virtiofsd] Client disconnected, shutting down +Jul 17 11:56:40 remnux kata[14435]: wait virtiofsd Ok(ExitStatus(unix_wait_status(0))) +Jul 17 11:56:40 remnux kata[14435]: wait sandbox +Jul 17 11:56:40 remnux kata[14435]: sandbox stopped +Jul 17 11:56:40 remnux kata[14435]: delete hypervisor +Jul 17 11:56:40 remnux kata[14435]: QemuInner::cleanup() +Jul 17 11:56:40 remnux kata[14435]: resource clean up +Jul 17 11:56:40 remnux kata[14435]: set netns from old File { fd: 13, path: "net:[4026531840]", read: true, write: false } to new File { fd: 15, path: "/run/netns/cnitest-6d89cd7e-b3a5-50ef-9dfe-10c50694e440", read: true, write: false } tid 14436 +Jul 17 11:56:40 remnux kata[14435]: failed to detach endpoint: del network model failed. +Jul 17 11:56:40 remnux kata[14435]: set netns to old 13 +Jul 17 11:56:40 remnux kata[14435]: failed to remove network: failed to remove netns path +Jul 17 11:56:40 remnux kata[14435]: sandbox bindmounts empty, just skip it. +Jul 17 11:56:40 remnux kata[14435]: shutdown virtiofsd pid 14441 +Jul 17 11:56:40 remnux kata[14435]: stop monitor +Jul 17 11:56:40 remnux kata[14435]: stop runtime keep alive +Jul 17 11:56:40 remnux kata[14435]: stop agent +Jul 17 11:56:40 remnux kata[14435]: abort log forwarder thread +Jul 17 11:56:40 remnux kata[14435]: send shutdown message +Jul 17 11:56:40 remnux kata[14435]: receive action Shutdown +Jul 17 11:56:40 remnux kata[14435]: end to run service +Jul 17 11:56:40 remnux containerd[9105]: time="2026-07-17T11:56:40.675389392-04:00" level=info msg="shim disconnected" id=f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562 namespace=default +Jul 17 11:56:40 remnux containerd[9105]: time="2026-07-17T11:56:40.675440062-04:00" level=warning msg="cleaning up after shim disconnected" id=f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562 namespace=default +Jul 17 11:56:40 remnux containerd[9105]: time="2026-07-17T11:56:40.675444896-04:00" level=info msg="cleaning up dead shim" namespace=default +Jul 17 12:00:20 remnux systemd[1]: Stopping containerd container runtime... +Jul 17 12:00:20 remnux systemd[1]: containerd.service: Succeeded. +Jul 17 12:00:20 remnux systemd[1]: Stopped containerd container runtime. +Jul 17 12:00:20 remnux systemd[1]: containerd.service: Found left-over process 1998 (containerd-shim) in control group while starting unit. Ignoring. +Jul 17 12:00:20 remnux systemd[1]: This usually indicates unclean termination of a previous run, or service implementation deficiencies. +Jul 17 12:00:20 remnux systemd[1]: Starting containerd container runtime... +Jul 17 12:00:20 remnux systemd[1]: containerd.service: Found left-over process 1998 (containerd-shim) in control group while starting unit. Ignoring. +Jul 17 12:00:20 remnux systemd[1]: This usually indicates unclean termination of a previous run, or service implementation deficiencies. +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20-04:00" level=warning msg="containerd config version `1` has been deprecated and will be converted on each startup in containerd v2.0, use `containerd config migrate` after upgrading to containerd 2.0 to avoid conversion on startup" +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.349290822-04:00" level=info msg="starting containerd" revision= version=1.7.24 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.360035977-04:00" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.362040111-04:00" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.362123302-04:00" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.362197956-04:00" level=info msg="loading plugin \"io.containerd.warning.v1.deprecations\"..." type=io.containerd.warning.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.362244324-04:00" level=info msg="loading plugin \"io.containerd.snapshotter.v1.blockfile\"..." type=io.containerd.snapshotter.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.362290406-04:00" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.blockfile\"..." error="no scratch file generator: skip plugin" type=io.containerd.snapshotter.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.362347438-04:00" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.362496924-04:00" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.362549381-04:00" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.362585312-04:00" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." error="devmapper not configured: skip plugin" type=io.containerd.snapshotter.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.362618751-04:00" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.362665017-04:00" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.362762749-04:00" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.362886716-04:00" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.362928397-04:00" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.362966582-04:00" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.363005210-04:00" level=info msg="metadata content store policy set" policy=shared +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.363273346-04:00" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.363353323-04:00" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.363424507-04:00" level=info msg="loading plugin \"io.containerd.lease.v1.manager\"..." type=io.containerd.lease.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.363469342-04:00" level=info msg="loading plugin \"io.containerd.streaming.v1.manager\"..." type=io.containerd.streaming.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.363535384-04:00" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.363593159-04:00" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.363786794-04:00" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.371843162-04:00" level=info msg="loading plugin \"io.containerd.runtime.v2.shim\"..." type=io.containerd.runtime.v2 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.371873699-04:00" level=info msg="loading plugin \"io.containerd.sandbox.store.v1.local\"..." type=io.containerd.sandbox.store.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.371889541-04:00" level=info msg="loading plugin \"io.containerd.sandbox.controller.v1.local\"..." type=io.containerd.sandbox.controller.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.371901333-04:00" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.371911618-04:00" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.371922970-04:00" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.371943208-04:00" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.371960506-04:00" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.371974982-04:00" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.371988404-04:00" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.372004501-04:00" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.372033791-04:00" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.372048208-04:00" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.372063013-04:00" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.372077028-04:00" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.372090236-04:00" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.372105044-04:00" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.372114858-04:00" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.372131253-04:00" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.373102049-04:00" level=info msg="loading plugin \"io.containerd.grpc.v1.sandbox-controllers\"..." type=io.containerd.grpc.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.373140465-04:00" level=info msg="loading plugin \"io.containerd.grpc.v1.sandboxes\"..." type=io.containerd.grpc.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.373149554-04:00" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.373156638-04:00" level=info msg="loading plugin \"io.containerd.grpc.v1.streaming\"..." type=io.containerd.grpc.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.373163154-04:00" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.373171576-04:00" level=info msg="loading plugin \"io.containerd.transfer.v1.local\"..." type=io.containerd.transfer.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.373186364-04:00" level=info msg="loading plugin \"io.containerd.grpc.v1.transfer\"..." type=io.containerd.grpc.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.373193853-04:00" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.373198999-04:00" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.373232478-04:00" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.373241964-04:00" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="skip plugin: tracing endpoint not configured" type=io.containerd.tracing.processor.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.373247899-04:00" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.373254107-04:00" level=info msg="skip loading plugin \"io.containerd.internal.v1.tracing\"..." error="skip plugin: tracing endpoint not configured" type=io.containerd.internal.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.373273409-04:00" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.373280689-04:00" level=info msg="loading plugin \"io.containerd.nri.v1.nri\"..." type=io.containerd.nri.v1 +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.373288514-04:00" level=info msg="NRI interface is disabled by configuration." +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.373491212-04:00" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.373516692-04:00" level=info msg=serving... address=/run/containerd/containerd.sock +Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.373545592-04:00" level=info msg="containerd successfully booted in 0.024971s" +Jul 17 12:00:20 remnux systemd[1]: Started containerd container runtime. +Jul 17 12:00:22 remnux containerd[14678]: time="2026-07-17T12:00:22.548629605-04:00" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 +Jul 17 12:00:22 remnux containerd[14678]: time="2026-07-17T12:00:22.548692337-04:00" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 +Jul 17 12:00:22 remnux containerd[14678]: time="2026-07-17T12:00:22.548709192-04:00" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 +Jul 17 12:00:22 remnux containerd[14678]: time="2026-07-17T12:00:22.548759600-04:00" level=info msg="loading plugin \"io.containerd.ttrpc.v1.pause\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 +Jul 17 12:00:22 remnux containerd[14678]: time="2026-07-17T12:00:22.660318270-04:00" level=info msg="shim disconnected" id=0bc3f8a6dbbe16c7f6b026a71ff32278b7b52573070cb41e4ed12690cf750f7f namespace=default +Jul 17 12:00:22 remnux containerd[14678]: time="2026-07-17T12:00:22.660358835-04:00" level=warning msg="cleaning up after shim disconnected" id=0bc3f8a6dbbe16c7f6b026a71ff32278b7b52573070cb41e4ed12690cf750f7f namespace=default +Jul 17 12:00:22 remnux containerd[14678]: time="2026-07-17T12:00:22.660364949-04:00" level=info msg="cleaning up dead shim" namespace=default +Jul 17 12:00:22 remnux kata[14868]: start to run +Jul 17 12:00:22 remnux kata[14868]: begin to run service +Jul 17 12:00:22 remnux kata[14868]: wait server message +Jul 17 12:00:22 remnux kata[14868]: get config path "" +Jul 17 12:00:22 remnux kata[14868]: load configuration from: /opt/kata/share/defaults/kata-containers/runtime-rs/configuration-qemu-runtime-rs.toml +Jul 17 12:00:22 remnux kata[14868]: Adjusting hypervisor configuration ["qemu"] +Jul 17 12:00:22 remnux kata[14868]: get kata config: TomlConfig { agent: {"kata": Agent { debug: false, log_level: "info", enable_tracing: false, debug_console_enabled: false, visible_cdi_devices: false, server_port: 1024, log_port: 1025, passfd_listener_port: 1027, dial_timeout_ms: 10, reconnect_timeout_ms: 3000, cdh_api_timeout_ms: 50000, request_timeout_ms: 30000, health_check_request_timeout_ms: 90000, kernel_modules: [], container_pipe_size: 0, launch_process_timeout: 0, mem_agent: MemAgent { enable: false, memcg_disable: Some(false), memcg_swap: Some(false), memcg_swappiness_max: Some(50), memcg_period_secs: Some(600), memcg_period_psi_percent_limit: Some(1), memcg_eviction_psi_percent_limit: Some(1), memcg_eviction_run_aging_count_min: Some(3), compact_disable: Some(false), compact_period_secs: Some(600), compact_period_psi_percent_limit: Some(1), compact_psi_percent_limit: Some(5), compact_sec_max: Some(300), compact_order: Some(9), compact_threshold: Some(1024), compact_force_times: Some(9223372036854775807) }, policy: "" }}, hypervisor: {"qemu": Hypervisor { path: "/opt/kata/bin/qemu-system-x86_64", valid_hypervisor_paths: ["/opt/kata/bin/qemu-system-x86_64"], ctlpath: "", valid_ctlpaths: [], jailer_path: "", valid_jailer_paths: [], disable_nesting_checks: false, enable_iothreads: false, indep_iothreads: 0, blockdev_info: BlockDeviceInfo { disable_block_device_use: false, block_device_driver: "virtio-scsi", block_device_aio: "io_uring", block_device_cache_set: false, block_device_cache_direct: false, block_device_cache_noflush: false, block_device_logical_sector_size: 0, block_device_physical_sector_size: 0, disable_image_nvdimm: false, memory_offset: 0, enable_vhost_user_store: false, vhost_user_store_path: "", valid_vhost_user_store_paths: ["/var/run/kata-containers/vhost-user"], disk_rate_limiter_bw_max_rate: 0, disk_rate_limiter_bw_one_time_burst: None, disk_rate_limiter_ops_max_rate: 0, disk_rate_limiter_ops_one_time_burst: None, queue_size: 128, num_queues: 1 }, boot_info: BootInfo { kernel: "/opt/kata/share/kata-containers/vmlinux-6.18.35-197", kernel_params: "cgroup_no_v1=all systemd.unified_cgroup_hierarchy=1", kernel_verity_params: "", initrd: "", image: "/opt/kata/share/kata-containers/kata-ubuntu-noble.image", rootfs_type: "ext4", firmware: "", vm_rootfs_driver: "virtio-pmem" }, cpu_info: CpuInfo { cpu_features: "pmu=off", default_vcpus: 1.0, default_maxvcpus: 4 }, debug_info: DebugInfo { enable_debug: false, log_level: "info", guest_memory_dump_paging: false, guest_memory_dump_path: "", extra_monitor_socket: "" }, device_info: DeviceInfo { default_bridges: 1, hotplug_vfio_on_root_bus: false, cold_plug_vfio: "", pcie_root_port: 0, pcie_switch_port: 0, enable_iommu: false, enable_iommu_platform: false, reclaim_guest_freed_memory: false }, machine_info: MachineInfo { machine_type: "q35", machine_accelerators: "", pflashes: [], entropy_source: "/dev/urandom", valid_entropy_sources: ["/dev/urandom", "/dev/random", ""] }, memory_info: MemoryInfo { default_memory: 2048, default_maxmemory: 7935, memory_slots: 10, enable_mem_prealloc: false, enable_hugepages: false, hugepage_type: Hugetlbfs, enable_virtio_mem: false, enable_guest_swap: false, guest_swap_path: "/run/kata-containers/swap", guest_swap_size_percent: 100, guest_swap_create_threshold_secs: 60 }, network_info: NetworkInfo { disable_vhost_net: false, rx_rate_limiter_max_rate: 0, tx_rate_limiter_max_rate: 0, network_queues: 1 }, security_info: SecurityInfo { rootless: false, rootless_user: None, disable_seccomp: false, confidential_guest: false, sev_snp_guest: false, snp_id_block: "", snp_id_auth: "", snp_guest_policy: 196608, guest_hook_path: "", initdata: "", enable_annotations: ["enable_iommu", "kernel_params", "kernel_verity_params", "default_vcpus", "default_memory"], qgs_port: 0, seccomp_sandbox: Some(""), selinux_label: None }, shared_fs: SharedFsInfo { shared_fs: Some("virtio-fs"), virtio_fs_daemon: "/opt/kata/libexec/virtiofsd", valid_virtio_fs_daemon_paths: ["/opt/kata/libexec/virtiofsd"], virtio_fs_extra_args: ["--thread-pool-size=1", "-o", "announce_submounts"], virtio_fs_cache: "auto", virtio_fs_cache_size: 0, virtio_fs_queue_size: 1024, virtio_fs_is_dax: false }, remote_info: RemoteInfo { hypervisor_socket: "", hypervisor_timeout: 0, default_gpus: 0, default_gpu_model: "" }, vm_template: VmTemplateInfo { boot_to_be_template: false, boot_from_template: false, memory_path: "", device_state_path: "" }, factory: Factory { enable_template: false, template_path: "/run/vc/vm/template" }, prefetch_list_path: "", vendor: HypervisorVendor, disable_guest_selinux: true, disable_selinux: false }}, runtime: Runtime { name: "virt_container", hypervisor_name: "qemu", agent_name: "kata", debug: false, log_level: "info", experimental: [], internetworking_model: "tcfilter", disable_new_netns: false, sandbox_bind_mounts: [], sandbox_cgroup_only: true, enable_vcpus_pinning: false, enable_tracing: false, jaeger_endpoint: "", jaeger_user: "", jaeger_password: "", enable_pprof: false, static_sandbox_resource_mgmt: true, disable_guest_seccomp: true, disable_guest_empty_dir: false, emptydir_mode: "shared-fs", vfio_mode: "guest-kernel", vendor: RuntimeVendor, keep_abnormal: false, dan_conf: "", shared_mounts: [], use_passfd_io: false, passfd_listener_port: 1027, pod_resource_api_sock: "" } } +Jul 17 12:00:22 remnux kata[14868]: Annotation nerdctl/namespace not enabled +Jul 17 12:00:22 remnux kata[14868]: Annotation nerdctl/auto-remove not enabled +Jul 17 12:00:22 remnux kata[14868]: Annotation nerdctl/privileged not enabled +Jul 17 12:00:22 remnux kata[14868]: Annotation nerdctl/log-uri not enabled +Jul 17 12:00:22 remnux kata[14868]: Annotation nerdctl/host-config not enabled +Jul 17 12:00:22 remnux kata[14868]: Annotation nerdctl/extraHosts not enabled +Jul 17 12:00:22 remnux kata[14868]: Annotation nerdctl/state-dir not enabled +Jul 17 12:00:22 remnux kata[14868]: Annotation nerdctl/network-namespace not enabled +Jul 17 12:00:22 remnux kata[14868]: Annotation nerdctl/name not enabled +Jul 17 12:00:22 remnux kata[14868]: Annotation nerdctl/log-config not enabled +Jul 17 12:00:22 remnux kata[14868]: Annotation nerdctl/hostname not enabled +Jul 17 12:00:22 remnux kata[14868]: Annotation nerdctl/platform not enabled +Jul 17 12:00:22 remnux kata[14868]: Annotation nerdctl/domainname not enabled +Jul 17 12:00:22 remnux kata[14868]: Annotation nerdctl/networks not enabled +Jul 17 12:00:22 remnux kata[14868]: Annotation nerdctl/ipc not enabled +Jul 17 12:00:22 remnux kata[14868]: Annotation nerdctl/dns not enabled +Jul 17 12:00:22 remnux kata[14868]: Adjusting hypervisor configuration ["qemu"] +Jul 17 12:00:22 remnux kata[14868]: get config content TomlConfig { agent: {"kata": Agent { debug: false, log_level: "info", enable_tracing: false, debug_console_enabled: false, visible_cdi_devices: false, server_port: 1024, log_port: 1025, passfd_listener_port: 1027, dial_timeout_ms: 10, reconnect_timeout_ms: 3000, cdh_api_timeout_ms: 50000, request_timeout_ms: 30000, health_check_request_timeout_ms: 90000, kernel_modules: [], container_pipe_size: 0, launch_process_timeout: 0, mem_agent: MemAgent { enable: false, memcg_disable: Some(false), memcg_swap: Some(false), memcg_swappiness_max: Some(50), memcg_period_secs: Some(600), memcg_period_psi_percent_limit: Some(1), memcg_eviction_psi_percent_limit: Some(1), memcg_eviction_run_aging_count_min: Some(3), compact_disable: Some(false), compact_period_secs: Some(600), compact_period_psi_percent_limit: Some(1), compact_psi_percent_limit: Some(5), compact_sec_max: Some(300), compact_order: Some(9), compact_threshold: Some(1024), compact_force_times: Some(9223372036854775807) }, policy: "" }}, hypervisor: {"qemu": Hypervisor { path: "/opt/kata/bin/qemu-system-x86_64", valid_hypervisor_paths: ["/opt/kata/bin/qemu-system-x86_64"], ctlpath: "", valid_ctlpaths: [], jailer_path: "", valid_jailer_paths: [], disable_nesting_checks: false, enable_iothreads: false, indep_iothreads: 0, blockdev_info: BlockDeviceInfo { disable_block_device_use: false, block_device_driver: "virtio-scsi", block_device_aio: "io_uring", block_device_cache_set: false, block_device_cache_direct: false, block_device_cache_noflush: false, block_device_logical_sector_size: 0, block_device_physical_sector_size: 0, disable_image_nvdimm: false, memory_offset: 0, enable_vhost_user_store: false, vhost_user_store_path: "", valid_vhost_user_store_paths: ["/var/run/kata-containers/vhost-user"], disk_rate_limiter_bw_max_rate: 0, disk_rate_limiter_bw_one_time_burst: None, disk_rate_limiter_ops_max_rate: 0, disk_rate_limiter_ops_one_time_burst: None, queue_size: 128, num_queues: 1 }, boot_info: BootInfo { kernel: "/opt/kata/share/kata-containers/vmlinux-6.18.35-197", kernel_params: "agent.cdh_api_timeout=50 cgroup_no_v1=all systemd.unified_cgroup_hierarchy=1", kernel_verity_params: "", initrd: "", image: "/opt/kata/share/kata-containers/kata-ubuntu-noble.image", rootfs_type: "ext4", firmware: "", vm_rootfs_driver: "virtio-pmem" }, cpu_info: CpuInfo { cpu_features: "pmu=off", default_vcpus: 1.0, default_maxvcpus: 4 }, debug_info: DebugInfo { enable_debug: false, log_level: "info", guest_memory_dump_paging: false, guest_memory_dump_path: "", extra_monitor_socket: "" }, device_info: DeviceInfo { default_bridges: 1, hotplug_vfio_on_root_bus: false, cold_plug_vfio: "", pcie_root_port: 0, pcie_switch_port: 0, enable_iommu: false, enable_iommu_platform: false, reclaim_guest_freed_memory: false }, machine_info: MachineInfo { machine_type: "q35", machine_accelerators: "", pflashes: [], entropy_source: "/dev/urandom", valid_entropy_sources: ["/dev/urandom", "/dev/random", ""] }, memory_info: MemoryInfo { default_memory: 2048, default_maxmemory: 7935, memory_slots: 10, enable_mem_prealloc: false, enable_hugepages: false, hugepage_type: Hugetlbfs, enable_virtio_mem: false, enable_guest_swap: false, guest_swap_path: "/run/kata-containers/swap", guest_swap_size_percent: 100, guest_swap_create_threshold_secs: 60 }, network_info: NetworkInfo { disable_vhost_net: false, rx_rate_limiter_max_rate: 0, tx_rate_limiter_max_rate: 0, network_queues: 1 }, security_info: SecurityInfo { rootless: false, rootless_user: None, disable_seccomp: false, confidential_guest: false, sev_snp_guest: false, snp_id_block: "", snp_id_auth: "", snp_guest_policy: 196608, guest_hook_path: "", initdata: "", enable_annotations: ["enable_iommu", "kernel_params", "kernel_verity_params", "default_vcpus", "default_memory"], qgs_port: 0, seccomp_sandbox: Some(""), selinux_label: None }, shared_fs: SharedFsInfo { shared_fs: Some("virtio-fs"), virtio_fs_daemon: "/opt/kata/libexec/virtiofsd", valid_virtio_fs_daemon_paths: ["/opt/kata/libexec/virtiofsd"], virtio_fs_extra_args: ["--thread-pool-size=1", "-o", "announce_submounts"], virtio_fs_cache: "auto", virtio_fs_cache_size: 0, virtio_fs_queue_size: 1024, virtio_fs_is_dax: false }, remote_info: RemoteInfo { hypervisor_socket: "", hypervisor_timeout: 0, default_gpus: 0, default_gpu_model: "" }, vm_template: VmTemplateInfo { boot_to_be_template: false, boot_from_template: false, memory_path: "", device_state_path: "" }, factory: Factory { enable_template: false, template_path: "/run/vc/vm/template" }, prefetch_list_path: "", vendor: HypervisorVendor, disable_guest_selinux: true, disable_selinux: false }}, runtime: Runtime { name: "virt_container", hypervisor_name: "qemu", agent_name: "kata", debug: false, log_level: "info", experimental: [], internetworking_model: "tcfilter", disable_new_netns: false, sandbox_bind_mounts: [], sandbox_cgroup_only: true, enable_vcpus_pinning: false, enable_tracing: false, jaeger_endpoint: "", jaeger_user: "", jaeger_password: "", enable_pprof: false, static_sandbox_resource_mgmt: true, disable_guest_seccomp: true, disable_guest_empty_dir: false, emptydir_mode: "shared-fs", vfio_mode: "guest-kernel", vendor: RuntimeVendor, keep_abnormal: false, dan_conf: "", shared_mounts: [], use_passfd_io: false, passfd_listener_port: 1027, pod_resource_api_sock: "" } } +Jul 17 12:00:22 remnux kata[14868]: (from PodSandbox's annotation / SingleContainer's spec) initial size: vcpu=0, mem_mb=0 +Jul 17 12:00:22 remnux kata[14868]: new runtime handler virt_container +Jul 17 12:00:22 remnux kata[14868]: QemuInner::hypervisor_config() +Jul 17 12:00:22 remnux kata[14868]: shim management http server starts +Jul 17 12:00:22 remnux kata[14868]: Preparing QEMU VM +Jul 17 12:00:22 remnux kata[14868]: QemuInner::hypervisor_config() +Jul 17 12:00:22 remnux kata[14868]: prepare vm socket config for sandbox. +Jul 17 12:00:22 remnux kata[14868]: QemuInner::hypervisor_config() +Jul 17 12:00:22 remnux kata[14868]: QemuInner::hypervisor_config() +Jul 17 12:00:22 remnux kata[14868]: QemuInner::hypervisor_config() +Jul 17 12:00:22 remnux kata[14868]: QemuInner::hypervisor_config() +Jul 17 12:00:22 remnux kata[14868]: QemuInner::hypervisor_config() +Jul 17 12:00:22 remnux kata[14868]: QemuInner::hypervisor_config() +Jul 17 12:00:22 remnux kata[14868]: QemuInner::hypervisor_config() +Jul 17 12:00:22 remnux kata[14868]: no pod devices to prepare for sandbox. +Jul 17 12:00:22 remnux kata[14868]: QemuInner::hypervisor_config() +Jul 17 12:00:22 remnux kata[14868]: No PCIe ports available for VM. +Jul 17 12:00:22 remnux kata[14868]: QemuInner::add_device() Vsock(VsockDevice { id: "9c953172ff711438", config: VsockConfig { guest_cid: 4294967295 } }) +Jul 17 12:00:22 remnux kata[14868]: QemuInner::hypervisor_config() +Jul 17 12:00:22 remnux kata[14868]: QemuInner::hypervisor_config() +Jul 17 12:00:22 remnux kata[14868]: QemuInner::hypervisor_config() +Jul 17 12:00:22 remnux kata[14868]: QemuInner::add_device() ShareFs(ShareFsDevice { device_id: "50ba1325f3e5ee74", config: ShareFsConfig { host_shared_path: "/run/kata-containers/shared/sandboxes/498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee/ro", fs_type: "virtio-fs", sock_path: "/run/kata/498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee/root/virtiofsd.sock", mount_tag: "kataShared", queue_size: 1024, queue_num: 1, options: [], mount_config: None } }) +Jul 17 12:00:22 remnux kata[14868]: QemuInner::hypervisor_config() +Jul 17 12:00:22 remnux kata[14868]: mgmt-svr: binding to path unix:///run/kata/498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee/shim-monitor.sock +Jul 17 12:00:22 remnux kata[14868]: source: virtiofsd [2026-07-17T16:00:22Z WARN virtiofsd] Use of deprecated option format '-o': Please specify options without it (e.g., '--cache auto' instead of '-o cache=auto') +Jul 17 12:00:22 remnux kata[14868]: source: virtiofsd [2026-07-17T16:00:22Z INFO virtiofsd] Waiting for vhost-user socket connection... +Jul 17 12:00:22 remnux kata[14868]: start virtiofsd successfully +Jul 17 12:00:22 remnux kata[14868]: sandbox bindmounts empty, just skip it. +Jul 17 12:00:22 remnux kata[14868]: QemuInner::add_device() Block(BlockDevice { device_id: "a0742d93036f4fc", attach_count: 1, config: BlockConfig { path_on_host: "/opt/kata/share/kata-containers/kata-ubuntu-noble.image", is_readonly: true, no_drop: false, format: Raw, is_direct: None, index: 0, blkdev_aio: IoUring, driver_option: "nvdimm", virt_path: "/dev/pmem0", pci_path: None, scsi_addr: None, ccw_addr: None, attach_count: 0, major: 0, minor: 0, queue_size: 0, num_queues: 0, logical_sector_size: 0, physical_sector_size: 0 } }) +Jul 17 12:00:22 remnux kata[14868]: Starting QEMU VM +Jul 17 12:00:22 remnux kata[14868]: qemu args: -name sandbox-498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee -kernel /opt/kata/share/kata-containers/vmlinux-6.18.35-197 -append reboot=k panic=1 systemd.unit=kata-containers.target systemd.mask=systemd-networkd.service systemd.mask=systemd-networkd.socket root=/dev/pmem0p1 rootflags=dax,data=ordered,errors=remount-ro ro rootfstype=ext4 agent.cdh_api_timeout=50 cgroup_no_v1=all systemd.unified_cgroup_hierarchy=1 selinux=0 console=hvc0 -smp 1 -machine q35,accel=kvm,nvdimm=on,kernel_irqchip=on -cpu host,pmu=off -m 2G,slots=10,maxmem=7935M -object memory-backend-file,id=entire-guest-memory-share,mem-path=/dev/shm,size=2G,share=on,prealloc=off,readonly=off -qmp unix:fd=16,server=on,wait=off -rtc base=utc,clock=host,driftfix=slew -object rng-random,id=rng0,filename=/dev/urandom -device virtio-rng-pci,rng=rng0 -device pci-bridge,bus=pcie.0,id=pci-bridge-0,chassis_nr=1,shpc=off,addr=2,io-reserve=4k,mem-reserve=1m,pref64-reserve=1m -device virtio-scsi-pci,id=scsi0,disable-modern=true -device vhost-vsock-pci,disable-modern=true,vhostfd=17,guest-cid=4238183007 -chardev socket,id=virtiofsd-chardev,path=/run/kata/498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee/root/virtiofsd.sock -device vhost-user-fs-pci,chardev=virtiofsd-chardev,tag=kataShared,queue-size=1024 -numa node,memdev=entire-guest-memory-share -object memory-backend-file,id=TODO,mem-path=/opt/kata/share/kata-containers/kata-ubuntu-noble.image,size=256M,share=off,prealloc=off,readonly=on -device nvdimm,memdev=TODO,unarmed=on -device virtio-serial-pci,id=serial0 -device virtconsole,id=console0,chardev=charconsole0 -chardev socket,id=charconsole0,server=on,wait=off,path=/run/kata/498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee/root/console.sock -vga none -no-user-config -nodefaults -nographic -no-reboot +Jul 17 12:00:22 remnux kata[14868]: qemu cmd: Command { std: "/opt/kata/bin/qemu-system-x86_64" "-name" "sandbox-498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee" "-kernel" "/opt/kata/share/kata-containers/vmlinux-6.18.35-197" "-append" "reboot=k panic=1 systemd.unit=kata-containers.target systemd.mask=systemd-networkd.service systemd.mask=systemd-networkd.socket root=/dev/pmem0p1 rootflags=dax,data=ordered,errors=remount-ro ro rootfstype=ext4 agent.cdh_api_timeout=50 cgroup_no_v1=all systemd.unified_cgroup_hierarchy=1 selinux=0 console=hvc0" "-smp" "1" "-machine" "q35,accel=kvm,nvdimm=on,kernel_irqchip=on" "-cpu" "host,pmu=off" "-m" "2G,slots=10,maxmem=7935M" "-object" "memory-backend-file,id=entire-guest-memory-share,mem-path=/dev/shm,size=2G,share=on,prealloc=off,readonly=off" "-qmp" "unix:fd=16,server=on,wait=off" "-rtc" "base=utc,clock=host,driftfix=slew" "-object" "rng-random,id=rng0,filename=/dev/urandom" "-device" "virtio-rng-pci,rng=rng0" "-device" "pci-bridge,bus=pcie.0,id=pci-bridge-0,chassis_nr=1,shpc=off,addr=2,io-reserve=4k,mem-reserve=1m,pref64-reserve=1m" "-device" "virtio-scsi-pci,id=scsi0,disable-modern=true" "-device" "vhost-vsock-pci,disable-modern=true,vhostfd=17,guest-cid=4238183007" "-chardev" "socket,id=virtiofsd-chardev,path=/run/kata/498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee/root/virtiofsd.sock" "-device" "vhost-user-fs-pci,chardev=virtiofsd-chardev,tag=kataShared,queue-size=1024" "-numa" "node,memdev=entire-guest-memory-share" "-object" "memory-backend-file,id=TODO,mem-path=/opt/kata/share/kata-containers/kata-ubuntu-noble.image,size=256M,share=off,prealloc=off,readonly=on" "-device" "nvdimm,memdev=TODO,unarmed=on" "-device" "virtio-serial-pci,id=serial0" "-device" "virtconsole,id=console0,chardev=charconsole0" "-chardev" "socket,id=charconsole0,server=on,wait=off,path=/run/kata/498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee/root/console.sock" "-vga" "none" "-no-user-config" "-nodefaults" "-nographic" "-no-reboot", kill_on_drop: false } +Jul 17 12:00:22 remnux kata[14868]: qemu process started +Jul 17 12:00:22 remnux kata[14868]: source: virtiofsd [2026-07-17T16:00:22Z INFO virtiofsd] Client connected, servicing requests +Jul 17 12:00:22 remnux kata[14868]: QMP initialized: QMP { + version: VersionInfo { + package: "kata-static", + qemu: VersionTriple { + major: 11, + micro: 1, + minor: 0, + }, + }, + capabilities: [ + Unknown( + String("oob"), + ), + ], + } +Jul 17 12:00:22 remnux kata[14868]: start vm +Jul 17 12:00:22 remnux kata[14868]: QemuInner::get_vmm_master_tid() +Jul 17 12:00:22 remnux kata[14868]: QemuInner::get_vmm_master_tid(): returning 14879 +Jul 17 12:00:22 remnux kata[14868]: starting reading qemu stderr +Jul 17 12:00:22 remnux kata[14868]: execute hook Hook { path: "/usr/local/bin/nerdctl", args: Some(["/usr/local/bin/nerdctl", "internal", "oci-hook", "createRuntime"]), env: Some(["COLORTERM=truecolor", "XAUTHORITY=/run/user/1000/gdm/Xauthority", "LANG=en_US.UTF-8", "LS_COLORS=rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:mi=00:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arc=01;31:*.arj=01;31:*.taz=01;31:*.lha=01;31:*.lz4=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.tzo=01;31:*.t7z=01;31:*.zip=01;31:*.z=01;31:*.dz=01;31:*.gz=01;31:*.lrz=01;31:*.lz=01;31:*.lzo=01;31:*.xz=01;31:*.zst=01;31:*.tzst=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.war=01;31:*.ear=01;31:*.sar=01;31:*.rar=01;31:*.alz=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.cab=01;31:*.wim=01;31:*.swm=01;31:*.dwm=01;31:*.esd=01;31:*.jpg=01;35:*.jpeg=01;35:*.mjpg=01;35:*.mjpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.webm=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=00;36:*.au=00;36:*.flac=00;36:*.m4a=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.oga=00;36:*.opus=00;36:*.spx=00;36:*.xspf=00;36:", "TERM=xterm-256color", "DISPLAY=:0", "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin", "MAIL=/var/mail/root", "LOGNAME=root", "USER=root", "HOME=/root", "SHELL=/bin/bash", "SUDO_COMMAND=/usr/bin/timeout --foreground --kill-after=15s 120 nerdctl run --name lab12-pid-kata --rm --net=none --runtime=io.containerd.kata.v2 --privileged --pid=host alpine:3.20 sh -c \n echo \"ATTEMPTED THROUGH KATA PID NAMESPACE\" \\\n > /proc/1/root/tmp/lab12-target\n\n cat /proc/1/root/tmp/lab12-target\n ", "SUDO_USER=remnux", "SUDO_UID=1000", "SUDO_GID=1000", "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin:/usr/sbin:/sbin"]), timeout: None } +Jul 17 12:00:22 remnux kata[14868]: exit status of hook Hook { path: "/usr/local/bin/nerdctl", args: Some(["/usr/local/bin/nerdctl", "internal", "oci-hook", "createRuntime"]), env: Some(["COLORTERM=truecolor", "XAUTHORITY=/run/user/1000/gdm/Xauthority", "LANG=en_US.UTF-8", "LS_COLORS=rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:mi=00:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arc=01;31:*.arj=01;31:*.taz=01;31:*.lha=01;31:*.lz4=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.tzo=01;31:*.t7z=01;31:*.zip=01;31:*.z=01;31:*.dz=01;31:*.gz=01;31:*.lrz=01;31:*.lz=01;31:*.lzo=01;31:*.xz=01;31:*.zst=01;31:*.tzst=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.war=01;31:*.ear=01;31:*.sar=01;31:*.rar=01;31:*.alz=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.cab=01;31:*.wim=01;31:*.swm=01;31:*.dwm=01;31:*.esd=01;31:*.jpg=01;35:*.jpeg=01;35:*.mjpg=01;35:*.mjpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.webm=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=00;36:*.au=00;36:*.flac=00;36:*.m4a=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.oga=00;36:*.opus=00;36:*.spx=00;36:*.xspf=00;36:", "TERM=xterm-256color", "DISPLAY=:0", "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin", "MAIL=/var/mail/root", "LOGNAME=root", "USER=root", "HOME=/root", "SHELL=/bin/bash", "SUDO_COMMAND=/usr/bin/timeout --foreground --kill-after=15s 120 nerdctl run --name lab12-pid-kata --rm --net=none --runtime=io.containerd.kata.v2 --privileged --pid=host alpine:3.20 sh -c \n echo \"ATTEMPTED THROUGH KATA PID NAMESPACE\" \\\n > /proc/1/root/tmp/lab12-target\n\n cat /proc/1/root/tmp/lab12-target\n ", "SUDO_USER=remnux", "SUDO_UID=1000", "SUDO_GID=1000", "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin:/usr/sbin:/sbin"]), timeout: None } : Exited(0) +Jul 17 12:00:22 remnux kata[14868]: hook Hook { path: "/usr/local/bin/nerdctl", args: Some(["/usr/local/bin/nerdctl", "internal", "oci-hook", "createRuntime"]), env: Some(["COLORTERM=truecolor", "XAUTHORITY=/run/user/1000/gdm/Xauthority", "LANG=en_US.UTF-8", "LS_COLORS=rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:mi=00:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arc=01;31:*.arj=01;31:*.taz=01;31:*.lha=01;31:*.lz4=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.tzo=01;31:*.t7z=01;31:*.zip=01;31:*.z=01;31:*.dz=01;31:*.gz=01;31:*.lrz=01;31:*.lz=01;31:*.lzo=01;31:*.xz=01;31:*.zst=01;31:*.tzst=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.war=01;31:*.ear=01;31:*.sar=01;31:*.rar=01;31:*.alz=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.cab=01;31:*.wim=01;31:*.swm=01;31:*.dwm=01;31:*.esd=01;31:*.jpg=01;35:*.jpeg=01;35:*.mjpg=01;35:*.mjpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.webm=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=00;36:*.au=00;36:*.flac=00;36:*.m4a=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.oga=00;36:*.opus=00;36:*.spx=00;36:*.xspf=00;36:", "TERM=xterm-256color", "DISPLAY=:0", "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin", "MAIL=/var/mail/root", "LOGNAME=root", "USER=root", "HOME=/root", "SHELL=/bin/bash", "SUDO_COMMAND=/usr/bin/timeout --foreground --kill-after=15s 120 nerdctl run --name lab12-pid-kata --rm --net=none --runtime=io.containerd.kata.v2 --privileged --pid=host alpine:3.20 sh -c \n echo \"ATTEMPTED THROUGH KATA PID NAMESPACE\" \\\n > /proc/1/root/tmp/lab12-target\n\n cat /proc/1/root/tmp/lab12-target\n ", "SUDO_USER=remnux", "SUDO_UID=1000", "SUDO_GID=1000", "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin:/usr/sbin:/sbin"]), timeout: None } succeeds +Jul 17 12:00:22 remnux kata[14868]: hook /usr/local/bin/nerdctl finished +Jul 17 12:00:22 remnux kata[14868]: QemuInner::hypervisor_config() +Jul 17 12:00:22 remnux kata[14868]: get network entity from config NetworkWithNetNsConfig { network_model: "tcfilter", netns_path: "/var/run/netns/cnitest-17c55bf8-3970-6ee7-6c16-8084c2a6c46a", queues: 1, network_created: true } tid Pid(14894) +Jul 17 12:00:22 remnux kata[14868]: set netns from old File { fd: 24, path: "net:[4026531840]", read: true, write: false } to new File { fd: 25, path: "/run/netns/cnitest-17c55bf8-3970-6ee7-6c16-8084c2a6c46a", read: true, write: false } tid 14894 +Jul 17 12:00:22 remnux kata[14868]: set netns to old 24 +Jul 17 12:00:22 remnux kata[14868]: set netns from old File { fd: 24, path: "net:[4026531840]", read: true, write: false } to new File { fd: 26, path: "/run/netns/cnitest-17c55bf8-3970-6ee7-6c16-8084c2a6c46a", read: true, write: false } tid 14894 +Jul 17 12:00:22 remnux kata[14868]: set netns to old 24 +Jul 17 12:00:22 remnux kata[14868]: QemuInner::get_agent_socket() +Jul 17 12:00:22 remnux kata[14868]: begin to connect agent "vsock://4238183007" +Jul 17 12:00:22 remnux kata[14868]: try to connect agent server through Vsock { vsock_cid: 4238183007, port: 1024 } +Jul 17 12:00:22 remnux kata[14868]: Wait QEMU VM +Jul 17 12:00:22 remnux kata[14868]: QemuInner::get_vmm_master_tid() +Jul 17 12:00:22 remnux kata[14868]: QemuInner::get_vmm_master_tid(): returning 14879 +Jul 17 12:00:28 remnux kata[14868]: vsock: connected to Vsock { vsock_cid: 4238183007, port: 1024 } after 9 attempts +Jul 17 12:00:28 remnux kata[14868]: get stream raw fd 16 with socket address: "vsock://4238183007" and server_port 1024 +Jul 17 12:00:28 remnux kata[14868]: QemuInner::hypervisor_config() +Jul 17 12:00:28 remnux kata[14868]: try to connect to agent-log +Jul 17 12:00:28 remnux kata[14868]: QemuInner::set_guest_memory_block_size(): block size set to 134217728 +Jul 17 12:00:28 remnux kata[14868]: QemuInner::hypervisor_config() +Jul 17 12:00:28 remnux kata[14868]: QemuInner::hypervisor_config() +Jul 17 12:00:28 remnux kata[14868]: memory block size is 134217728, memory probe support false +Jul 17 12:00:28 remnux kata[14868]: oom watcher start +Jul 17 12:00:28 remnux kata[14868]: start runtime keep alive +Jul 17 12:00:28 remnux kata[14868]: QemuInner::hypervisor_config() +Jul 17 12:00:28 remnux kata[14868]: QemuInner::get_ns_path() +Jul 17 12:00:28 remnux kata[14868]: set netns from old File { fd: 17, path: "net:[4026531840]", read: true, write: false } to new File { fd: 22, path: "net:[4026531840]", read: true, write: false } tid 14869 +Jul 17 12:00:28 remnux kata[14868]: set netns to old 17 +Jul 17 12:00:28 remnux kata[14868]: BUG: unknown mount flag: "index=off" +Jul 17 12:00:28 remnux kata[14868]: BUG: unknown mount flag: "workdir=/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/60/work" +Jul 17 12:00:28 remnux kata[14868]: BUG: unknown mount flag: "upperdir=/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/60/fs" +Jul 17 12:00:28 remnux kata[14868]: BUG: unknown mount flag: "lowerdir=/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/1/fs" +Jul 17 12:00:28 remnux kata[14868]: oci mount is : [Mount { destination: "/proc", typ: Some("proc"), source: Some("proc"), options: Some(["nosuid", "noexec", "nodev"]) }, Mount { destination: "/dev", typ: Some("tmpfs"), source: Some("tmpfs"), options: Some(["nosuid", "strictatime", "mode=755", "size=65536k"]) }, Mount { destination: "/sys", typ: Some("sysfs"), source: Some("sysfs"), options: Some(["nosuid", "noexec", "nodev", "rw"]) }, Mount { destination: "/dev/pts", typ: Some("devpts"), source: Some("devpts"), options: Some(["nosuid", "noexec", "newinstance", "ptmxmode=0666", "mode=0620", "gid=5"]) }, Mount { destination: "/dev/shm", typ: Some("tmpfs"), source: Some("shm"), options: Some(["nosuid", "noexec", "nodev", "mode=1777", "size=65536k"]) }, Mount { destination: "/dev/mqueue", typ: Some("mqueue"), source: Some("mqueue"), options: Some(["nosuid", "noexec", "nodev"]) }, Mount { destination: "/sys/fs/cgroup", typ: Some("cgroup"), source: Some("cgroup"), options: Some(["rw", "nosuid", "noexec", "nodev"]) }, Mount { destination: "/etc/resolv.conf", typ: Some("bind"), source: Some("/var/lib/nerdctl/1935db59/containers/default/498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee/resolv.conf"), options: Some(["bind", "rprivate"]) }, Mount { destination: "/etc/hosts", typ: Some("bind"), source: Some("/var/lib/nerdctl/1935db59/etchosts/default/498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee/hosts"), options: Some(["bind", "rprivate"]) }, Mount { destination: "/etc/hostname", typ: Some("bind"), source: Some("/var/lib/nerdctl/1935db59/containers/default/498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee/hostname"), options: Some(["bind", "rprivate"]) }] +Jul 17 12:00:28 remnux kata[14868]: wait on container terminated +Jul 17 12:00:28 remnux kata[14868]: container terminated +Jul 17 12:00:28 remnux kata[14868]: stop container: agent remove container failed: rpc status: Status { code: INTERNAL, message: "Invalid container id\n\nStack backtrace:\n 0: \n 1: \n 2: \n 3: \n 4: \n 5: \n 6: \n 7: \n 8: \n 9: \n 10: \n 11: \n 12: \n 13: \n 14: \n 15: ", details: [], special_fields: SpecialFields { unknown_fields: UnknownFields { fields: None }, cached_size: CachedSize { size: 0 } } } +Jul 17 12:00:28 remnux kata[14868]: Cleaning up DefaultVolume is still unimplemented. +Jul 17 12:00:28 remnux kata[14868]: Cleaning up DefaultVolume is still unimplemented. +Jul 17 12:00:28 remnux kata[14868]: Cleaning up DefaultVolume is still unimplemented. +Jul 17 12:00:28 remnux kata[14868]: Cleaning up DefaultVolume is still unimplemented. +Jul 17 12:00:28 remnux kata[14868]: Cleaning up DefaultVolume is still unimplemented. +Jul 17 12:00:28 remnux kata[14868]: Cleaning up DefaultVolume is still unimplemented. +Jul 17 12:00:28 remnux kata[14868]: The path will be umounted due to no references, host_source = /var/lib/nerdctl/1935db59/containers/default/498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee/resolv.conf +Jul 17 12:00:28 remnux kata[14868]: lazy umount for /run/kata-containers/shared/sandboxes/498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee/rw/passthrough/sandbox-a9641e9b-resolv.conf +Jul 17 12:00:28 remnux kata[14868]: The path will be umounted due to no references, host_source = /var/lib/nerdctl/1935db59/etchosts/default/498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee/hosts +Jul 17 12:00:28 remnux kata[14868]: lazy umount for /run/kata-containers/shared/sandboxes/498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee/rw/passthrough/sandbox-3f906b0b-hosts +Jul 17 12:00:28 remnux kata[14868]: The path will be umounted due to no references, host_source = /var/lib/nerdctl/1935db59/containers/default/498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee/hostname +Jul 17 12:00:28 remnux kata[14868]: lazy umount for /run/kata-containers/shared/sandboxes/498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee/rw/passthrough/sandbox-766848bc-hostname +Jul 17 12:00:28 remnux kata[14868]: lazy umount for /run/kata-containers/shared/sandboxes/498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee/rw/passthrough/498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee/rootfs +Jul 17 12:00:28 remnux kata[14868]: lazy umount for /run/containerd/io.containerd.runtime.v2.task/default/498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee/rootfs +Jul 17 12:00:28 remnux kata[14868]: shutdown +Jul 17 12:00:28 remnux kata[14868]: begin stop sandbox +Jul 17 12:00:28 remnux kata[14868]: Stopping QEMU VM +Jul 17 12:00:28 remnux kata[14868]: QemuInner::stop_vm(): kill()'ing qemu +Jul 17 12:00:28 remnux kata[14868]: oom watcher cancelled, sandbox is stopping +Jul 17 12:00:28 remnux kata[14868]: Failed to terminate pending RPC: the request has returned +Jul 17 12:00:28 remnux kata[14868]: source: virtiofsd [2026-07-17T16:00:28Z INFO virtiofsd] Client disconnected, shutting down +Jul 17 12:00:28 remnux kata[14868]: finished reading qemu stderr +Jul 17 12:00:28 remnux kata[14868]: wait virtiofsd Ok(ExitStatus(unix_wait_status(0))) +Jul 17 12:00:28 remnux kata[14868]: wait sandbox +Jul 17 12:00:28 remnux kata[14868]: sandbox stopped +Jul 17 12:00:28 remnux kata[14868]: delete hypervisor +Jul 17 12:00:28 remnux kata[14868]: QemuInner::cleanup() +Jul 17 12:00:28 remnux kata[14868]: resource clean up +Jul 17 12:00:28 remnux kata[14868]: set netns from old File { fd: 13, path: "net:[4026531840]", read: true, write: false } to new File { fd: 14, path: "/run/netns/cnitest-17c55bf8-3970-6ee7-6c16-8084c2a6c46a", read: true, write: false } tid 14870 +Jul 17 12:00:28 remnux kata[14868]: set netns to old 13 +Jul 17 12:00:28 remnux kata[14868]: failed to remove network: failed to remove netns path +Jul 17 12:00:28 remnux kata[14868]: sandbox bindmounts empty, just skip it. +Jul 17 12:00:28 remnux kata[14868]: shutdown virtiofsd pid 14874 +Jul 17 12:00:28 remnux kata[14868]: stop monitor +Jul 17 12:00:28 remnux containerd[14678]: time="2026-07-17T12:00:28.864498811-04:00" level=info msg="shim disconnected" id=498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee namespace=default +Jul 17 12:00:28 remnux containerd[14678]: time="2026-07-17T12:00:28.864549080-04:00" level=warning msg="cleaning up after shim disconnected" id=498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee namespace=default +Jul 17 12:00:28 remnux containerd[14678]: time="2026-07-17T12:00:28.864556238-04:00" level=info msg="cleaning up dead shim" namespace=default +Jul 17 12:00:28 remnux kata[14868]: stop runtime keep alive +Jul 17 12:00:28 remnux kata[14868]: stop agent +Jul 17 12:00:28 remnux kata[14868]: abort log forwarder thread +Jul 17 12:00:28 remnux kata[14868]: send shutdown message +Jul 17 12:00:28 remnux kata[14868]: receive action Shutdown +Jul 17 12:00:28 remnux kata[14868]: end to run service diff --git a/submissions/labs/lab12/results/containerd-journal.txt b/submissions/labs/lab12/results/containerd-journal.txt new file mode 100644 index 000000000..6ebef44a3 --- /dev/null +++ b/submissions/labs/lab12/results/containerd-journal.txt @@ -0,0 +1,269 @@ +-- Logs begin at Mon 2024-10-07 21:49:33 EDT, end at Fri 2026-07-17 11:56:40 EDT. -- +Jul 17 11:56:32 remnux kata[13933]: Cleaning up DefaultVolume is still unimplemented. +Jul 17 11:56:32 remnux kata[13933]: Cleaning up DefaultVolume is still unimplemented. +Jul 17 11:56:32 remnux kata[13933]: Cleaning up DefaultVolume is still unimplemented. +Jul 17 11:56:32 remnux kata[13933]: Cleaning up DefaultVolume is still unimplemented. +Jul 17 11:56:32 remnux kata[13933]: Cleaning up DefaultVolume is still unimplemented. +Jul 17 11:56:32 remnux kata[13933]: Cleaning up DefaultVolume is still unimplemented. +Jul 17 11:56:32 remnux kata[13933]: The path will be umounted due to no references, host_source = /var/lib/nerdctl/1935db59/containers/default/25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f/resolv.conf +Jul 17 11:56:32 remnux kata[13933]: lazy umount for /run/kata-containers/shared/sandboxes/25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f/rw/passthrough/sandbox-767c7981-resolv.conf +Jul 17 11:56:32 remnux kata[13933]: The path will be umounted due to no references, host_source = /var/lib/nerdctl/1935db59/etchosts/default/25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f/hosts +Jul 17 11:56:32 remnux kata[13933]: lazy umount for /run/kata-containers/shared/sandboxes/25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f/rw/passthrough/sandbox-11f8c259-hosts +Jul 17 11:56:32 remnux kata[13933]: The path will be umounted due to no references, host_source = /var/lib/nerdctl/1935db59/containers/default/25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f/hostname +Jul 17 11:56:32 remnux kata[13933]: lazy umount for /run/kata-containers/shared/sandboxes/25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f/rw/passthrough/sandbox-417f2d60-hostname +Jul 17 11:56:32 remnux kata[13933]: lazy umount for /run/kata-containers/shared/sandboxes/25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f/rw/passthrough/25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f/rootfs +Jul 17 11:56:32 remnux kata[13933]: lazy umount for /run/containerd/io.containerd.runtime.v2.task/default/25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f/rootfs +Jul 17 11:56:32 remnux kata[13933]: end io wait thread +Jul 17 11:56:32 remnux kata[13933]: end wait exited +Jul 17 11:56:32 remnux kata[13933]: wait process exit status ProcessExitStatus { exit_code: 0, exit_time: Some(SystemTime { tv_sec: 1784303792, tv_nsec: 379981952 }) } +Jul 17 11:56:32 remnux kata[13933]: container process exited with ProcessExitStatus { exit_code: 0, exit_time: Some(SystemTime { tv_sec: 1784303792, tv_nsec: 379981952 }) } +Jul 17 11:56:32 remnux kata[13933]: begin stop sandbox +Jul 17 11:56:32 remnux kata[13933]: Stopping QEMU VM +Jul 17 11:56:32 remnux kata[13933]: QemuInner::stop_vm(): kill()'ing qemu +Jul 17 11:56:32 remnux kata[13933]: end wait exited +Jul 17 11:56:32 remnux kata[13933]: wait process exit status ProcessExitStatus { exit_code: 0, exit_time: Some(SystemTime { tv_sec: 1784303792, tv_nsec: 379981952 }) } +Jul 17 11:56:32 remnux kata[13933]: begin stop sandbox +Jul 17 11:56:32 remnux kata[13933]: end wait exited +Jul 17 11:56:32 remnux kata[13933]: wait process exit status ProcessExitStatus { exit_code: 0, exit_time: Some(SystemTime { tv_sec: 1784303792, tv_nsec: 379981952 }) } +Jul 17 11:56:32 remnux kata[13933]: container process exited with ProcessExitStatus { exit_code: 0, exit_time: Some(SystemTime { tv_sec: 1784303792, tv_nsec: 379981952 }) } +Jul 17 11:56:32 remnux kata[13933]: begin stop sandbox +Jul 17 11:56:32 remnux kata[13933]: oom watcher cancelled, sandbox is stopping +Jul 17 11:56:32 remnux kata[13933]: Failed to terminate pending RPC: the request has returned +Jul 17 11:56:32 remnux kata[13933]: source: virtiofsd [2026-07-17T15:56:32Z INFO virtiofsd] Client disconnected, shutting down +Jul 17 11:56:32 remnux kata[13933]: finished reading qemu stderr +Jul 17 11:56:32 remnux kata[13933]: wait sandbox +Jul 17 11:56:32 remnux kata[13933]: Stopping QEMU VM +Jul 17 11:56:32 remnux kata[13933]: QemuInner::stop_vm(): qemu process isn't running (likely stopped already) +Jul 17 11:56:32 remnux kata[13933]: wait sandbox +Jul 17 11:56:32 remnux kata[13933]: Stopping QEMU VM +Jul 17 11:56:32 remnux kata[13933]: QemuInner::stop_vm(): qemu process isn't running (likely stopped already) +Jul 17 11:56:32 remnux kata[13933]: wait sandbox +Jul 17 11:56:32 remnux kata[13933]: sandbox stopped +Jul 17 11:56:32 remnux kata[13933]: sandbox stopped +Jul 17 11:56:32 remnux kata[13933]: sandbox stopped +Jul 17 11:56:32 remnux kata[13933]: receive action Event(TaskExit { container_id: "25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f", id: "25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f", pid: 13944, exit_status: 0, exited_at: MessageField(Some(Timestamp { seconds: 1784303792, nanos: 0, special_fields: SpecialFields { unknown_fields: UnknownFields { fields: None }, cached_size: CachedSize { size: 0 } } })), special_fields: SpecialFields { unknown_fields: UnknownFields { fields: None }, cached_size: CachedSize { size: 0 } } }) +Jul 17 11:56:32 remnux kata[13933]: get event TaskExit { container_id: "25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f", id: "25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f", pid: 13944, exit_status: 0, exited_at: MessageField(Some(Timestamp { seconds: 1784303792, nanos: 0, special_fields: SpecialFields { unknown_fields: UnknownFields { fields: None }, cached_size: CachedSize { size: 0 } } })), special_fields: SpecialFields { unknown_fields: UnknownFields { fields: None }, cached_size: CachedSize { size: 0 } } } +Jul 17 11:56:32 remnux kata[13933]: receive action Event(TaskExit { container_id: "25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f", id: "25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f", pid: 13944, exit_status: 0, exited_at: MessageField(Some(Timestamp { seconds: 1784303792, nanos: 0, special_fields: SpecialFields { unknown_fields: UnknownFields { fields: None }, cached_size: CachedSize { size: 0 } } })), special_fields: SpecialFields { unknown_fields: UnknownFields { fields: None }, cached_size: CachedSize { size: 0 } } }) +Jul 17 11:56:32 remnux kata[13933]: get event TaskExit { container_id: "25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f", id: "25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f", pid: 13944, exit_status: 0, exited_at: MessageField(Some(Timestamp { seconds: 1784303792, nanos: 0, special_fields: SpecialFields { unknown_fields: UnknownFields { fields: None }, cached_size: CachedSize { size: 0 } } })), special_fields: SpecialFields { unknown_fields: UnknownFields { fields: None }, cached_size: CachedSize { size: 0 } } } +Jul 17 11:56:32 remnux kata[13933]: execute hook Hook { path: "/usr/local/bin/nerdctl", args: Some(["/usr/local/bin/nerdctl", "internal", "oci-hook", "postStop"]), env: Some(["COLORTERM=truecolor", "XAUTHORITY=/run/user/1000/gdm/Xauthority", "LANG=en_US.UTF-8", "LS_COLORS=rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:mi=00:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arc=01;31:*.arj=01;31:*.taz=01;31:*.lha=01;31:*.lz4=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.tzo=01;31:*.t7z=01;31:*.zip=01;31:*.z=01;31:*.dz=01;31:*.gz=01;31:*.lrz=01;31:*.lz=01;31:*.lzo=01;31:*.xz=01;31:*.zst=01;31:*.tzst=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.war=01;31:*.ear=01;31:*.sar=01;31:*.rar=01;31:*.alz=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.cab=01;31:*.wim=01;31:*.swm=01;31:*.dwm=01;31:*.esd=01;31:*.jpg=01;35:*.jpeg=01;35:*.mjpg=01;35:*.mjpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.webm=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=00;36:*.au=00;36:*.flac=00;36:*.m4a=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.oga=00;36:*.opus=00;36:*.spx=00;36:*.xspf=00;36:", "TERM=xterm-256color", "DISPLAY=:0", "LC_ALL=C", "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin", "MAIL=/var/mail/root", "LOGNAME=root", "USER=root", "HOME=/root", "SHELL=/bin/bash", "SUDO_COMMAND=/usr/bin/timeout --foreground --kill-after=15s 120 nerdctl run --rm --runtime=io.containerd.kata.v2 alpine:3.20 sh -c LC_ALL=C dd if=/dev/zero of=/dev/null bs=1M count=100 2>&1", "SUDO_USER=remnux", "SUDO_UID=1000", "SUDO_GID=1000", "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin:/usr/sbin:/sbin"]), timeout: None } +Jul 17 11:56:32 remnux kata[13933]: exit status of hook Hook { path: "/usr/local/bin/nerdctl", args: Some(["/usr/local/bin/nerdctl", "internal", "oci-hook", "postStop"]), env: Some(["COLORTERM=truecolor", "XAUTHORITY=/run/user/1000/gdm/Xauthority", "LANG=en_US.UTF-8", "LS_COLORS=rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:mi=00:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arc=01;31:*.arj=01;31:*.taz=01;31:*.lha=01;31:*.lz4=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.tzo=01;31:*.t7z=01;31:*.zip=01;31:*.z=01;31:*.dz=01;31:*.gz=01;31:*.lrz=01;31:*.lz=01;31:*.lzo=01;31:*.xz=01;31:*.zst=01;31:*.tzst=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.war=01;31:*.ear=01;31:*.sar=01;31:*.rar=01;31:*.alz=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.cab=01;31:*.wim=01;31:*.swm=01;31:*.dwm=01;31:*.esd=01;31:*.jpg=01;35:*.jpeg=01;35:*.mjpg=01;35:*.mjpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.webm=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=00;36:*.au=00;36:*.flac=00;36:*.m4a=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.oga=00;36:*.opus=00;36:*.spx=00;36:*.xspf=00;36:", "TERM=xterm-256color", "DISPLAY=:0", "LC_ALL=C", "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin", "MAIL=/var/mail/root", "LOGNAME=root", "USER=root", "HOME=/root", "SHELL=/bin/bash", "SUDO_COMMAND=/usr/bin/timeout --foreground --kill-after=15s 120 nerdctl run --rm --runtime=io.containerd.kata.v2 alpine:3.20 sh -c LC_ALL=C dd if=/dev/zero of=/dev/null bs=1M count=100 2>&1", "SUDO_USER=remnux", "SUDO_UID=1000", "SUDO_GID=1000", "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin:/usr/sbin:/sbin"]), timeout: None } : Exited(0) +Jul 17 11:56:32 remnux kata[13933]: hook Hook { path: "/usr/local/bin/nerdctl", args: Some(["/usr/local/bin/nerdctl", "internal", "oci-hook", "postStop"]), env: Some(["COLORTERM=truecolor", "XAUTHORITY=/run/user/1000/gdm/Xauthority", "LANG=en_US.UTF-8", "LS_COLORS=rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:mi=00:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arc=01;31:*.arj=01;31:*.taz=01;31:*.lha=01;31:*.lz4=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.tzo=01;31:*.t7z=01;31:*.zip=01;31:*.z=01;31:*.dz=01;31:*.gz=01;31:*.lrz=01;31:*.lz=01;31:*.lzo=01;31:*.xz=01;31:*.zst=01;31:*.tzst=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.war=01;31:*.ear=01;31:*.sar=01;31:*.rar=01;31:*.alz=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.cab=01;31:*.wim=01;31:*.swm=01;31:*.dwm=01;31:*.esd=01;31:*.jpg=01;35:*.jpeg=01;35:*.mjpg=01;35:*.mjpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.webm=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=00;36:*.au=00;36:*.flac=00;36:*.m4a=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.oga=00;36:*.opus=00;36:*.spx=00;36:*.xspf=00;36:", "TERM=xterm-256color", "DISPLAY=:0", "LC_ALL=C", "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin", "MAIL=/var/mail/root", "LOGNAME=root", "USER=root", "HOME=/root", "SHELL=/bin/bash", "SUDO_COMMAND=/usr/bin/timeout --foreground --kill-after=15s 120 nerdctl run --rm --runtime=io.containerd.kata.v2 alpine:3.20 sh -c LC_ALL=C dd if=/dev/zero of=/dev/null bs=1M count=100 2>&1", "SUDO_USER=remnux", "SUDO_UID=1000", "SUDO_GID=1000", "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin:/usr/sbin:/sbin"]), timeout: None } succeeds +Jul 17 11:56:32 remnux kata[13933]: hook /usr/local/bin/nerdctl finished +Jul 17 11:56:32 remnux kata[13933]: receive action Event(TaskDelete { container_id: "", pid: 13944, exit_status: 0, exited_at: MessageField(None), id: "25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f", special_fields: SpecialFields { unknown_fields: UnknownFields { fields: None }, cached_size: CachedSize { size: 0 } } }) +Jul 17 11:56:32 remnux kata[13933]: get event TaskDelete { container_id: "", pid: 13944, exit_status: 0, exited_at: MessageField(None), id: "25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f", special_fields: SpecialFields { unknown_fields: UnknownFields { fields: None }, cached_size: CachedSize { size: 0 } } } +Jul 17 11:56:32 remnux kata[13933]: wait virtiofsd Ok(ExitStatus(unix_wait_status(0))) +Jul 17 11:56:32 remnux kata[13933]: shutdown +Jul 17 11:56:32 remnux kata[13933]: delete hypervisor +Jul 17 11:56:32 remnux kata[13933]: QemuInner::cleanup() +Jul 17 11:56:32 remnux kata[13933]: resource clean up +Jul 17 11:56:32 remnux kata[13933]: set netns from old File { fd: 13, path: "net:[4026531840]", read: true, write: false } to new File { fd: 14, path: "/run/netns/cnitest-25ac153e-49ca-1ecf-bebb-e7bd691b5b72", read: true, write: false } tid 13935 +Jul 17 11:56:32 remnux kata[13933]: failed to detach endpoint: del network model failed. +Jul 17 11:56:32 remnux kata[13933]: set netns to old 13 +Jul 17 11:56:32 remnux kata[13933]: failed to remove network: failed to remove netns path +Jul 17 11:56:32 remnux kata[13933]: sandbox bindmounts empty, just skip it. +Jul 17 11:56:32 remnux containerd[9105]: time="2026-07-17T11:56:32.577373796-04:00" level=info msg="shim disconnected" id=25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f namespace=default +Jul 17 11:56:32 remnux containerd[9105]: time="2026-07-17T11:56:32.577415016-04:00" level=warning msg="cleaning up after shim disconnected" id=25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f namespace=default +Jul 17 11:56:32 remnux containerd[9105]: time="2026-07-17T11:56:32.577420506-04:00" level=info msg="cleaning up dead shim" namespace=default +Jul 17 11:56:32 remnux kata[13933]: shutdown virtiofsd pid 13939 +Jul 17 11:56:32 remnux kata[13933]: stop monitor +Jul 17 11:56:32 remnux kata[13933]: stop runtime keep alive +Jul 17 11:56:32 remnux kata[13933]: stop agent +Jul 17 11:56:32 remnux kata[13933]: abort log forwarder thread +Jul 17 11:56:32 remnux kata[13933]: send shutdown message +Jul 17 11:56:32 remnux kata[13933]: receive action Shutdown +Jul 17 11:56:32 remnux kata[13933]: end to run service +Jul 17 11:56:32 remnux containerd[9105]: time="2026-07-17T11:56:32.725516250-04:00" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 +Jul 17 11:56:32 remnux containerd[9105]: time="2026-07-17T11:56:32.725820484-04:00" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 +Jul 17 11:56:32 remnux containerd[9105]: time="2026-07-17T11:56:32.725841364-04:00" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 +Jul 17 11:56:32 remnux containerd[9105]: time="2026-07-17T11:56:32.726712280-04:00" level=info msg="loading plugin \"io.containerd.ttrpc.v1.pause\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 +Jul 17 11:56:33 remnux containerd[9105]: time="2026-07-17T11:56:33.027058686-04:00" level=info msg="shim disconnected" id=f18f3ce7ac9b7aff3f3147553c420757f2dadc7aafa717e5d05b2046eb4f7c14 namespace=default +Jul 17 11:56:33 remnux containerd[9105]: time="2026-07-17T11:56:33.027101734-04:00" level=warning msg="cleaning up after shim disconnected" id=f18f3ce7ac9b7aff3f3147553c420757f2dadc7aafa717e5d05b2046eb4f7c14 namespace=default +Jul 17 11:56:33 remnux containerd[9105]: time="2026-07-17T11:56:33.027107253-04:00" level=info msg="cleaning up dead shim" namespace=default +Jul 17 11:56:33 remnux kata[14435]: start to run +Jul 17 11:56:33 remnux kata[14435]: begin to run service +Jul 17 11:56:33 remnux kata[14435]: wait server message +Jul 17 11:56:33 remnux kata[14435]: get config path "" +Jul 17 11:56:33 remnux kata[14435]: load configuration from: /opt/kata/share/defaults/kata-containers/runtime-rs/configuration-qemu-runtime-rs.toml +Jul 17 11:56:33 remnux kata[14435]: Adjusting hypervisor configuration ["qemu"] +Jul 17 11:56:33 remnux kata[14435]: get kata config: TomlConfig { agent: {"kata": Agent { debug: false, log_level: "info", enable_tracing: false, debug_console_enabled: false, visible_cdi_devices: false, server_port: 1024, log_port: 1025, passfd_listener_port: 1027, dial_timeout_ms: 10, reconnect_timeout_ms: 3000, cdh_api_timeout_ms: 50000, request_timeout_ms: 30000, health_check_request_timeout_ms: 90000, kernel_modules: [], container_pipe_size: 0, launch_process_timeout: 0, mem_agent: MemAgent { enable: false, memcg_disable: Some(false), memcg_swap: Some(false), memcg_swappiness_max: Some(50), memcg_period_secs: Some(600), memcg_period_psi_percent_limit: Some(1), memcg_eviction_psi_percent_limit: Some(1), memcg_eviction_run_aging_count_min: Some(3), compact_disable: Some(false), compact_period_secs: Some(600), compact_period_psi_percent_limit: Some(1), compact_psi_percent_limit: Some(5), compact_sec_max: Some(300), compact_order: Some(9), compact_threshold: Some(1024), compact_force_times: Some(9223372036854775807) }, policy: "" }}, hypervisor: {"qemu": Hypervisor { path: "/opt/kata/bin/qemu-system-x86_64", valid_hypervisor_paths: ["/opt/kata/bin/qemu-system-x86_64"], ctlpath: "", valid_ctlpaths: [], jailer_path: "", valid_jailer_paths: [], disable_nesting_checks: false, enable_iothreads: false, indep_iothreads: 0, blockdev_info: BlockDeviceInfo { disable_block_device_use: false, block_device_driver: "virtio-scsi", block_device_aio: "io_uring", block_device_cache_set: false, block_device_cache_direct: false, block_device_cache_noflush: false, block_device_logical_sector_size: 0, block_device_physical_sector_size: 0, disable_image_nvdimm: false, memory_offset: 0, enable_vhost_user_store: false, vhost_user_store_path: "", valid_vhost_user_store_paths: ["/var/run/kata-containers/vhost-user"], disk_rate_limiter_bw_max_rate: 0, disk_rate_limiter_bw_one_time_burst: None, disk_rate_limiter_ops_max_rate: 0, disk_rate_limiter_ops_one_time_burst: None, queue_size: 128, num_queues: 1 }, boot_info: BootInfo { kernel: "/opt/kata/share/kata-containers/vmlinux-6.18.35-197", kernel_params: "cgroup_no_v1=all systemd.unified_cgroup_hierarchy=1", kernel_verity_params: "", initrd: "", image: "/opt/kata/share/kata-containers/kata-ubuntu-noble.image", rootfs_type: "ext4", firmware: "", vm_rootfs_driver: "virtio-pmem" }, cpu_info: CpuInfo { cpu_features: "pmu=off", default_vcpus: 1.0, default_maxvcpus: 4 }, debug_info: DebugInfo { enable_debug: false, log_level: "info", guest_memory_dump_paging: false, guest_memory_dump_path: "", extra_monitor_socket: "" }, device_info: DeviceInfo { default_bridges: 1, hotplug_vfio_on_root_bus: false, cold_plug_vfio: "", pcie_root_port: 0, pcie_switch_port: 0, enable_iommu: false, enable_iommu_platform: false, reclaim_guest_freed_memory: false }, machine_info: MachineInfo { machine_type: "q35", machine_accelerators: "", pflashes: [], entropy_source: "/dev/urandom", valid_entropy_sources: ["/dev/urandom", "/dev/random", ""] }, memory_info: MemoryInfo { default_memory: 2048, default_maxmemory: 7935, memory_slots: 10, enable_mem_prealloc: false, enable_hugepages: false, hugepage_type: Hugetlbfs, enable_virtio_mem: false, enable_guest_swap: false, guest_swap_path: "/run/kata-containers/swap", guest_swap_size_percent: 100, guest_swap_create_threshold_secs: 60 }, network_info: NetworkInfo { disable_vhost_net: false, rx_rate_limiter_max_rate: 0, tx_rate_limiter_max_rate: 0, network_queues: 1 }, security_info: SecurityInfo { rootless: false, rootless_user: None, disable_seccomp: false, confidential_guest: false, sev_snp_guest: false, snp_id_block: "", snp_id_auth: "", snp_guest_policy: 196608, guest_hook_path: "", initdata: "", enable_annotations: ["enable_iommu", "kernel_params", "kernel_verity_params", "default_vcpus", "default_memory"], qgs_port: 0, seccomp_sandbox: Some(""), selinux_label: None }, shared_fs: SharedFsInfo { shared_fs: Some("virtio-fs"), virtio_fs_daemon: "/opt/kata/libexec/virtiofsd", valid_virtio_fs_daemon_paths: ["/opt/kata/libexec/virtiofsd"], virtio_fs_extra_args: ["--thread-pool-size=1", "-o", "announce_submounts"], virtio_fs_cache: "auto", virtio_fs_cache_size: 0, virtio_fs_queue_size: 1024, virtio_fs_is_dax: false }, remote_info: RemoteInfo { hypervisor_socket: "", hypervisor_timeout: 0, default_gpus: 0, default_gpu_model: "" }, vm_template: VmTemplateInfo { boot_to_be_template: false, boot_from_template: false, memory_path: "", device_state_path: "" }, factory: Factory { enable_template: false, template_path: "/run/vc/vm/template" }, prefetch_list_path: "", vendor: HypervisorVendor, disable_guest_selinux: true, disable_selinux: false }}, runtime: Runtime { name: "virt_container", hypervisor_name: "qemu", agent_name: "kata", debug: false, log_level: "info", experimental: [], internetworking_model: "tcfilter", disable_new_netns: false, sandbox_bind_mounts: [], sandbox_cgroup_only: true, enable_vcpus_pinning: false, enable_tracing: false, jaeger_endpoint: "", jaeger_user: "", jaeger_password: "", enable_pprof: false, static_sandbox_resource_mgmt: true, disable_guest_seccomp: true, disable_guest_empty_dir: false, emptydir_mode: "shared-fs", vfio_mode: "guest-kernel", vendor: RuntimeVendor, keep_abnormal: false, dan_conf: "", shared_mounts: [], use_passfd_io: false, passfd_listener_port: 1027, pod_resource_api_sock: "" } } +Jul 17 11:56:33 remnux kata[14435]: Annotation nerdctl/state-dir not enabled +Jul 17 11:56:33 remnux kata[14435]: Annotation nerdctl/extraHosts not enabled +Jul 17 11:56:33 remnux kata[14435]: Annotation nerdctl/ipc not enabled +Jul 17 11:56:33 remnux kata[14435]: Annotation nerdctl/privileged not enabled +Jul 17 11:56:33 remnux kata[14435]: Annotation nerdctl/auto-remove not enabled +Jul 17 11:56:33 remnux kata[14435]: Annotation nerdctl/host-config not enabled +Jul 17 11:56:33 remnux kata[14435]: Annotation nerdctl/name not enabled +Jul 17 11:56:33 remnux kata[14435]: Annotation nerdctl/namespace not enabled +Jul 17 11:56:33 remnux kata[14435]: Annotation nerdctl/log-config not enabled +Jul 17 11:56:33 remnux kata[14435]: Annotation nerdctl/hostname not enabled +Jul 17 11:56:33 remnux kata[14435]: Annotation nerdctl/domainname not enabled +Jul 17 11:56:33 remnux kata[14435]: Annotation nerdctl/networks not enabled +Jul 17 11:56:33 remnux kata[14435]: Annotation nerdctl/log-uri not enabled +Jul 17 11:56:33 remnux kata[14435]: Annotation nerdctl/platform not enabled +Jul 17 11:56:33 remnux kata[14435]: Annotation nerdctl/dns not enabled +Jul 17 11:56:33 remnux kata[14435]: Annotation nerdctl/mounts.0 not enabled +Jul 17 11:56:33 remnux kata[14435]: Annotation nerdctl/network-namespace not enabled +Jul 17 11:56:33 remnux kata[14435]: Adjusting hypervisor configuration ["qemu"] +Jul 17 11:56:33 remnux kata[14435]: get config content TomlConfig { agent: {"kata": Agent { debug: false, log_level: "info", enable_tracing: false, debug_console_enabled: false, visible_cdi_devices: false, server_port: 1024, log_port: 1025, passfd_listener_port: 1027, dial_timeout_ms: 10, reconnect_timeout_ms: 3000, cdh_api_timeout_ms: 50000, request_timeout_ms: 30000, health_check_request_timeout_ms: 90000, kernel_modules: [], container_pipe_size: 0, launch_process_timeout: 0, mem_agent: MemAgent { enable: false, memcg_disable: Some(false), memcg_swap: Some(false), memcg_swappiness_max: Some(50), memcg_period_secs: Some(600), memcg_period_psi_percent_limit: Some(1), memcg_eviction_psi_percent_limit: Some(1), memcg_eviction_run_aging_count_min: Some(3), compact_disable: Some(false), compact_period_secs: Some(600), compact_period_psi_percent_limit: Some(1), compact_psi_percent_limit: Some(5), compact_sec_max: Some(300), compact_order: Some(9), compact_threshold: Some(1024), compact_force_times: Some(9223372036854775807) }, policy: "" }}, hypervisor: {"qemu": Hypervisor { path: "/opt/kata/bin/qemu-system-x86_64", valid_hypervisor_paths: ["/opt/kata/bin/qemu-system-x86_64"], ctlpath: "", valid_ctlpaths: [], jailer_path: "", valid_jailer_paths: [], disable_nesting_checks: false, enable_iothreads: false, indep_iothreads: 0, blockdev_info: BlockDeviceInfo { disable_block_device_use: false, block_device_driver: "virtio-scsi", block_device_aio: "io_uring", block_device_cache_set: false, block_device_cache_direct: false, block_device_cache_noflush: false, block_device_logical_sector_size: 0, block_device_physical_sector_size: 0, disable_image_nvdimm: false, memory_offset: 0, enable_vhost_user_store: false, vhost_user_store_path: "", valid_vhost_user_store_paths: ["/var/run/kata-containers/vhost-user"], disk_rate_limiter_bw_max_rate: 0, disk_rate_limiter_bw_one_time_burst: None, disk_rate_limiter_ops_max_rate: 0, disk_rate_limiter_ops_one_time_burst: None, queue_size: 128, num_queues: 1 }, boot_info: BootInfo { kernel: "/opt/kata/share/kata-containers/vmlinux-6.18.35-197", kernel_params: "agent.cdh_api_timeout=50 cgroup_no_v1=all systemd.unified_cgroup_hierarchy=1", kernel_verity_params: "", initrd: "", image: "/opt/kata/share/kata-containers/kata-ubuntu-noble.image", rootfs_type: "ext4", firmware: "", vm_rootfs_driver: "virtio-pmem" }, cpu_info: CpuInfo { cpu_features: "pmu=off", default_vcpus: 1.0, default_maxvcpus: 4 }, debug_info: DebugInfo { enable_debug: false, log_level: "info", guest_memory_dump_paging: false, guest_memory_dump_path: "", extra_monitor_socket: "" }, device_info: DeviceInfo { default_bridges: 1, hotplug_vfio_on_root_bus: false, cold_plug_vfio: "", pcie_root_port: 0, pcie_switch_port: 0, enable_iommu: false, enable_iommu_platform: false, reclaim_guest_freed_memory: false }, machine_info: MachineInfo { machine_type: "q35", machine_accelerators: "", pflashes: [], entropy_source: "/dev/urandom", valid_entropy_sources: ["/dev/urandom", "/dev/random", ""] }, memory_info: MemoryInfo { default_memory: 2048, default_maxmemory: 7935, memory_slots: 10, enable_mem_prealloc: false, enable_hugepages: false, hugepage_type: Hugetlbfs, enable_virtio_mem: false, enable_guest_swap: false, guest_swap_path: "/run/kata-containers/swap", guest_swap_size_percent: 100, guest_swap_create_threshold_secs: 60 }, network_info: NetworkInfo { disable_vhost_net: false, rx_rate_limiter_max_rate: 0, tx_rate_limiter_max_rate: 0, network_queues: 1 }, security_info: SecurityInfo { rootless: false, rootless_user: None, disable_seccomp: false, confidential_guest: false, sev_snp_guest: false, snp_id_block: "", snp_id_auth: "", snp_guest_policy: 196608, guest_hook_path: "", initdata: "", enable_annotations: ["enable_iommu", "kernel_params", "kernel_verity_params", "default_vcpus", "default_memory"], qgs_port: 0, seccomp_sandbox: Some(""), selinux_label: None }, shared_fs: SharedFsInfo { shared_fs: Some("virtio-fs"), virtio_fs_daemon: "/opt/kata/libexec/virtiofsd", valid_virtio_fs_daemon_paths: ["/opt/kata/libexec/virtiofsd"], virtio_fs_extra_args: ["--thread-pool-size=1", "-o", "announce_submounts"], virtio_fs_cache: "auto", virtio_fs_cache_size: 0, virtio_fs_queue_size: 1024, virtio_fs_is_dax: false }, remote_info: RemoteInfo { hypervisor_socket: "", hypervisor_timeout: 0, default_gpus: 0, default_gpu_model: "" }, vm_template: VmTemplateInfo { boot_to_be_template: false, boot_from_template: false, memory_path: "", device_state_path: "" }, factory: Factory { enable_template: false, template_path: "/run/vc/vm/template" }, prefetch_list_path: "", vendor: HypervisorVendor, disable_guest_selinux: true, disable_selinux: false }}, runtime: Runtime { name: "virt_container", hypervisor_name: "qemu", agent_name: "kata", debug: false, log_level: "info", experimental: [], internetworking_model: "tcfilter", disable_new_netns: false, sandbox_bind_mounts: [], sandbox_cgroup_only: true, enable_vcpus_pinning: false, enable_tracing: false, jaeger_endpoint: "", jaeger_user: "", jaeger_password: "", enable_pprof: false, static_sandbox_resource_mgmt: true, disable_guest_seccomp: true, disable_guest_empty_dir: false, emptydir_mode: "shared-fs", vfio_mode: "guest-kernel", vendor: RuntimeVendor, keep_abnormal: false, dan_conf: "", shared_mounts: [], use_passfd_io: false, passfd_listener_port: 1027, pod_resource_api_sock: "" } } +Jul 17 11:56:33 remnux kata[14435]: (from PodSandbox's annotation / SingleContainer's spec) initial size: vcpu=0, mem_mb=0 +Jul 17 11:56:33 remnux kata[14435]: new runtime handler virt_container +Jul 17 11:56:33 remnux kata[14435]: QemuInner::hypervisor_config() +Jul 17 11:56:33 remnux kata[14435]: shim management http server starts +Jul 17 11:56:33 remnux kata[14435]: mgmt-svr: binding to path unix:///run/kata/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/shim-monitor.sock +Jul 17 11:56:33 remnux kata[14435]: Preparing QEMU VM +Jul 17 11:56:33 remnux kata[14435]: QemuInner::hypervisor_config() +Jul 17 11:56:33 remnux kata[14435]: prepare vm socket config for sandbox. +Jul 17 11:56:33 remnux kata[14435]: QemuInner::hypervisor_config() +Jul 17 11:56:33 remnux kata[14435]: QemuInner::hypervisor_config() +Jul 17 11:56:33 remnux kata[14435]: QemuInner::hypervisor_config() +Jul 17 11:56:33 remnux kata[14435]: QemuInner::hypervisor_config() +Jul 17 11:56:33 remnux kata[14435]: QemuInner::hypervisor_config() +Jul 17 11:56:33 remnux kata[14435]: QemuInner::hypervisor_config() +Jul 17 11:56:33 remnux kata[14435]: QemuInner::hypervisor_config() +Jul 17 11:56:33 remnux kata[14435]: no pod devices to prepare for sandbox. +Jul 17 11:56:33 remnux kata[14435]: QemuInner::hypervisor_config() +Jul 17 11:56:33 remnux kata[14435]: No PCIe ports available for VM. +Jul 17 11:56:33 remnux kata[14435]: QemuInner::add_device() Vsock(VsockDevice { id: "58d97fa93010fe", config: VsockConfig { guest_cid: 4294967295 } }) +Jul 17 11:56:33 remnux kata[14435]: QemuInner::hypervisor_config() +Jul 17 11:56:33 remnux kata[14435]: QemuInner::hypervisor_config() +Jul 17 11:56:33 remnux kata[14435]: QemuInner::hypervisor_config() +Jul 17 11:56:33 remnux kata[14435]: QemuInner::add_device() ShareFs(ShareFsDevice { device_id: "92aaa03ec6e34bb", config: ShareFsConfig { host_shared_path: "/run/kata-containers/shared/sandboxes/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/ro", fs_type: "virtio-fs", sock_path: "/run/kata/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/root/virtiofsd.sock", mount_tag: "kataShared", queue_size: 1024, queue_num: 1, options: [], mount_config: None } }) +Jul 17 11:56:33 remnux kata[14435]: QemuInner::hypervisor_config() +Jul 17 11:56:33 remnux kata[14435]: QemuInner::get_vmm_master_tid() +Jul 17 11:56:33 remnux kata[14435]: source: virtiofsd [2026-07-17T15:56:33Z WARN virtiofsd] Use of deprecated option format '-o': Please specify options without it (e.g., '--cache auto' instead of '-o cache=auto') +Jul 17 11:56:33 remnux containerd[9105]: time="2026-07-17T11:56:33.190340331-04:00" level=error msg="get state for f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562" error="Others(\"failed to handle message handler TaskRequest\\n\\nCaused by:\\n 0: state process\\n 1: qemu process not running\\n\\nStack backtrace:\\n 0: anyhow::error::::msg\\n 1: ::get_vmm_master_tid::{{closure}}\\n 2: virt_container::container_manager::manager::VirtContainerManager::get_vmm_master_tid::{{closure}}\\n 3: ::state_process::{{closure}}::{{closure}}\\n 4: ::state_process::{{closure}}\\n 5: runtimes::manager::RuntimeHandlerManager::handler_task_request::{{closure}}::{{closure}}\\n 6: runtimes::manager::RuntimeHandlerManager::handler_task_message::{{closure}}::{{closure}}\\n 7: runtimes::manager::RuntimeHandlerManager::handler_task_message::{{closure}}\\n 8: ::state::{{closure}}\\n 9: ::handler::{{closure}}\\n 10: ttrpc::asynchronous::server::HandlerContext::handle_request::{{closure}}\\n 11: ::handle_msg::{{closure}}::{{closure}}\\n 12: tokio::runtime::task::raw::poll\\n 13: tokio::runtime::scheduler::multi_thread::worker::Context::run_task\\n 14: tokio::runtime::task::raw::poll\\n 15: std::sys::backtrace::__rust_begin_short_backtrace\\n 16: core::ops::function::FnOnce::call_once{{vtable.shim}}\\n 17: std::sys::thread::unix::Thread::new::thread_start\"): unknown" +Jul 17 11:56:33 remnux containerd[9105]: time="2026-07-17T11:56:33.190454758-04:00" level=warning msg="unknown status" status=0 +Jul 17 11:56:33 remnux kata[14435]: QemuInner::get_vmm_master_tid() +Jul 17 11:56:33 remnux kata[14435]: source: virtiofsd [2026-07-17T15:56:33Z INFO virtiofsd] Waiting for vhost-user socket connection... +Jul 17 11:56:33 remnux kata[14435]: start virtiofsd successfully +Jul 17 11:56:33 remnux kata[14435]: sandbox bindmounts empty, just skip it. +Jul 17 11:56:33 remnux kata[14435]: QemuInner::add_device() Block(BlockDevice { device_id: "1a702eafadeda4", attach_count: 1, config: BlockConfig { path_on_host: "/opt/kata/share/kata-containers/kata-ubuntu-noble.image", is_readonly: true, no_drop: false, format: Raw, is_direct: None, index: 0, blkdev_aio: IoUring, driver_option: "nvdimm", virt_path: "/dev/pmem0", pci_path: None, scsi_addr: None, ccw_addr: None, attach_count: 0, major: 0, minor: 0, queue_size: 0, num_queues: 0, logical_sector_size: 0, physical_sector_size: 0 } }) +Jul 17 11:56:33 remnux kata[14435]: Starting QEMU VM +Jul 17 11:56:33 remnux kata[14435]: qemu args: -name sandbox-f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562 -kernel /opt/kata/share/kata-containers/vmlinux-6.18.35-197 -append reboot=k panic=1 systemd.unit=kata-containers.target systemd.mask=systemd-networkd.service systemd.mask=systemd-networkd.socket root=/dev/pmem0p1 rootflags=dax,data=ordered,errors=remount-ro ro rootfstype=ext4 agent.cdh_api_timeout=50 cgroup_no_v1=all systemd.unified_cgroup_hierarchy=1 selinux=0 console=hvc0 -smp 1 -machine q35,accel=kvm,nvdimm=on,kernel_irqchip=on -cpu host,pmu=off -m 2G,slots=10,maxmem=7935M -object memory-backend-file,id=entire-guest-memory-share,mem-path=/dev/shm,size=2G,share=on,prealloc=off,readonly=off -qmp unix:fd=16,server=on,wait=off -rtc base=utc,clock=host,driftfix=slew -object rng-random,id=rng0,filename=/dev/urandom -device virtio-rng-pci,rng=rng0 -device pci-bridge,bus=pcie.0,id=pci-bridge-0,chassis_nr=1,shpc=off,addr=2,io-reserve=4k,mem-reserve=1m,pref64-reserve=1m -device virtio-scsi-pci,id=scsi0,disable-modern=true -device vhost-vsock-pci,disable-modern=true,vhostfd=17,guest-cid=3252076916 -chardev socket,id=virtiofsd-chardev,path=/run/kata/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/root/virtiofsd.sock -device vhost-user-fs-pci,chardev=virtiofsd-chardev,tag=kataShared,queue-size=1024 -numa node,memdev=entire-guest-memory-share -object memory-backend-file,id=TODO,mem-path=/opt/kata/share/kata-containers/kata-ubuntu-noble.image,size=256M,share=off,prealloc=off,readonly=on -device nvdimm,memdev=TODO,unarmed=on -device virtio-serial-pci,id=serial0 -device virtconsole,id=console0,chardev=charconsole0 -chardev socket,id=charconsole0,server=on,wait=off,path=/run/kata/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/root/console.sock -vga none -no-user-config -nodefaults -nographic -no-reboot +Jul 17 11:56:33 remnux kata[14435]: qemu cmd: Command { std: "/opt/kata/bin/qemu-system-x86_64" "-name" "sandbox-f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562" "-kernel" "/opt/kata/share/kata-containers/vmlinux-6.18.35-197" "-append" "reboot=k panic=1 systemd.unit=kata-containers.target systemd.mask=systemd-networkd.service systemd.mask=systemd-networkd.socket root=/dev/pmem0p1 rootflags=dax,data=ordered,errors=remount-ro ro rootfstype=ext4 agent.cdh_api_timeout=50 cgroup_no_v1=all systemd.unified_cgroup_hierarchy=1 selinux=0 console=hvc0" "-smp" "1" "-machine" "q35,accel=kvm,nvdimm=on,kernel_irqchip=on" "-cpu" "host,pmu=off" "-m" "2G,slots=10,maxmem=7935M" "-object" "memory-backend-file,id=entire-guest-memory-share,mem-path=/dev/shm,size=2G,share=on,prealloc=off,readonly=off" "-qmp" "unix:fd=16,server=on,wait=off" "-rtc" "base=utc,clock=host,driftfix=slew" "-object" "rng-random,id=rng0,filename=/dev/urandom" "-device" "virtio-rng-pci,rng=rng0" "-device" "pci-bridge,bus=pcie.0,id=pci-bridge-0,chassis_nr=1,shpc=off,addr=2,io-reserve=4k,mem-reserve=1m,pref64-reserve=1m" "-device" "virtio-scsi-pci,id=scsi0,disable-modern=true" "-device" "vhost-vsock-pci,disable-modern=true,vhostfd=17,guest-cid=3252076916" "-chardev" "socket,id=virtiofsd-chardev,path=/run/kata/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/root/virtiofsd.sock" "-device" "vhost-user-fs-pci,chardev=virtiofsd-chardev,tag=kataShared,queue-size=1024" "-numa" "node,memdev=entire-guest-memory-share" "-object" "memory-backend-file,id=TODO,mem-path=/opt/kata/share/kata-containers/kata-ubuntu-noble.image,size=256M,share=off,prealloc=off,readonly=on" "-device" "nvdimm,memdev=TODO,unarmed=on" "-device" "virtio-serial-pci,id=serial0" "-device" "virtconsole,id=console0,chardev=charconsole0" "-chardev" "socket,id=charconsole0,server=on,wait=off,path=/run/kata/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/root/console.sock" "-vga" "none" "-no-user-config" "-nodefaults" "-nographic" "-no-reboot", kill_on_drop: false } +Jul 17 11:56:33 remnux kata[14435]: qemu process started +Jul 17 11:56:33 remnux kata[14435]: source: virtiofsd [2026-07-17T15:56:33Z INFO virtiofsd] Client connected, servicing requests +Jul 17 11:56:33 remnux kata[14435]: QMP initialized: QMP { + version: VersionInfo { + package: "kata-static", + qemu: VersionTriple { + major: 11, + micro: 1, + minor: 0, + }, + }, + capabilities: [ + Unknown( + String("oob"), + ), + ], + } +Jul 17 11:56:33 remnux kata[14435]: start vm +Jul 17 11:56:33 remnux kata[14435]: QemuInner::get_vmm_master_tid() +Jul 17 11:56:33 remnux kata[14435]: QemuInner::get_vmm_master_tid(): returning 14446 +Jul 17 11:56:33 remnux kata[14435]: starting reading qemu stderr +Jul 17 11:56:33 remnux kata[14435]: execute hook Hook { path: "/usr/local/bin/nerdctl", args: Some(["/usr/local/bin/nerdctl", "internal", "oci-hook", "createRuntime"]), env: Some(["COLORTERM=truecolor", "XAUTHORITY=/run/user/1000/gdm/Xauthority", "LANG=en_US.UTF-8", "LS_COLORS=rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:mi=00:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arc=01;31:*.arj=01;31:*.taz=01;31:*.lha=01;31:*.lz4=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.tzo=01;31:*.t7z=01;31:*.zip=01;31:*.z=01;31:*.dz=01;31:*.gz=01;31:*.lrz=01;31:*.lz=01;31:*.lzo=01;31:*.xz=01;31:*.zst=01;31:*.tzst=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.war=01;31:*.ear=01;31:*.sar=01;31:*.rar=01;31:*.alz=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.cab=01;31:*.wim=01;31:*.swm=01;31:*.dwm=01;31:*.esd=01;31:*.jpg=01;35:*.jpeg=01;35:*.mjpg=01;35:*.mjpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.webm=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=00;36:*.au=00;36:*.flac=00;36:*.m4a=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.oga=00;36:*.opus=00;36:*.spx=00;36:*.xspf=00;36:", "TERM=xterm-256color", "DISPLAY=:0", "LC_ALL=C", "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin", "MAIL=/var/mail/root", "LOGNAME=root", "USER=root", "HOME=/root", "SHELL=/bin/bash", "SUDO_COMMAND=/usr/bin/timeout --foreground --kill-after=15s 120 nerdctl run --rm --runtime=io.containerd.kata.v2 --privileged -v /tmp:/host_tmp alpine:3.20 sh -c echo \"ATTEMPTED OVERWRITE FROM KATA\" > /host_tmp/lab12-target 2>&1; cat /host_tmp/lab12-target; exit 0", "SUDO_USER=remnux", "SUDO_UID=1000", "SUDO_GID=1000", "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin:/usr/sbin:/sbin"]), timeout: None } +Jul 17 11:56:33 remnux kata[14435]: exit status of hook Hook { path: "/usr/local/bin/nerdctl", args: Some(["/usr/local/bin/nerdctl", "internal", "oci-hook", "createRuntime"]), env: Some(["COLORTERM=truecolor", "XAUTHORITY=/run/user/1000/gdm/Xauthority", "LANG=en_US.UTF-8", "LS_COLORS=rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:mi=00:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arc=01;31:*.arj=01;31:*.taz=01;31:*.lha=01;31:*.lz4=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.tzo=01;31:*.t7z=01;31:*.zip=01;31:*.z=01;31:*.dz=01;31:*.gz=01;31:*.lrz=01;31:*.lz=01;31:*.lzo=01;31:*.xz=01;31:*.zst=01;31:*.tzst=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.war=01;31:*.ear=01;31:*.sar=01;31:*.rar=01;31:*.alz=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.cab=01;31:*.wim=01;31:*.swm=01;31:*.dwm=01;31:*.esd=01;31:*.jpg=01;35:*.jpeg=01;35:*.mjpg=01;35:*.mjpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.webm=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=00;36:*.au=00;36:*.flac=00;36:*.m4a=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.oga=00;36:*.opus=00;36:*.spx=00;36:*.xspf=00;36:", "TERM=xterm-256color", "DISPLAY=:0", "LC_ALL=C", "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin", "MAIL=/var/mail/root", "LOGNAME=root", "USER=root", "HOME=/root", "SHELL=/bin/bash", "SUDO_COMMAND=/usr/bin/timeout --foreground --kill-after=15s 120 nerdctl run --rm --runtime=io.containerd.kata.v2 --privileged -v /tmp:/host_tmp alpine:3.20 sh -c echo \"ATTEMPTED OVERWRITE FROM KATA\" > /host_tmp/lab12-target 2>&1; cat /host_tmp/lab12-target; exit 0", "SUDO_USER=remnux", "SUDO_UID=1000", "SUDO_GID=1000", "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin:/usr/sbin:/sbin"]), timeout: None } : Exited(0) +Jul 17 11:56:33 remnux kata[14435]: hook Hook { path: "/usr/local/bin/nerdctl", args: Some(["/usr/local/bin/nerdctl", "internal", "oci-hook", "createRuntime"]), env: Some(["COLORTERM=truecolor", "XAUTHORITY=/run/user/1000/gdm/Xauthority", "LANG=en_US.UTF-8", "LS_COLORS=rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:mi=00:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arc=01;31:*.arj=01;31:*.taz=01;31:*.lha=01;31:*.lz4=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.tzo=01;31:*.t7z=01;31:*.zip=01;31:*.z=01;31:*.dz=01;31:*.gz=01;31:*.lrz=01;31:*.lz=01;31:*.lzo=01;31:*.xz=01;31:*.zst=01;31:*.tzst=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.war=01;31:*.ear=01;31:*.sar=01;31:*.rar=01;31:*.alz=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.cab=01;31:*.wim=01;31:*.swm=01;31:*.dwm=01;31:*.esd=01;31:*.jpg=01;35:*.jpeg=01;35:*.mjpg=01;35:*.mjpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.webm=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=00;36:*.au=00;36:*.flac=00;36:*.m4a=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.oga=00;36:*.opus=00;36:*.spx=00;36:*.xspf=00;36:", "TERM=xterm-256color", "DISPLAY=:0", "LC_ALL=C", "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin", "MAIL=/var/mail/root", "LOGNAME=root", "USER=root", "HOME=/root", "SHELL=/bin/bash", "SUDO_COMMAND=/usr/bin/timeout --foreground --kill-after=15s 120 nerdctl run --rm --runtime=io.containerd.kata.v2 --privileged -v /tmp:/host_tmp alpine:3.20 sh -c echo \"ATTEMPTED OVERWRITE FROM KATA\" > /host_tmp/lab12-target 2>&1; cat /host_tmp/lab12-target; exit 0", "SUDO_USER=remnux", "SUDO_UID=1000", "SUDO_GID=1000", "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin:/usr/sbin:/sbin"]), timeout: None } succeeds +Jul 17 11:56:33 remnux kata[14435]: hook /usr/local/bin/nerdctl finished +Jul 17 11:56:33 remnux kata[14435]: QemuInner::hypervisor_config() +Jul 17 11:56:33 remnux kata[14435]: get network entity from config NetworkWithNetNsConfig { network_model: "tcfilter", netns_path: "/var/run/netns/cnitest-6d89cd7e-b3a5-50ef-9dfe-10c50694e440", queues: 1, network_created: true } tid Pid(14565) +Jul 17 11:56:33 remnux kata[14435]: set netns from old File { fd: 24, path: "net:[4026531840]", read: true, write: false } to new File { fd: 25, path: "/run/netns/cnitest-6d89cd7e-b3a5-50ef-9dfe-10c50694e440", read: true, write: false } tid 14565 +Jul 17 11:56:33 remnux kata[14435]: set netns from old File { fd: 26, path: "net:[4026532225]", read: true, write: false } to new File { fd: 27, path: "/run/netns/cnitest-6d89cd7e-b3a5-50ef-9dfe-10c50694e440", read: true, write: false } tid 14565 +Jul 17 11:56:33 remnux kata[14435]: veth network interface found: eth0 +Jul 17 11:56:33 remnux kata[14435]: create link with fds [File { fd: 27, path: "/dev/net/tun", read: true, write: true }] +Jul 17 11:56:33 remnux kata[14435]: network info NetworkInfoFromLink { interface: Interface { device: "eth0", name: "eth0", ip_addresses: [IPAddress { family: V4, address: "10.4.0.24", mask: "24" }, IPAddress { family: V6, address: "fe80::4cb9:4dff:fe46:4a44", mask: "64" }], mtu: 1500, hw_addr: "4e:b9:4d:46:4a:44", device_path: "", field_type: "veth", raw_flags: 0 }, neighs: [ARPNeighbor { to_ip_address: Some(IPAddress { family: V6, address: "ff02::16", mask: "" }), device: "eth0", ll_addr: "33:33:00:00:00:16", state: 64, flags: 0 }, ARPNeighbor { to_ip_address: Some(IPAddress { family: V6, address: "ff02::2", mask: "" }), device: "eth0", ll_addr: "33:33:00:00:00:02", state: 64, flags: 0 }], routes: [Route { dest: "", gateway: "10.4.0.1", device: "eth0", source: "", scope: 0, family: V4, flags: 0, mtu: 0 }] } +Jul 17 11:56:33 remnux kata[14435]: set netns to old 26 +Jul 17 11:56:33 remnux kata[14435]: set netns to old 24 +Jul 17 11:56:33 remnux kata[14435]: set netns from old File { fd: 24, path: "net:[4026531840]", read: true, write: false } to new File { fd: 26, path: "/run/netns/cnitest-6d89cd7e-b3a5-50ef-9dfe-10c50694e440", read: true, write: false } tid 14565 +Jul 17 11:56:33 remnux kata[14435]: QemuInner::add_device() Network(NetworkDevice { device_id: "d8a4792699f4cd5", config: NetworkConfig { index: 0, host_dev_name: "tap0_kata", virt_iface_name: "eth0", guest_mac: Some(4e:b9:4d:46:4a:44), queue_size: 0, queue_num: 0, use_shared_irq: None, use_generic_irq: None, allow_duplicate_mac: false } }) +Jul 17 11:56:33 remnux kata[14435]: found PCI bridge: pci-bridge-0 +Jul 17 11:56:33 remnux kata[14435]: already occupied slots on bridge pci-bridge-0: [] +Jul 17 11:56:33 remnux kata[14435]: found free slot on bridge pci-bridge-0: 0 +Jul 17 11:56:33 remnux kata[14435]: passing fd 25 as fd0 +Jul 17 11:56:33 remnux kata[14435]: sendmsg() result: Ok( + 56, + ) +Jul 17 11:56:33 remnux kata[14435]: successfully passed fd0 (25) +Jul 17 11:56:33 remnux kata[14435]: passing fd 27 as vhostfd0 +Jul 17 11:56:33 remnux kata[14435]: sendmsg() result: Ok( + 61, + ) +Jul 17 11:56:33 remnux kata[14435]: successfully passed vhostfd0 (27) +Jul 17 11:56:33 remnux kata[14435]: set netns to old 24 +Jul 17 11:56:33 remnux kata[14435]: QemuInner::get_agent_socket() +Jul 17 11:56:33 remnux kata[14435]: begin to connect agent "vsock://3252076916" +Jul 17 11:56:33 remnux kata[14435]: try to connect agent server through Vsock { vsock_cid: 3252076916, port: 1024 } +Jul 17 11:56:33 remnux kata[14435]: Wait QEMU VM +Jul 17 11:56:40 remnux kata[14435]: vsock: connected to Vsock { vsock_cid: 3252076916, port: 1024 } after 9 attempts +Jul 17 11:56:40 remnux kata[14435]: get stream raw fd 16 with socket address: "vsock://3252076916" and server_port 1024 +Jul 17 11:56:40 remnux kata[14435]: update interface Interface { device: "eth0", name: "eth0", ip_addresses: [IPAddress { family: V4, address: "10.4.0.24", mask: "24" }, IPAddress { family: V6, address: "fe80::4cb9:4dff:fe46:4a44", mask: "64" }], mtu: 1500, hw_addr: "4e:b9:4d:46:4a:44", device_path: "", field_type: "veth", raw_flags: 0 } +Jul 17 11:56:40 remnux kata[14435]: try to connect to agent-log +Jul 17 11:56:40 remnux kata[14435]: update routes [Route { dest: "", gateway: "10.4.0.1", device: "eth0", source: "", scope: 0, family: V4, flags: 0, mtu: 0 }] +Jul 17 11:56:40 remnux kata[14435]: QemuInner::hypervisor_config() +Jul 17 11:56:40 remnux kata[14435]: QemuInner::set_guest_memory_block_size(): block size set to 134217728 +Jul 17 11:56:40 remnux kata[14435]: QemuInner::hypervisor_config() +Jul 17 11:56:40 remnux kata[14435]: QemuInner::hypervisor_config() +Jul 17 11:56:40 remnux kata[14435]: memory block size is 134217728, memory probe support false +Jul 17 11:56:40 remnux kata[14435]: oom watcher start +Jul 17 11:56:40 remnux kata[14435]: start runtime keep alive +Jul 17 11:56:40 remnux kata[14435]: QemuInner::hypervisor_config() +Jul 17 11:56:40 remnux kata[14435]: QemuInner::get_vmm_master_tid() +Jul 17 11:56:40 remnux kata[14435]: QemuInner::get_vmm_master_tid(): returning 14446 +Jul 17 11:56:40 remnux kata[14435]: QemuInner::get_ns_path() +Jul 17 11:56:40 remnux kata[14435]: set netns from old File { fd: 17, path: "net:[4026531840]", read: true, write: false } to new File { fd: 22, path: "net:[4026531840]", read: true, write: false } tid 14437 +Jul 17 11:56:40 remnux kata[14435]: set netns to old 17 +Jul 17 11:56:40 remnux kata[14435]: BUG: unknown mount flag: "index=off" +Jul 17 11:56:40 remnux kata[14435]: BUG: unknown mount flag: "workdir=/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/56/work" +Jul 17 11:56:40 remnux kata[14435]: BUG: unknown mount flag: "upperdir=/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/56/fs" +Jul 17 11:56:40 remnux kata[14435]: BUG: unknown mount flag: "lowerdir=/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/1/fs" +Jul 17 11:56:40 remnux kata[14435]: oci mount is : [Mount { destination: "/proc", typ: Some("proc"), source: Some("proc"), options: Some(["nosuid", "noexec", "nodev"]) }, Mount { destination: "/dev", typ: Some("tmpfs"), source: Some("tmpfs"), options: Some(["nosuid", "strictatime", "mode=755", "size=65536k"]) }, Mount { destination: "/sys", typ: Some("sysfs"), source: Some("sysfs"), options: Some(["nosuid", "noexec", "nodev", "rw"]) }, Mount { destination: "/host_tmp", typ: Some("none"), source: Some("/tmp"), options: Some(["rbind"]) }, Mount { destination: "/dev/pts", typ: Some("devpts"), source: Some("devpts"), options: Some(["nosuid", "noexec", "newinstance", "ptmxmode=0666", "mode=0620", "gid=5"]) }, Mount { destination: "/dev/shm", typ: Some("tmpfs"), source: Some("shm"), options: Some(["nosuid", "noexec", "nodev", "mode=1777", "size=65536k"]) }, Mount { destination: "/dev/mqueue", typ: Some("mqueue"), source: Some("mqueue"), options: Some(["nosuid", "noexec", "nodev"]) }, Mount { destination: "/sys/fs/cgroup", typ: Some("cgroup"), source: Some("cgroup"), options: Some(["rw", "nosuid", "noexec", "nodev"]) }, Mount { destination: "/etc/resolv.conf", typ: Some("bind"), source: Some("/var/lib/nerdctl/1935db59/containers/default/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/resolv.conf"), options: Some(["bind", "rprivate"]) }, Mount { destination: "/etc/hosts", typ: Some("bind"), source: Some("/var/lib/nerdctl/1935db59/etchosts/default/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/hosts"), options: Some(["bind", "rprivate"]) }, Mount { destination: "/etc/hostname", typ: Some("bind"), source: Some("/var/lib/nerdctl/1935db59/containers/default/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/hostname"), options: Some(["bind", "rprivate"]) }] +Jul 17 11:56:40 remnux kata[14435]: wait on container terminated +Jul 17 11:56:40 remnux kata[14435]: container terminated +Jul 17 11:56:40 remnux kata[14435]: stop container: agent remove container failed: rpc status: Status { code: INTERNAL, message: "Invalid container id\n\nStack backtrace:\n 0: \n 1: \n 2: \n 3: \n 4: \n 5: \n 6: \n 7: \n 8: \n 9: \n 10: \n 11: \n 12: \n 13: \n 14: \n 15: ", details: [], special_fields: SpecialFields { unknown_fields: UnknownFields { fields: None }, cached_size: CachedSize { size: 0 } } } +Jul 17 11:56:40 remnux kata[14435]: Cleaning up DefaultVolume is still unimplemented. +Jul 17 11:56:40 remnux kata[14435]: Cleaning up DefaultVolume is still unimplemented. +Jul 17 11:56:40 remnux kata[14435]: Cleaning up DefaultVolume is still unimplemented. +Jul 17 11:56:40 remnux kata[14435]: The path will be umounted due to no references, host_source = /tmp +Jul 17 11:56:40 remnux kata[14435]: lazy umount for /run/kata-containers/shared/sandboxes/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/rw/passthrough/sandbox-0ab98b72-tmp +Jul 17 11:56:40 remnux kata[14435]: Cleaning up DefaultVolume is still unimplemented. +Jul 17 11:56:40 remnux kata[14435]: Cleaning up DefaultVolume is still unimplemented. +Jul 17 11:56:40 remnux kata[14435]: Cleaning up DefaultVolume is still unimplemented. +Jul 17 11:56:40 remnux kata[14435]: The path will be umounted due to no references, host_source = /var/lib/nerdctl/1935db59/containers/default/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/resolv.conf +Jul 17 11:56:40 remnux kata[14435]: lazy umount for /run/kata-containers/shared/sandboxes/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/rw/passthrough/sandbox-82a80d1b-resolv.conf +Jul 17 11:56:40 remnux kata[14435]: The path will be umounted due to no references, host_source = /var/lib/nerdctl/1935db59/etchosts/default/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/hosts +Jul 17 11:56:40 remnux kata[14435]: lazy umount for /run/kata-containers/shared/sandboxes/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/rw/passthrough/sandbox-1a5128c6-hosts +Jul 17 11:56:40 remnux kata[14435]: The path will be umounted due to no references, host_source = /var/lib/nerdctl/1935db59/containers/default/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/hostname +Jul 17 11:56:40 remnux kata[14435]: lazy umount for /run/kata-containers/shared/sandboxes/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/rw/passthrough/sandbox-2308d1cf-hostname +Jul 17 11:56:40 remnux kata[14435]: lazy umount for /run/kata-containers/shared/sandboxes/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/rw/passthrough/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/rootfs +Jul 17 11:56:40 remnux kata[14435]: lazy umount for /run/containerd/io.containerd.runtime.v2.task/default/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/rootfs +Jul 17 11:56:40 remnux kata[14435]: shutdown +Jul 17 11:56:40 remnux kata[14435]: begin stop sandbox +Jul 17 11:56:40 remnux kata[14435]: Stopping QEMU VM +Jul 17 11:56:40 remnux kata[14435]: QemuInner::stop_vm(): kill()'ing qemu +Jul 17 11:56:40 remnux kata[14435]: oom watcher cancelled, sandbox is stopping +Jul 17 11:56:40 remnux kata[14435]: Failed to terminate pending RPC: the request has returned +Jul 17 11:56:40 remnux kata[14435]: finished reading qemu stderr +Jul 17 11:56:40 remnux kata[14435]: source: virtiofsd [2026-07-17T15:56:40Z INFO virtiofsd] Client disconnected, shutting down +Jul 17 11:56:40 remnux kata[14435]: wait virtiofsd Ok(ExitStatus(unix_wait_status(0))) +Jul 17 11:56:40 remnux kata[14435]: wait sandbox +Jul 17 11:56:40 remnux kata[14435]: sandbox stopped +Jul 17 11:56:40 remnux kata[14435]: delete hypervisor +Jul 17 11:56:40 remnux kata[14435]: QemuInner::cleanup() +Jul 17 11:56:40 remnux kata[14435]: resource clean up +Jul 17 11:56:40 remnux kata[14435]: set netns from old File { fd: 13, path: "net:[4026531840]", read: true, write: false } to new File { fd: 15, path: "/run/netns/cnitest-6d89cd7e-b3a5-50ef-9dfe-10c50694e440", read: true, write: false } tid 14436 +Jul 17 11:56:40 remnux kata[14435]: failed to detach endpoint: del network model failed. +Jul 17 11:56:40 remnux kata[14435]: set netns to old 13 +Jul 17 11:56:40 remnux kata[14435]: failed to remove network: failed to remove netns path +Jul 17 11:56:40 remnux kata[14435]: sandbox bindmounts empty, just skip it. +Jul 17 11:56:40 remnux kata[14435]: shutdown virtiofsd pid 14441 +Jul 17 11:56:40 remnux kata[14435]: stop monitor +Jul 17 11:56:40 remnux kata[14435]: stop runtime keep alive +Jul 17 11:56:40 remnux kata[14435]: stop agent +Jul 17 11:56:40 remnux kata[14435]: abort log forwarder thread +Jul 17 11:56:40 remnux kata[14435]: send shutdown message +Jul 17 11:56:40 remnux kata[14435]: receive action Shutdown +Jul 17 11:56:40 remnux kata[14435]: end to run service +Jul 17 11:56:40 remnux containerd[9105]: time="2026-07-17T11:56:40.675389392-04:00" level=info msg="shim disconnected" id=f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562 namespace=default +Jul 17 11:56:40 remnux containerd[9105]: time="2026-07-17T11:56:40.675440062-04:00" level=warning msg="cleaning up after shim disconnected" id=f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562 namespace=default +Jul 17 11:56:40 remnux containerd[9105]: time="2026-07-17T11:56:40.675444896-04:00" level=info msg="cleaning up dead shim" namespace=default diff --git a/submissions/labs/lab12/results/containerd-kata-config.txt b/submissions/labs/lab12/results/containerd-kata-config.txt new file mode 100644 index 000000000..ad229eca5 --- /dev/null +++ b/submissions/labs/lab12/results/containerd-kata-config.txt @@ -0,0 +1,2 @@ +[plugins.'io.containerd.grpc.v1.cri'.containerd.runtimes.kata] + runtime_type = 'io.containerd.kata.v2' diff --git a/submissions/labs/lab12/results/containerd-status-after-kata.txt b/submissions/labs/lab12/results/containerd-status-after-kata.txt new file mode 100644 index 000000000..821bdda80 --- /dev/null +++ b/submissions/labs/lab12/results/containerd-status-after-kata.txt @@ -0,0 +1,23 @@ +* containerd.service - containerd container runtime + Loaded: loaded (/lib/systemd/system/containerd.service; enabled; vendor preset: enabled) + Active: active (running) since Fri 2026-07-17 11:55:12 EDT; 3s ago + Docs: https://containerd.io + Process: 9104 ExecStartPre=/sbin/modprobe overlay (code=exited, status=0/SUCCESS) + Main PID: 9105 (containerd) + Tasks: 23 + Memory: 78.2M + CGroup: /system.slice/containerd.service + |-1998 /usr/bin/containerd-shim-runc-v2 -namespace moby -id 0f1b51a1c76dbcdebfae45ab3a79b301b783e379fcd4dd86ff696c001332f1c5 -address /run/containerd/containerd.sock + |-8927 /opt/kata/runtime-rs/bin/containerd-shim-kata-v2 -id 0dead0d386bb8bfe4986081886c24d6044d66816d0dafe7e85b76bc1ebca84d1 -namespace default -address /run/containerd/containerd.sock -publish-binary /usr/bin/containerd + `-9105 /usr/bin/containerd + +Jul 17 11:55:12 remnux containerd[9105]: time="2026-07-17T11:55:12.206199536-04:00" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="skip plugin: tracing endpoint not configured" type=io.containerd.tracing.processor.v1 +Jul 17 11:55:12 remnux containerd[9105]: time="2026-07-17T11:55:12.206208725-04:00" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 +Jul 17 11:55:12 remnux containerd[9105]: time="2026-07-17T11:55:12.206217871-04:00" level=info msg="skip loading plugin \"io.containerd.internal.v1.tracing\"..." error="skip plugin: tracing endpoint not configured" type=io.containerd.internal.v1 +Jul 17 11:55:12 remnux containerd[9105]: time="2026-07-17T11:55:12.206538563-04:00" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 +Jul 17 11:55:12 remnux containerd[9105]: time="2026-07-17T11:55:12.206555713-04:00" level=info msg="loading plugin \"io.containerd.nri.v1.nri\"..." type=io.containerd.nri.v1 +Jul 17 11:55:12 remnux containerd[9105]: time="2026-07-17T11:55:12.206564937-04:00" level=info msg="NRI interface is disabled by configuration." +Jul 17 11:55:12 remnux containerd[9105]: time="2026-07-17T11:55:12.206716785-04:00" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc +Jul 17 11:55:12 remnux containerd[9105]: time="2026-07-17T11:55:12.206745517-04:00" level=info msg=serving... address=/run/containerd/containerd.sock +Jul 17 11:55:12 remnux containerd[9105]: time="2026-07-17T11:55:12.206788777-04:00" level=info msg="containerd successfully booted in 0.042209s" +Jul 17 11:55:12 remnux systemd[1]: Started containerd container runtime. diff --git a/submissions/labs/lab12/results/containerd-status-before-kata.txt b/submissions/labs/lab12/results/containerd-status-before-kata.txt new file mode 100644 index 000000000..5d35d468f --- /dev/null +++ b/submissions/labs/lab12/results/containerd-status-before-kata.txt @@ -0,0 +1,23 @@ +* containerd.service - containerd container runtime + Loaded: loaded (/lib/systemd/system/containerd.service; enabled; vendor preset: enabled) + Active: active (running) since Fri 2026-07-17 11:55:09 EDT; 2s ago + Docs: https://containerd.io + Process: 9037 ExecStartPre=/sbin/modprobe overlay (code=exited, status=0/SUCCESS) + Main PID: 9038 (containerd) + Tasks: 23 + Memory: 78.3M + CGroup: /system.slice/containerd.service + |-1998 /usr/bin/containerd-shim-runc-v2 -namespace moby -id 0f1b51a1c76dbcdebfae45ab3a79b301b783e379fcd4dd86ff696c001332f1c5 -address /run/containerd/containerd.sock + |-8927 /opt/kata/runtime-rs/bin/containerd-shim-kata-v2 -id 0dead0d386bb8bfe4986081886c24d6044d66816d0dafe7e85b76bc1ebca84d1 -namespace default -address /run/containerd/containerd.sock -publish-binary /usr/bin/containerd + `-9038 /usr/bin/containerd + +Jul 17 11:55:09 remnux containerd[9038]: time="2026-07-17T11:55:09.942403933-04:00" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 +Jul 17 11:55:09 remnux containerd[9038]: time="2026-07-17T11:55:09.942414504-04:00" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="skip plugin: tracing endpoint not configured" type=io.containerd.tracing.processor.v1 +Jul 17 11:55:09 remnux containerd[9038]: time="2026-07-17T11:55:09.942424115-04:00" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 +Jul 17 11:55:09 remnux containerd[9038]: time="2026-07-17T11:55:09.942430837-04:00" level=info msg="skip loading plugin \"io.containerd.internal.v1.tracing\"..." error="skip plugin: tracing endpoint not configured" type=io.containerd.internal.v1 +Jul 17 11:55:09 remnux containerd[9038]: time="2026-07-17T11:55:09.942436127-04:00" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 +Jul 17 11:55:09 remnux containerd[9038]: time="2026-07-17T11:55:09.942442667-04:00" level=info msg="loading plugin \"io.containerd.nri.v1.nri\"..." type=io.containerd.nri.v1 +Jul 17 11:55:09 remnux containerd[9038]: time="2026-07-17T11:55:09.942448246-04:00" level=info msg="NRI interface is disabled by configuration." +Jul 17 11:55:09 remnux containerd[9038]: time="2026-07-17T11:55:09.942633379-04:00" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc +Jul 17 11:55:09 remnux containerd[9038]: time="2026-07-17T11:55:09.942656607-04:00" level=info msg=serving... address=/run/containerd/containerd.sock +Jul 17 11:55:09 remnux containerd[9038]: time="2026-07-17T11:55:09.942686346-04:00" level=info msg="containerd successfully booted in 0.028186s" diff --git a/submissions/labs/lab12/results/containerd-status-final.txt b/submissions/labs/lab12/results/containerd-status-final.txt new file mode 100644 index 000000000..e860cb365 --- /dev/null +++ b/submissions/labs/lab12/results/containerd-status-final.txt @@ -0,0 +1,22 @@ +● containerd.service - containerd container runtime + Loaded: loaded (/lib/systemd/system/containerd.service; enabled; vendor preset: enabled) + Active: active (running) since Fri 2026-07-17 12:00:20 EDT; 8s ago + Docs: https://containerd.io + Process: 14677 ExecStartPre=/sbin/modprobe overlay (code=exited, status=0/SUCCESS) + Main PID: 14678 (containerd) + Tasks: 23 + Memory: 82.3M + CGroup: /system.slice/containerd.service + ├─ 1998 /usr/bin/containerd-shim-runc-v2 -namespace moby -id 0f1b51a1c76dbcdebfae45ab3a79b301b783e379fcd4dd86ff696c001332f1c5 -address /run/containerd/containerd.sock + └─14678 /usr/bin/containerd + +Jul 17 12:00:28 remnux kata[14868]: stop monitor +Jul 17 12:00:28 remnux containerd[14678]: time="2026-07-17T12:00:28.864498811-04:00" level=info msg="shim disconnected" id=498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee namespace=default +Jul 17 12:00:28 remnux containerd[14678]: time="2026-07-17T12:00:28.864549080-04:00" level=warning msg="cleaning up after shim disconnected" id=498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee namespace=default +Jul 17 12:00:28 remnux containerd[14678]: time="2026-07-17T12:00:28.864556238-04:00" level=info msg="cleaning up dead shim" namespace=default +Jul 17 12:00:28 remnux kata[14868]: stop runtime keep alive +Jul 17 12:00:28 remnux kata[14868]: stop agent +Jul 17 12:00:28 remnux kata[14868]: abort log forwarder thread +Jul 17 12:00:28 remnux kata[14868]: send shutdown message +Jul 17 12:00:28 remnux kata[14868]: receive action Shutdown +Jul 17 12:00:28 remnux kata[14868]: end to run service diff --git a/submissions/labs/lab12/results/containerd-status.txt b/submissions/labs/lab12/results/containerd-status.txt new file mode 100644 index 000000000..d5ef0c3cb --- /dev/null +++ b/submissions/labs/lab12/results/containerd-status.txt @@ -0,0 +1,22 @@ +* containerd.service - containerd container runtime + Loaded: loaded (/lib/systemd/system/containerd.service; enabled; vendor preset: enabled) + Active: active (running) since Fri 2026-07-17 11:55:12 EDT; 1min 28s ago + Docs: https://containerd.io + Process: 9104 ExecStartPre=/sbin/modprobe overlay (code=exited, status=0/SUCCESS) + Main PID: 9105 (containerd) + Tasks: 24 + Memory: 88.2M + CGroup: /system.slice/containerd.service + |-1998 /usr/bin/containerd-shim-runc-v2 -namespace moby -id 0f1b51a1c76dbcdebfae45ab3a79b301b783e379fcd4dd86ff696c001332f1c5 -address /run/containerd/containerd.sock + `-9105 /usr/bin/containerd + +Jul 17 11:56:40 remnux kata[14435]: stop monitor +Jul 17 11:56:40 remnux kata[14435]: stop runtime keep alive +Jul 17 11:56:40 remnux kata[14435]: stop agent +Jul 17 11:56:40 remnux kata[14435]: abort log forwarder thread +Jul 17 11:56:40 remnux kata[14435]: send shutdown message +Jul 17 11:56:40 remnux kata[14435]: receive action Shutdown +Jul 17 11:56:40 remnux kata[14435]: end to run service +Jul 17 11:56:40 remnux containerd[9105]: time="2026-07-17T11:56:40.675389392-04:00" level=info msg="shim disconnected" id=f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562 namespace=default +Jul 17 11:56:40 remnux containerd[9105]: time="2026-07-17T11:56:40.675440062-04:00" level=warning msg="cleaning up after shim disconnected" id=f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562 namespace=default +Jul 17 11:56:40 remnux containerd[9105]: time="2026-07-17T11:56:40.675444896-04:00" level=info msg="cleaning up dead shim" namespace=default diff --git a/submissions/labs/lab12/results/containerd-version.txt b/submissions/labs/lab12/results/containerd-version.txt new file mode 100644 index 000000000..9cca35595 --- /dev/null +++ b/submissions/labs/lab12/results/containerd-version.txt @@ -0,0 +1 @@ +containerd github.com/containerd/containerd 1.7.24 diff --git a/submissions/labs/lab12/results/dev-diff.txt b/submissions/labs/lab12/results/dev-diff.txt new file mode 100644 index 000000000..859267027 --- /dev/null +++ b/submissions/labs/lab12/results/dev-diff.txt @@ -0,0 +1,7 @@ +--- /home/remnux/DevSecOps-Intro/labs/lab12/results/runc-devs.txt 2026-07-17 11:55:25.857191627 -0400 ++++ /home/remnux/DevSecOps-Intro/labs/lab12/results/kata-devs.txt 2026-07-17 11:55:32.264393747 -0400 +@@ -1,4 +1,3 @@ +-core + fd + full + mqueue diff --git a/submissions/labs/lab12/results/failure-context.txt b/submissions/labs/lab12/results/failure-context.txt new file mode 100644 index 000000000..21b009e58 --- /dev/null +++ b/submissions/labs/lab12/results/failure-context.txt @@ -0,0 +1,5 @@ +stage=original bind-mount bonus experiment +date=2026-07-17T11:56:40-04:00 +user=uid=1000(remnux) gid=1000(remnux) groups=1000(remnux),4(adm),24(cdrom),27(sudo),30(dip),46(plugdev),114(lpadmin),115(sambashare),133(wireshark),998(docker) +pwd=/home/remnux/DevSecOps-Intro +root=/home/remnux/DevSecOps-Intro diff --git a/submissions/labs/lab12/results/git-branch.txt b/submissions/labs/lab12/results/git-branch.txt new file mode 100644 index 000000000..ce90d0a09 --- /dev/null +++ b/submissions/labs/lab12/results/git-branch.txt @@ -0,0 +1 @@ +feature/lab12 diff --git a/submissions/labs/lab12/results/git-head.txt b/submissions/labs/lab12/results/git-head.txt new file mode 100644 index 000000000..d3c5257f4 --- /dev/null +++ b/submissions/labs/lab12/results/git-head.txt @@ -0,0 +1 @@ +7f777bf2b97dee0362254be52e4d9aba16948893 diff --git a/submissions/labs/lab12/results/git-status-after.txt b/submissions/labs/lab12/results/git-status-after.txt new file mode 100644 index 000000000..6621d919b --- /dev/null +++ b/submissions/labs/lab12/results/git-status-after.txt @@ -0,0 +1,44 @@ + M .gitignore + M labs/lab11/docker-compose.yml + M labs/lab12/scripts/install-kata-assets.sh + M labs/lab5/scripts/zap-auth.yaml +?? PR_BODY.md +?? lab11-results.tar.gz +?? lab12-results.tar.gz +?? lab6-scan-results.tar.gz +?? lab6-scan-results.tar.gz.sha256 +?? lab7-evidence.tar.gz +?? lab7-final-results.tar.gz +?? lab7-run.log +?? lab9-results-20260710-134049.tar.gz +?? lab9-results-20260710-134049/ +?? lab9-results-20260710-134616.tar.gz +?? lab9-results-20260710-134616/ +?? lab9-results-20260710-135010.tar.gz +?? lab9-results-20260710-135010/ +?? lab9-results-20260710-135239.tar.gz +?? lab9-results-20260710-135239/ +?? lab9-results-20260710-135541.tar.gz +?? lab9-results-20260710-135541/ +?? lab9-results-20260710-135841.tar.gz +?? lab9-results-20260710-135841/ +?? lab9-results-20260710-140103.tar.gz +?? lab9-results-20260710-140103/ +?? lab9-results-20260710-140418.tar.gz +?? lab9-results-20260710-140418/ +?? lab9-results-20260710-140713.tar.gz +?? lab9-results-20260710-140713/ +?? lab9-results-20260710-140952.tar.gz +?? lab9-results-20260710-140952/ +?? lab9-results-20260710-141244.tar.gz +?? lab9-results-20260710-141244/ +?? labs/lab11/results/ +?? labs/lab11/run-and-collect.sh +?? labs/lab11/scripts/ +?? labs/lab4/ +?? labs/lab5/analysis/ +?? labs/lab5/zap/ +?? labs/lab8/ +?? labs/lab9/analysis/ +?? vulnerability-db_v6.1.7_2026-06-18T00:59:35Z_1781769478.tar.zst +?? vulnerability-db_v6.1.7_2026-06-18T00:59:35Z_1781769478.tar.zst.aria2 diff --git a/submissions/labs/lab12/results/git-status-before.txt b/submissions/labs/lab12/results/git-status-before.txt new file mode 100644 index 000000000..6621d919b --- /dev/null +++ b/submissions/labs/lab12/results/git-status-before.txt @@ -0,0 +1,44 @@ + M .gitignore + M labs/lab11/docker-compose.yml + M labs/lab12/scripts/install-kata-assets.sh + M labs/lab5/scripts/zap-auth.yaml +?? PR_BODY.md +?? lab11-results.tar.gz +?? lab12-results.tar.gz +?? lab6-scan-results.tar.gz +?? lab6-scan-results.tar.gz.sha256 +?? lab7-evidence.tar.gz +?? lab7-final-results.tar.gz +?? lab7-run.log +?? lab9-results-20260710-134049.tar.gz +?? lab9-results-20260710-134049/ +?? lab9-results-20260710-134616.tar.gz +?? lab9-results-20260710-134616/ +?? lab9-results-20260710-135010.tar.gz +?? lab9-results-20260710-135010/ +?? lab9-results-20260710-135239.tar.gz +?? lab9-results-20260710-135239/ +?? lab9-results-20260710-135541.tar.gz +?? lab9-results-20260710-135541/ +?? lab9-results-20260710-135841.tar.gz +?? lab9-results-20260710-135841/ +?? lab9-results-20260710-140103.tar.gz +?? lab9-results-20260710-140103/ +?? lab9-results-20260710-140418.tar.gz +?? lab9-results-20260710-140418/ +?? lab9-results-20260710-140713.tar.gz +?? lab9-results-20260710-140713/ +?? lab9-results-20260710-140952.tar.gz +?? lab9-results-20260710-140952/ +?? lab9-results-20260710-141244.tar.gz +?? lab9-results-20260710-141244/ +?? labs/lab11/results/ +?? labs/lab11/run-and-collect.sh +?? labs/lab11/scripts/ +?? labs/lab4/ +?? labs/lab5/analysis/ +?? labs/lab5/zap/ +?? labs/lab8/ +?? labs/lab9/analysis/ +?? vulnerability-db_v6.1.7_2026-06-18T00:59:35Z_1781769478.tar.zst +?? vulnerability-db_v6.1.7_2026-06-18T00:59:35Z_1781769478.tar.zst.aria2 diff --git a/submissions/labs/lab12/results/host-kernel-release.txt b/submissions/labs/lab12/results/host-kernel-release.txt new file mode 100644 index 000000000..4caee941d --- /dev/null +++ b/submissions/labs/lab12/results/host-kernel-release.txt @@ -0,0 +1 @@ +5.15.0-139-generic diff --git a/submissions/labs/lab12/results/host-uname.txt b/submissions/labs/lab12/results/host-uname.txt new file mode 100644 index 000000000..ad97ed21f --- /dev/null +++ b/submissions/labs/lab12/results/host-uname.txt @@ -0,0 +1 @@ +Linux remnux 5.15.0-139-generic #149~20.04.1-Ubuntu SMP Wed Apr 16 08:29:56 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux diff --git a/submissions/labs/lab12/results/image-pull.txt b/submissions/labs/lab12/results/image-pull.txt new file mode 100644 index 000000000..2031a8f44 --- /dev/null +++ b/submissions/labs/lab12/results/image-pull.txt @@ -0,0 +1,70 @@ +docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 0.1 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 0.2 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 0.3 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 0.4 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 0.5 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 0.6 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 0.7 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 0.8 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 0.9 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 1.0 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 1.1 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 1.2 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 1.3 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 1.4 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 1.5 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 1.6 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 1.7 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 1.8 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 1.9 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 2.0 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 2.1 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 2.2 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 2.3 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 2.4 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 2.5 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 2.6 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 2.7 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 2.8 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 2.9 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 3.0 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 3.1 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolved |++++++++++++++++++++++++++++++++++++++| +index-sha256:d9e853e87e55526f6b2917df91a2115c36dd7c696a35be12163d44e6e2a4b6bc: exists |++++++++++++++++++++++++++++++++++++++| +elapsed: 3.2 s total: 0.0 B (0.0 B/s) +      docker.io/library/alpine:3.20: resolved |++++++++++++++++++++++++++++++++++++++| +index-sha256:d9e853e87e55526f6b2917df91a2115c36dd7c696a35be12163d44e6e2a4b6bc: exists |++++++++++++++++++++++++++++++++++++++| +manifest-sha256:c64c687cbea9300178b30c95835354e34c4e4febc4badfe27102879de0483b5e: done |++++++++++++++++++++++++++++++++++++++| +config-sha256:bf8527eb54c3680e728d5b4b383a8ba730d72dae7236fbc8dff97ed6b224a731: done |++++++++++++++++++++++++++++++++++++++| +elapsed: 3.3 s total: 0.0 B (0.0 B/s) diff --git a/submissions/labs/lab12/results/kata-caps.txt b/submissions/labs/lab12/results/kata-caps.txt new file mode 100644 index 000000000..7a6b3daad --- /dev/null +++ b/submissions/labs/lab12/results/kata-caps.txt @@ -0,0 +1,5 @@ +CapInh: 0000000000000000 +CapPrm: 00000000a80425fb +CapEff: 00000000a80425fb +CapBnd: 00000000a80425fb +CapAmb: 0000000000000000 diff --git a/submissions/labs/lab12/results/kata-devs.txt b/submissions/labs/lab12/results/kata-devs.txt new file mode 100644 index 000000000..aa74579ef --- /dev/null +++ b/submissions/labs/lab12/results/kata-devs.txt @@ -0,0 +1,14 @@ +fd +full +mqueue +null +ptmx +pts +random +shm +stderr +stdin +stdout +tty +urandom +zero diff --git a/submissions/labs/lab12/results/kata-io.txt b/submissions/labs/lab12/results/kata-io.txt new file mode 100644 index 000000000..eca70497c --- /dev/null +++ b/submissions/labs/lab12/results/kata-io.txt @@ -0,0 +1,3 @@ +100+0 records in +100+0 records out +104857600 bytes (100.0MB) copied, 0.023807 seconds, 4.1GB/s diff --git a/submissions/labs/lab12/results/kata-kernel.txt b/submissions/labs/lab12/results/kata-kernel.txt new file mode 100644 index 000000000..91715a6e7 --- /dev/null +++ b/submissions/labs/lab12/results/kata-kernel.txt @@ -0,0 +1,6 @@ ++ nerdctl run --rm --runtime=io.containerd.kata.v2 alpine:3.20 sh -c uname -a; echo "--- cpuinfo ---"; head -3 /proc/cpuinfo +Linux 1c60be6cde44 6.18.35 #1 SMP Mon Jun 15 12:55:58 UTC 2026 x86_64 Linux +--- cpuinfo --- +processor : 0 +vendor_id : GenuineIntel +cpu family : 6 diff --git a/submissions/labs/lab12/results/kata-version.txt b/submissions/labs/lab12/results/kata-version.txt new file mode 100644 index 000000000..cac6068cf --- /dev/null +++ b/submissions/labs/lab12/results/kata-version.txt @@ -0,0 +1 @@ +3.32.0 diff --git a/submissions/labs/lab12/results/kernel-release-comparison.txt b/submissions/labs/lab12/results/kernel-release-comparison.txt new file mode 100644 index 000000000..40b4e6fec --- /dev/null +++ b/submissions/labs/lab12/results/kernel-release-comparison.txt @@ -0,0 +1,3 @@ +host_release=5.15.0-139-generic +runc_release=5.15.0-139-generic +kata_release=6.18.35 diff --git a/submissions/labs/lab12/results/kvm.txt b/submissions/labs/lab12/results/kvm.txt new file mode 100644 index 000000000..955aaea48 --- /dev/null +++ b/submissions/labs/lab12/results/kvm.txt @@ -0,0 +1,6 @@ +=== loaded KVM modules === +kvm_intel 380928 0 +kvm 1019904 1 kvm_intel + +=== /dev/kvm === +crw-rw----+ 1 root kvm 10, 232 Jul 17 11:55 /dev/kvm diff --git a/submissions/labs/lab12/results/lscpu.txt b/submissions/labs/lab12/results/lscpu.txt new file mode 100644 index 000000000..96311fc99 --- /dev/null +++ b/submissions/labs/lab12/results/lscpu.txt @@ -0,0 +1,40 @@ +Architecture: x86_64 +CPU op-mode(s): 32-bit, 64-bit +Byte Order: Little Endian +Address sizes: 46 bits physical, 48 bits virtual +CPU(s): 4 +On-line CPU(s) list: 0-3 +Thread(s) per core: 1 +Core(s) per socket: 4 +Socket(s): 1 +NUMA node(s): 1 +Vendor ID: GenuineIntel +CPU family: 6 +Model: 170 +Model name: Intel(R) Core(TM) Ultra 9 185H +Stepping: 4 +CPU MHz: 3071.998 +BogoMIPS: 6143.99 +Virtualization: VT-x +Hypervisor vendor: KVM +Virtualization type: full +L1d cache: 192 KiB +L1i cache: 256 KiB +L2 cache: 8 MiB +L3 cache: 96 MiB +NUMA node0 CPU(s): 0-3 +Vulnerability Gather data sampling: Not affected +Vulnerability Itlb multihit: Not affected +Vulnerability L1tf: Not affected +Vulnerability Mds: Not affected +Vulnerability Meltdown: Not affected +Vulnerability Mmio stale data: Not affected +Vulnerability Reg file data sampling: Not affected +Vulnerability Retbleed: Not affected +Vulnerability Spec rstack overflow: Not affected +Vulnerability Spec store bypass: Vulnerable +Vulnerability Spectre v1: Mitigation; usercopy/swapgs barriers and __user pointer sanitization +Vulnerability Spectre v2: Mitigation; Retpolines; STIBP disabled; RSB filling; PBRSB-eIBRS Not affected; BHI SW loop, KVM SW loop +Vulnerability Srbds: Not affected +Vulnerability Tsx async abort: Not affected +Flags: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 pcid sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch invpcid_single tpr_shadow vnmi flexpriority ept vpid fsgsbase bmi1 avx2 bmi2 invpcid rdseed adx clflushopt sha_ni arat md_clear flush_l1d arch_capabilities diff --git a/submissions/labs/lab12/results/nerdctl-ps-all.txt b/submissions/labs/lab12/results/nerdctl-ps-all.txt new file mode 100644 index 000000000..f71d9fd44 --- /dev/null +++ b/submissions/labs/lab12/results/nerdctl-ps-all.txt @@ -0,0 +1 @@ +CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES diff --git a/submissions/labs/lab12/results/nerdctl-version.txt b/submissions/labs/lab12/results/nerdctl-version.txt new file mode 100644 index 000000000..822a33a3c --- /dev/null +++ b/submissions/labs/lab12/results/nerdctl-version.txt @@ -0,0 +1 @@ +nerdctl version 2.3.4 diff --git a/submissions/labs/lab12/results/os-release.txt b/submissions/labs/lab12/results/os-release.txt new file mode 100644 index 000000000..5e42801c6 --- /dev/null +++ b/submissions/labs/lab12/results/os-release.txt @@ -0,0 +1,12 @@ +NAME="Ubuntu" +VERSION="20.04.6 LTS (Focal Fossa)" +ID=ubuntu +ID_LIKE=debian +PRETTY_NAME="Ubuntu 20.04.6 LTS" +VERSION_ID="20.04" +HOME_URL="https://www.ubuntu.com/" +SUPPORT_URL="https://help.ubuntu.com/" +BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/" +PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy" +VERSION_CODENAME=focal +UBUNTU_CODENAME=focal diff --git a/submissions/labs/lab12/results/repository-root.txt b/submissions/labs/lab12/results/repository-root.txt new file mode 100644 index 000000000..70bd6df94 --- /dev/null +++ b/submissions/labs/lab12/results/repository-root.txt @@ -0,0 +1 @@ +/home/remnux/DevSecOps-Intro diff --git a/submissions/labs/lab12/results/run.log b/submissions/labs/lab12/results/run.log new file mode 100644 index 000000000..f5fb9513c --- /dev/null +++ b/submissions/labs/lab12/results/run.log @@ -0,0 +1,384 @@ + +============================================================ +==> Repository preflight +============================================================ +/home/remnux/DevSecOps-Intro + M .gitignore + M labs/lab11/docker-compose.yml + M labs/lab12/scripts/install-kata-assets.sh + M labs/lab5/scripts/zap-auth.yaml +?? PR_BODY.md +?? lab11-results.tar.gz +?? lab12-results.tar.gz +?? lab6-scan-results.tar.gz +?? lab6-scan-results.tar.gz.sha256 +?? lab7-evidence.tar.gz +?? lab7-final-results.tar.gz +?? lab7-run.log +?? lab9-results-20260710-134049.tar.gz +?? lab9-results-20260710-134049/ +?? lab9-results-20260710-134616.tar.gz +?? lab9-results-20260710-134616/ +?? lab9-results-20260710-135010.tar.gz +?? lab9-results-20260710-135010/ +?? lab9-results-20260710-135239.tar.gz +?? lab9-results-20260710-135239/ +?? lab9-results-20260710-135541.tar.gz +?? lab9-results-20260710-135541/ +?? lab9-results-20260710-135841.tar.gz +?? lab9-results-20260710-135841/ +?? lab9-results-20260710-140103.tar.gz +?? lab9-results-20260710-140103/ +?? lab9-results-20260710-140418.tar.gz +?? lab9-results-20260710-140418/ +?? lab9-results-20260710-140713.tar.gz +?? lab9-results-20260710-140713/ +?? lab9-results-20260710-140952.tar.gz +?? lab9-results-20260710-140952/ +?? lab9-results-20260710-141244.tar.gz +?? lab9-results-20260710-141244/ +?? labs/lab11/results/ +?? labs/lab11/run-and-collect.sh +?? labs/lab11/scripts/ +?? labs/lab4/ +?? labs/lab5/analysis/ +?? labs/lab5/zap/ +?? labs/lab8/ +?? labs/lab9/analysis/ +?? vulnerability-db_v6.1.7_2026-06-18T00:59:35Z_1781769478.tar.zst +?? vulnerability-db_v6.1.7_2026-06-18T00:59:35Z_1781769478.tar.zst.aria2 +feature/lab12 +7f777bf2b97dee0362254be52e4d9aba16948893 + +============================================================ +==> Host and KVM preflight +============================================================ +Linux remnux 5.15.0-139-generic #149~20.04.1-Ubuntu SMP Wed Apr 16 08:29:56 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux +5.15.0-139-generic +NAME="Ubuntu" +VERSION="20.04.6 LTS (Focal Fossa)" +ID=ubuntu +ID_LIKE=debian +PRETTY_NAME="Ubuntu 20.04.6 LTS" +VERSION_ID="20.04" +HOME_URL="https://www.ubuntu.com/" +SUPPORT_URL="https://help.ubuntu.com/" +BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/" +PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy" +VERSION_CODENAME=focal +UBUNTU_CODENAME=focal +Architecture: x86_64 +CPU op-mode(s): 32-bit, 64-bit +Byte Order: Little Endian +Address sizes: 46 bits physical, 48 bits virtual +CPU(s): 4 +On-line CPU(s) list: 0-3 +Thread(s) per core: 1 +Core(s) per socket: 4 +Socket(s): 1 +NUMA node(s): 1 +Vendor ID: GenuineIntel +CPU family: 6 +Model: 170 +Model name: Intel(R) Core(TM) Ultra 9 185H +Stepping: 4 +CPU MHz: 3071.998 +BogoMIPS: 6143.99 +Virtualization: VT-x +Hypervisor vendor: KVM +Virtualization type: full +L1d cache: 192 KiB +L1i cache: 256 KiB +L2 cache: 8 MiB +L3 cache: 96 MiB +NUMA node0 CPU(s): 0-3 +Vulnerability Gather data sampling: Not affected +Vulnerability Itlb multihit: Not affected +Vulnerability L1tf: Not affected +Vulnerability Mds: Not affected +Vulnerability Meltdown: Not affected +Vulnerability Mmio stale data: Not affected +Vulnerability Reg file data sampling: Not affected +Vulnerability Retbleed: Not affected +Vulnerability Spec rstack overflow: Not affected +Vulnerability Spec store bypass: Vulnerable +Vulnerability Spectre v1: Mitigation; usercopy/swapgs barriers and __user pointer sanitization +Vulnerability Spectre v2: Mitigation; Retpolines; STIBP disabled; RSB filling; PBRSB-eIBRS Not affected; BHI SW loop, KVM SW loop +Vulnerability Srbds: Not affected +Vulnerability Tsx async abort: Not affected +Flags: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 pcid sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch invpcid_single tpr_shadow vnmi flexpriority ept vpid fsgsbase bmi1 avx2 bmi2 invpcid rdseed adx clflushopt sha_ni arat md_clear flush_l1d arch_capabilities +=== loaded KVM modules === +kvm_intel 380928 0 +kvm 1019904 1 kvm_intel + +=== /dev/kvm === +crw-rw----+ 1 root kvm 10, 232 Jul 17 11:55 /dev/kvm + +============================================================ +==> Checking base dependencies +============================================================ +All base commands are already installed. + +============================================================ +==> Checking containerd +============================================================ +containerd github.com/containerd/containerd 1.7.24 + +============================================================ +==> Checking nerdctl +============================================================ +nerdctl version 2.3.4 + +============================================================ +==> Starting containerd +============================================================ +active +* containerd.service - containerd container runtime + Loaded: loaded (/lib/systemd/system/containerd.service; enabled; vendor preset: enabled) + Active: active (running) since Fri 2026-07-17 11:55:09 EDT; 2s ago + Docs: https://containerd.io + Process: 9037 ExecStartPre=/sbin/modprobe overlay (code=exited, status=0/SUCCESS) + Main PID: 9038 (containerd) + Tasks: 23 + Memory: 78.3M + CGroup: /system.slice/containerd.service + |-1998 /usr/bin/containerd-shim-runc-v2 -namespace moby -id 0f1b51a1c76dbcdebfae45ab3a79b301b783e379fcd4dd86ff696c001332f1c5 -address /run/containerd/containerd.sock + |-8927 /opt/kata/runtime-rs/bin/containerd-shim-kata-v2 -id 0dead0d386bb8bfe4986081886c24d6044d66816d0dafe7e85b76bc1ebca84d1 -namespace default -address /run/containerd/containerd.sock -publish-binary /usr/bin/containerd + `-9038 /usr/bin/containerd + +Jul 17 11:55:09 remnux containerd[9038]: time="2026-07-17T11:55:09.942403933-04:00" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 +Jul 17 11:55:09 remnux containerd[9038]: time="2026-07-17T11:55:09.942414504-04:00" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="skip plugin: tracing endpoint not configured" type=io.containerd.tracing.processor.v1 +Jul 17 11:55:09 remnux containerd[9038]: time="2026-07-17T11:55:09.942424115-04:00" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 +Jul 17 11:55:09 remnux containerd[9038]: time="2026-07-17T11:55:09.942430837-04:00" level=info msg="skip loading plugin \"io.containerd.internal.v1.tracing\"..." error="skip plugin: tracing endpoint not configured" type=io.containerd.internal.v1 +Jul 17 11:55:09 remnux containerd[9038]: time="2026-07-17T11:55:09.942436127-04:00" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 +Jul 17 11:55:09 remnux containerd[9038]: time="2026-07-17T11:55:09.942442667-04:00" level=info msg="loading plugin \"io.containerd.nri.v1.nri\"..." type=io.containerd.nri.v1 +Jul 17 11:55:09 remnux containerd[9038]: time="2026-07-17T11:55:09.942448246-04:00" level=info msg="NRI interface is disabled by configuration." +Jul 17 11:55:09 remnux containerd[9038]: time="2026-07-17T11:55:09.942633379-04:00" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc +Jul 17 11:55:09 remnux containerd[9038]: time="2026-07-17T11:55:09.942656607-04:00" level=info msg=serving... address=/run/containerd/containerd.sock +Jul 17 11:55:09 remnux containerd[9038]: time="2026-07-17T11:55:09.942686346-04:00" level=info msg="containerd successfully booted in 0.028186s" + +============================================================ +==> Installing and configuring Kata +============================================================ +Using already installed Kata version: 3.32.0 +Kata runtime-rs configuration: +/opt/kata/share/defaults/kata-containers/runtime-rs/configuration-qemu-runtime-rs.toml +Kata shim: +/opt/kata/runtime-rs/bin/containerd-shim-kata-v2 +Updated /etc/containerd/config.toml with Kata runtime: io.containerd.kata.v2 +Restart containerd to apply: sudo systemctl restart containerd +active +* containerd.service - containerd container runtime + Loaded: loaded (/lib/systemd/system/containerd.service; enabled; vendor preset: enabled) + Active: active (running) since Fri 2026-07-17 11:55:12 EDT; 3s ago + Docs: https://containerd.io + Process: 9104 ExecStartPre=/sbin/modprobe overlay (code=exited, status=0/SUCCESS) + Main PID: 9105 (containerd) + Tasks: 23 + Memory: 78.2M + CGroup: /system.slice/containerd.service + |-1998 /usr/bin/containerd-shim-runc-v2 -namespace moby -id 0f1b51a1c76dbcdebfae45ab3a79b301b783e379fcd4dd86ff696c001332f1c5 -address /run/containerd/containerd.sock + |-8927 /opt/kata/runtime-rs/bin/containerd-shim-kata-v2 -id 0dead0d386bb8bfe4986081886c24d6044d66816d0dafe7e85b76bc1ebca84d1 -namespace default -address /run/containerd/containerd.sock -publish-binary /usr/bin/containerd + `-9105 /usr/bin/containerd + +Jul 17 11:55:12 remnux containerd[9105]: time="2026-07-17T11:55:12.206199536-04:00" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="skip plugin: tracing endpoint not configured" type=io.containerd.tracing.processor.v1 +Jul 17 11:55:12 remnux containerd[9105]: time="2026-07-17T11:55:12.206208725-04:00" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 +Jul 17 11:55:12 remnux containerd[9105]: time="2026-07-17T11:55:12.206217871-04:00" level=info msg="skip loading plugin \"io.containerd.internal.v1.tracing\"..." error="skip plugin: tracing endpoint not configured" type=io.containerd.internal.v1 +Jul 17 11:55:12 remnux containerd[9105]: time="2026-07-17T11:55:12.206538563-04:00" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 +Jul 17 11:55:12 remnux containerd[9105]: time="2026-07-17T11:55:12.206555713-04:00" level=info msg="loading plugin \"io.containerd.nri.v1.nri\"..." type=io.containerd.nri.v1 +Jul 17 11:55:12 remnux containerd[9105]: time="2026-07-17T11:55:12.206564937-04:00" level=info msg="NRI interface is disabled by configuration." +Jul 17 11:55:12 remnux containerd[9105]: time="2026-07-17T11:55:12.206716785-04:00" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc +Jul 17 11:55:12 remnux containerd[9105]: time="2026-07-17T11:55:12.206745517-04:00" level=info msg=serving... address=/run/containerd/containerd.sock +Jul 17 11:55:12 remnux containerd[9105]: time="2026-07-17T11:55:12.206788777-04:00" level=info msg="containerd successfully booted in 0.042209s" +Jul 17 11:55:12 remnux systemd[1]: Started containerd container runtime. +[plugins.'io.containerd.grpc.v1.cri'.containerd.runtimes.kata] + runtime_type = 'io.containerd.kata.v2' + +============================================================ +==> Recording versions +============================================================ +containerd github.com/containerd/containerd 1.7.24 +nerdctl version 2.3.4 +runc version 1.1.12-0ubuntu2~20.04.1 +spec: 1.0.2-dev +go: go1.21.1 +libseccomp: 2.5.1 +3.32.0 + +============================================================ +==> Pulling alpine:3.20 +============================================================ +docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 0.1 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 0.2 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 0.3 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 0.4 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 0.5 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 0.6 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 0.7 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 0.8 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 0.9 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 1.0 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 1.1 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 1.2 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 1.3 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 1.4 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 1.5 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 1.6 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 1.7 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 1.8 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 1.9 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 2.0 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 2.1 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 2.2 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 2.3 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 2.4 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 2.5 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 2.6 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 2.7 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 2.8 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 2.9 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 3.0 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolving |--------------------------------------| +elapsed: 3.1 s total: 0.0 B (0.0 B/s) +  docker.io/library/alpine:3.20: resolved |++++++++++++++++++++++++++++++++++++++| +index-sha256:d9e853e87e55526f6b2917df91a2115c36dd7c696a35be12163d44e6e2a4b6bc: exists |++++++++++++++++++++++++++++++++++++++| +elapsed: 3.2 s total: 0.0 B (0.0 B/s) +      docker.io/library/alpine:3.20: resolved |++++++++++++++++++++++++++++++++++++++| +index-sha256:d9e853e87e55526f6b2917df91a2115c36dd7c696a35be12163d44e6e2a4b6bc: exists |++++++++++++++++++++++++++++++++++++++| +manifest-sha256:c64c687cbea9300178b30c95835354e34c4e4febc4badfe27102879de0483b5e: done |++++++++++++++++++++++++++++++++++++++| +config-sha256:bf8527eb54c3680e728d5b4b383a8ba730d72dae7236fbc8dff97ed6b224a731: done |++++++++++++++++++++++++++++++++++++++| +elapsed: 3.3 s total: 0.0 B (0.0 B/s) + +============================================================ +==> Collecting kernel identity for runc and Kata +============================================================ +--- runc --- ++ nerdctl run --rm alpine:3.20 sh -c uname -a; echo "--- cpuinfo ---"; head -3 /proc/cpuinfo +Linux 9730d7860109 5.15.0-139-generic #149~20.04.1-Ubuntu SMP Wed Apr 16 08:29:56 UTC 2025 x86_64 Linux +--- cpuinfo --- +processor : 0 +vendor_id : GenuineIntel +cpu family : 6 +--- kata --- ++ nerdctl run --rm --runtime=io.containerd.kata.v2 alpine:3.20 sh -c uname -a; echo "--- cpuinfo ---"; head -3 /proc/cpuinfo +Linux 1c60be6cde44 6.18.35 #1 SMP Mon Jun 15 12:55:58 UTC 2026 x86_64 Linux +--- cpuinfo --- +processor : 0 +vendor_id : GenuineIntel +cpu family : 6 +host_release=5.15.0-139-generic +runc_release=run +kata_release=run +WARNING: runc kernel release does not equal host release. + +============================================================ +==> Collecting /dev and capability evidence +============================================================ ++ nerdctl run --rm alpine:3.20 sh -c ls -1 /dev | sort ++ nerdctl run --rm --runtime=io.containerd.kata.v2 alpine:3.20 sh -c ls -1 /dev | sort ++ nerdctl run --rm alpine:3.20 sh -c grep ^Cap /proc/1/status ++ nerdctl run --rm --runtime=io.containerd.kata.v2 alpine:3.20 sh -c grep ^Cap /proc/1/status +--- /dev diff --- +--- /home/remnux/DevSecOps-Intro/labs/lab12/results/runc-devs.txt 2026-07-17 11:55:25.857191627 -0400 ++++ /home/remnux/DevSecOps-Intro/labs/lab12/results/kata-devs.txt 2026-07-17 11:55:32.264393747 -0400 +@@ -1,4 +1,3 @@ +-core + fd + full + mqueue +--- runc capabilities --- +CapInh: 0000000000000000 +CapPrm: 00000000a80425fb +CapEff: 00000000a80425fb +CapBnd: 00000000a80425fb +CapAmb: 0000000000000000 +--- kata capabilities --- +CapInh: 0000000000000000 +CapPrm: 00000000a80425fb +CapEff: 00000000a80425fb +CapBnd: 00000000a80425fb +CapAmb: 0000000000000000 + +============================================================ +==> Running cold-start benchmark +============================================================ +Warming up runc once ++ nerdctl run --rm alpine:3.20 true +Warming up Kata once ++ nerdctl run --rm --runtime=io.containerd.kata.v2 alpine:3.20 true ++ nerdctl run --rm alpine:3.20 true +runc,1,0.526595584 ++ nerdctl run --rm alpine:3.20 true +runc,2,0.552260352 ++ nerdctl run --rm alpine:3.20 true +runc,3,0.481219072 ++ nerdctl run --rm alpine:3.20 true +runc,4,0.423924224 ++ nerdctl run --rm alpine:3.20 true +runc,5,0.372067072 ++ nerdctl run --rm --runtime=io.containerd.kata.v2 alpine:3.20 true +kata,1,7.855792128 ++ nerdctl run --rm --runtime=io.containerd.kata.v2 alpine:3.20 true +kata,2,7.574585856 ++ nerdctl run --rm --runtime=io.containerd.kata.v2 alpine:3.20 true +kata,3,7.067718144 ++ nerdctl run --rm --runtime=io.containerd.kata.v2 alpine:3.20 true +kata,4,6.545513984 ++ nerdctl run --rm --runtime=io.containerd.kata.v2 alpine:3.20 true +kata,5,7.210876160 +runc_samples=0.526595584,0.552260352,0.481219072,0.423924224,0.372067072 +runc_average=0.471213261 +runc_median=0.481219072 +kata_samples=7.855792128,7.574585856,7.067718144,6.545513984,7.210876160 +kata_average=7.250897254 +kata_median=7.210876160 +cold_start_overhead_ratio=15.3877 + +============================================================ +==> Running course-prescribed 100 MiB /dev/null benchmark +============================================================ ++ nerdctl run --rm alpine:3.20 sh -c LC_ALL=C dd if=/dev/zero of=/dev/null bs=1M count=100 2>&1 ++ nerdctl run --rm --runtime=io.containerd.kata.v2 alpine:3.20 sh -c LC_ALL=C dd if=/dev/zero of=/dev/null bs=1M count=100 2>&1 +--- runc I/O --- +100+0 records in +100+0 records out +104857600 bytes (100.0MB) copied, 0.004719 seconds, 20.7GB/s +--- Kata I/O --- +100+0 records in +100+0 records out +104857600 bytes (100.0MB) copied, 0.023807 seconds, 4.1GB/s + +============================================================ +==> Bonus experiment 1: exact bind-mount vector from the assignment +============================================================ +OVERWRITTEN BY RUNC CONTAINER diff --git a/submissions/labs/lab12/results/runc-caps.txt b/submissions/labs/lab12/results/runc-caps.txt new file mode 100644 index 000000000..7a6b3daad --- /dev/null +++ b/submissions/labs/lab12/results/runc-caps.txt @@ -0,0 +1,5 @@ +CapInh: 0000000000000000 +CapPrm: 00000000a80425fb +CapEff: 00000000a80425fb +CapBnd: 00000000a80425fb +CapAmb: 0000000000000000 diff --git a/submissions/labs/lab12/results/runc-devs.txt b/submissions/labs/lab12/results/runc-devs.txt new file mode 100644 index 000000000..c42a695d3 --- /dev/null +++ b/submissions/labs/lab12/results/runc-devs.txt @@ -0,0 +1,15 @@ +core +fd +full +mqueue +null +ptmx +pts +random +shm +stderr +stdin +stdout +tty +urandom +zero diff --git a/submissions/labs/lab12/results/runc-io.txt b/submissions/labs/lab12/results/runc-io.txt new file mode 100644 index 000000000..b4d06698c --- /dev/null +++ b/submissions/labs/lab12/results/runc-io.txt @@ -0,0 +1,3 @@ +100+0 records in +100+0 records out +104857600 bytes (100.0MB) copied, 0.004719 seconds, 20.7GB/s diff --git a/submissions/labs/lab12/results/runc-kernel.txt b/submissions/labs/lab12/results/runc-kernel.txt new file mode 100644 index 000000000..16d0766c2 --- /dev/null +++ b/submissions/labs/lab12/results/runc-kernel.txt @@ -0,0 +1,6 @@ ++ nerdctl run --rm alpine:3.20 sh -c uname -a; echo "--- cpuinfo ---"; head -3 /proc/cpuinfo +Linux 9730d7860109 5.15.0-139-generic #149~20.04.1-Ubuntu SMP Wed Apr 16 08:29:56 UTC 2025 x86_64 Linux +--- cpuinfo --- +processor : 0 +vendor_id : GenuineIntel +cpu family : 6 diff --git a/submissions/labs/lab12/results/runc-version.txt b/submissions/labs/lab12/results/runc-version.txt new file mode 100644 index 000000000..3cd9507d2 --- /dev/null +++ b/submissions/labs/lab12/results/runc-version.txt @@ -0,0 +1,4 @@ +runc version 1.1.12-0ubuntu2~20.04.1 +spec: 1.0.2-dev +go: go1.21.1 +libseccomp: 2.5.1 diff --git a/submissions/labs/lab12/results/startup-bench.csv b/submissions/labs/lab12/results/startup-bench.csv new file mode 100644 index 000000000..00f1a7ac7 --- /dev/null +++ b/submissions/labs/lab12/results/startup-bench.csv @@ -0,0 +1,11 @@ +runtime,run,seconds +runc,1,0.526595584 +runc,2,0.552260352 +runc,3,0.481219072 +runc,4,0.423924224 +runc,5,0.372067072 +kata,1,7.855792128 +kata,2,7.574585856 +kata,3,7.067718144 +kata,4,6.545513984 +kata,5,7.210876160 diff --git a/submissions/labs/lab12/results/startup-summary.txt b/submissions/labs/lab12/results/startup-summary.txt new file mode 100644 index 000000000..68424dc4e --- /dev/null +++ b/submissions/labs/lab12/results/startup-summary.txt @@ -0,0 +1,7 @@ +runc_samples=0.526595584,0.552260352,0.481219072,0.423924224,0.372067072 +runc_average=0.471213261 +runc_median=0.481219072 +kata_samples=7.855792128,7.574585856,7.067718144,6.545513984,7.210876160 +kata_average=7.250897254 +kata_median=7.210876160 +cold_start_overhead_ratio=15.3877 From f09aeb2d6e2152c3d46541373f61bee51b9c4f0c Mon Sep 17 00:00:00 2001 From: Lisoon22 Date: Sat, 18 Jul 2026 00:48:26 +0300 Subject: [PATCH 7/7] chore(lab12): keep only relevant benchmark evidence --- .../bonus-bind-kata-container.txt | 0 .../bonus-bind-kata-exit-status.txt | 0 .../bonus-bind-kata-host.txt | 0 .../bonus-bind-runc-container.txt | 0 .../bonus-bind-runc-exit-status.txt | 0 .../bonus-bind-runc-host.txt | 0 .../bonus-bind-summary.txt | 0 .../containerd-kata-config.txt | 0 .../containerd-version.txt | 0 .../results => lab12-results}/dev-diff.txt | 0 .../results => lab12-results}/kata-caps.txt | 0 .../results => lab12-results}/kata-io.txt | 0 .../results => lab12-results}/kata-kernel.txt | 0 .../kata-version.txt | 0 .../lab12/results => lab12-results}/kvm.txt | 0 .../results => lab12-results}/runc-caps.txt | 0 .../results => lab12-results}/runc-io.txt | 0 .../results => lab12-results}/runc-kernel.txt | 0 .../startup-bench.csv | 0 .../startup-summary.txt | 0 .../results/bonus-pid-kata-container.txt | 1 - .../results/bonus-pid-kata-exit-status.txt | 1 - .../lab12/results/bonus-pid-kata-host.txt | 1 - .../results/bonus-pid-runc-container.txt | 1 - .../results/bonus-pid-runc-exit-status.txt | 1 - .../lab12/results/bonus-pid-runc-host.txt | 1 - .../labs/lab12/results/bonus-pid-summary.txt | 4 - submissions/labs/lab12/results/caps-diff.txt | 0 .../labs/lab12/results/collector-status.txt | 1 - .../results/containerd-active-after-kata.txt | 1 - .../labs/lab12/results/containerd-active.txt | 1 - .../lab12/results/containerd-config-full.toml | 34 -- .../results/containerd-journal-final.txt | 315 -------------- .../labs/lab12/results/containerd-journal.txt | 269 ------------ .../results/containerd-status-after-kata.txt | 23 -- .../results/containerd-status-before-kata.txt | 23 -- .../lab12/results/containerd-status-final.txt | 22 - .../labs/lab12/results/containerd-status.txt | 22 - .../labs/lab12/results/failure-context.txt | 5 - submissions/labs/lab12/results/git-branch.txt | 1 - submissions/labs/lab12/results/git-head.txt | 1 - .../labs/lab12/results/git-status-after.txt | 44 -- .../labs/lab12/results/git-status-before.txt | 44 -- .../lab12/results/host-kernel-release.txt | 1 - submissions/labs/lab12/results/host-uname.txt | 1 - submissions/labs/lab12/results/image-pull.txt | 70 ---- submissions/labs/lab12/results/kata-devs.txt | 14 - .../results/kernel-release-comparison.txt | 3 - submissions/labs/lab12/results/lscpu.txt | 40 -- .../labs/lab12/results/nerdctl-ps-all.txt | 1 - .../labs/lab12/results/nerdctl-version.txt | 1 - submissions/labs/lab12/results/os-release.txt | 12 - .../labs/lab12/results/repository-root.txt | 1 - submissions/labs/lab12/results/run.log | 384 ------------------ submissions/labs/lab12/results/runc-devs.txt | 15 - .../labs/lab12/results/runc-version.txt | 4 - 56 files changed, 1363 deletions(-) rename submissions/{labs/lab12/results => lab12-results}/bonus-bind-kata-container.txt (100%) rename submissions/{labs/lab12/results => lab12-results}/bonus-bind-kata-exit-status.txt (100%) rename submissions/{labs/lab12/results => lab12-results}/bonus-bind-kata-host.txt (100%) rename submissions/{labs/lab12/results => lab12-results}/bonus-bind-runc-container.txt (100%) rename submissions/{labs/lab12/results => lab12-results}/bonus-bind-runc-exit-status.txt (100%) rename submissions/{labs/lab12/results => lab12-results}/bonus-bind-runc-host.txt (100%) rename submissions/{labs/lab12/results => lab12-results}/bonus-bind-summary.txt (100%) rename submissions/{labs/lab12/results => lab12-results}/containerd-kata-config.txt (100%) rename submissions/{labs/lab12/results => lab12-results}/containerd-version.txt (100%) rename submissions/{labs/lab12/results => lab12-results}/dev-diff.txt (100%) rename submissions/{labs/lab12/results => lab12-results}/kata-caps.txt (100%) rename submissions/{labs/lab12/results => lab12-results}/kata-io.txt (100%) rename submissions/{labs/lab12/results => lab12-results}/kata-kernel.txt (100%) rename submissions/{labs/lab12/results => lab12-results}/kata-version.txt (100%) rename submissions/{labs/lab12/results => lab12-results}/kvm.txt (100%) rename submissions/{labs/lab12/results => lab12-results}/runc-caps.txt (100%) rename submissions/{labs/lab12/results => lab12-results}/runc-io.txt (100%) rename submissions/{labs/lab12/results => lab12-results}/runc-kernel.txt (100%) rename submissions/{labs/lab12/results => lab12-results}/startup-bench.csv (100%) rename submissions/{labs/lab12/results => lab12-results}/startup-summary.txt (100%) delete mode 100644 submissions/labs/lab12/results/bonus-pid-kata-container.txt delete mode 100644 submissions/labs/lab12/results/bonus-pid-kata-exit-status.txt delete mode 100644 submissions/labs/lab12/results/bonus-pid-kata-host.txt delete mode 100644 submissions/labs/lab12/results/bonus-pid-runc-container.txt delete mode 100644 submissions/labs/lab12/results/bonus-pid-runc-exit-status.txt delete mode 100644 submissions/labs/lab12/results/bonus-pid-runc-host.txt delete mode 100644 submissions/labs/lab12/results/bonus-pid-summary.txt delete mode 100644 submissions/labs/lab12/results/caps-diff.txt delete mode 100644 submissions/labs/lab12/results/collector-status.txt delete mode 100644 submissions/labs/lab12/results/containerd-active-after-kata.txt delete mode 100644 submissions/labs/lab12/results/containerd-active.txt delete mode 100644 submissions/labs/lab12/results/containerd-config-full.toml delete mode 100644 submissions/labs/lab12/results/containerd-journal-final.txt delete mode 100644 submissions/labs/lab12/results/containerd-journal.txt delete mode 100644 submissions/labs/lab12/results/containerd-status-after-kata.txt delete mode 100644 submissions/labs/lab12/results/containerd-status-before-kata.txt delete mode 100644 submissions/labs/lab12/results/containerd-status-final.txt delete mode 100644 submissions/labs/lab12/results/containerd-status.txt delete mode 100644 submissions/labs/lab12/results/failure-context.txt delete mode 100644 submissions/labs/lab12/results/git-branch.txt delete mode 100644 submissions/labs/lab12/results/git-head.txt delete mode 100644 submissions/labs/lab12/results/git-status-after.txt delete mode 100644 submissions/labs/lab12/results/git-status-before.txt delete mode 100644 submissions/labs/lab12/results/host-kernel-release.txt delete mode 100644 submissions/labs/lab12/results/host-uname.txt delete mode 100644 submissions/labs/lab12/results/image-pull.txt delete mode 100644 submissions/labs/lab12/results/kata-devs.txt delete mode 100644 submissions/labs/lab12/results/kernel-release-comparison.txt delete mode 100644 submissions/labs/lab12/results/lscpu.txt delete mode 100644 submissions/labs/lab12/results/nerdctl-ps-all.txt delete mode 100644 submissions/labs/lab12/results/nerdctl-version.txt delete mode 100644 submissions/labs/lab12/results/os-release.txt delete mode 100644 submissions/labs/lab12/results/repository-root.txt delete mode 100644 submissions/labs/lab12/results/run.log delete mode 100644 submissions/labs/lab12/results/runc-devs.txt delete mode 100644 submissions/labs/lab12/results/runc-version.txt diff --git a/submissions/labs/lab12/results/bonus-bind-kata-container.txt b/submissions/lab12-results/bonus-bind-kata-container.txt similarity index 100% rename from submissions/labs/lab12/results/bonus-bind-kata-container.txt rename to submissions/lab12-results/bonus-bind-kata-container.txt diff --git a/submissions/labs/lab12/results/bonus-bind-kata-exit-status.txt b/submissions/lab12-results/bonus-bind-kata-exit-status.txt similarity index 100% rename from submissions/labs/lab12/results/bonus-bind-kata-exit-status.txt rename to submissions/lab12-results/bonus-bind-kata-exit-status.txt diff --git a/submissions/labs/lab12/results/bonus-bind-kata-host.txt b/submissions/lab12-results/bonus-bind-kata-host.txt similarity index 100% rename from submissions/labs/lab12/results/bonus-bind-kata-host.txt rename to submissions/lab12-results/bonus-bind-kata-host.txt diff --git a/submissions/labs/lab12/results/bonus-bind-runc-container.txt b/submissions/lab12-results/bonus-bind-runc-container.txt similarity index 100% rename from submissions/labs/lab12/results/bonus-bind-runc-container.txt rename to submissions/lab12-results/bonus-bind-runc-container.txt diff --git a/submissions/labs/lab12/results/bonus-bind-runc-exit-status.txt b/submissions/lab12-results/bonus-bind-runc-exit-status.txt similarity index 100% rename from submissions/labs/lab12/results/bonus-bind-runc-exit-status.txt rename to submissions/lab12-results/bonus-bind-runc-exit-status.txt diff --git a/submissions/labs/lab12/results/bonus-bind-runc-host.txt b/submissions/lab12-results/bonus-bind-runc-host.txt similarity index 100% rename from submissions/labs/lab12/results/bonus-bind-runc-host.txt rename to submissions/lab12-results/bonus-bind-runc-host.txt diff --git a/submissions/labs/lab12/results/bonus-bind-summary.txt b/submissions/lab12-results/bonus-bind-summary.txt similarity index 100% rename from submissions/labs/lab12/results/bonus-bind-summary.txt rename to submissions/lab12-results/bonus-bind-summary.txt diff --git a/submissions/labs/lab12/results/containerd-kata-config.txt b/submissions/lab12-results/containerd-kata-config.txt similarity index 100% rename from submissions/labs/lab12/results/containerd-kata-config.txt rename to submissions/lab12-results/containerd-kata-config.txt diff --git a/submissions/labs/lab12/results/containerd-version.txt b/submissions/lab12-results/containerd-version.txt similarity index 100% rename from submissions/labs/lab12/results/containerd-version.txt rename to submissions/lab12-results/containerd-version.txt diff --git a/submissions/labs/lab12/results/dev-diff.txt b/submissions/lab12-results/dev-diff.txt similarity index 100% rename from submissions/labs/lab12/results/dev-diff.txt rename to submissions/lab12-results/dev-diff.txt diff --git a/submissions/labs/lab12/results/kata-caps.txt b/submissions/lab12-results/kata-caps.txt similarity index 100% rename from submissions/labs/lab12/results/kata-caps.txt rename to submissions/lab12-results/kata-caps.txt diff --git a/submissions/labs/lab12/results/kata-io.txt b/submissions/lab12-results/kata-io.txt similarity index 100% rename from submissions/labs/lab12/results/kata-io.txt rename to submissions/lab12-results/kata-io.txt diff --git a/submissions/labs/lab12/results/kata-kernel.txt b/submissions/lab12-results/kata-kernel.txt similarity index 100% rename from submissions/labs/lab12/results/kata-kernel.txt rename to submissions/lab12-results/kata-kernel.txt diff --git a/submissions/labs/lab12/results/kata-version.txt b/submissions/lab12-results/kata-version.txt similarity index 100% rename from submissions/labs/lab12/results/kata-version.txt rename to submissions/lab12-results/kata-version.txt diff --git a/submissions/labs/lab12/results/kvm.txt b/submissions/lab12-results/kvm.txt similarity index 100% rename from submissions/labs/lab12/results/kvm.txt rename to submissions/lab12-results/kvm.txt diff --git a/submissions/labs/lab12/results/runc-caps.txt b/submissions/lab12-results/runc-caps.txt similarity index 100% rename from submissions/labs/lab12/results/runc-caps.txt rename to submissions/lab12-results/runc-caps.txt diff --git a/submissions/labs/lab12/results/runc-io.txt b/submissions/lab12-results/runc-io.txt similarity index 100% rename from submissions/labs/lab12/results/runc-io.txt rename to submissions/lab12-results/runc-io.txt diff --git a/submissions/labs/lab12/results/runc-kernel.txt b/submissions/lab12-results/runc-kernel.txt similarity index 100% rename from submissions/labs/lab12/results/runc-kernel.txt rename to submissions/lab12-results/runc-kernel.txt diff --git a/submissions/labs/lab12/results/startup-bench.csv b/submissions/lab12-results/startup-bench.csv similarity index 100% rename from submissions/labs/lab12/results/startup-bench.csv rename to submissions/lab12-results/startup-bench.csv diff --git a/submissions/labs/lab12/results/startup-summary.txt b/submissions/lab12-results/startup-summary.txt similarity index 100% rename from submissions/labs/lab12/results/startup-summary.txt rename to submissions/lab12-results/startup-summary.txt diff --git a/submissions/labs/lab12/results/bonus-pid-kata-container.txt b/submissions/labs/lab12/results/bonus-pid-kata-container.txt deleted file mode 100644 index 719e0baad..000000000 --- a/submissions/labs/lab12/results/bonus-pid-kata-container.txt +++ /dev/null @@ -1 +0,0 @@ -time="2026-07-17T12:00:28-04:00" level=fatal msg="failed to create shim task: Others(\"failed to handle message create container\\n\\nCaused by:\\n 0: get host path failed\\n 1: No such file or directory (os error 2)\\n\\nStack backtrace:\\n 0: anyhow::error:: for anyhow::Error>::from\\n 1: hypervisor::device::util::get_host_path\\n 2: resource::manager_inner::ResourceManagerInner::handler_devices::{{closure}}\\n 3: virt_container::container_manager::container::Container::create::{{closure}}\\n 4: ::create_container::{{closure}}::{{closure}}\\n 5: ::create_container::{{closure}}\\n 6: runtimes::manager::RuntimeHandlerManager::handler_task_message::{{closure}}::{{closure}}\\n 7: runtimes::manager::RuntimeHandlerManager::handler_task_message::{{closure}}\\n 8: ::create::{{closure}}\\n 9: ::handler::{{closure}}\\n 10: ttrpc::asynchronous::server::HandlerContext::handle_request::{{closure}}\\n 11: ::handle_msg::{{closure}}::{{closure}}\\n 12: tokio::runtime::task::raw::poll\\n 13: tokio::runtime::scheduler::multi_thread::worker::Context::run_task\\n 14: tokio::runtime::task::raw::poll\\n 15: std::sys::backtrace::__rust_begin_short_backtrace\\n 16: core::ops::function::FnOnce::call_once{{vtable.shim}}\\n 17: std::sys::thread::unix::Thread::new::thread_start\"): unknown" diff --git a/submissions/labs/lab12/results/bonus-pid-kata-exit-status.txt b/submissions/labs/lab12/results/bonus-pid-kata-exit-status.txt deleted file mode 100644 index d00491fd7..000000000 --- a/submissions/labs/lab12/results/bonus-pid-kata-exit-status.txt +++ /dev/null @@ -1 +0,0 @@ -1 diff --git a/submissions/labs/lab12/results/bonus-pid-kata-host.txt b/submissions/labs/lab12/results/bonus-pid-kata-host.txt deleted file mode 100644 index 4b48deed3..000000000 --- a/submissions/labs/lab12/results/bonus-pid-kata-host.txt +++ /dev/null @@ -1 +0,0 @@ -original diff --git a/submissions/labs/lab12/results/bonus-pid-runc-container.txt b/submissions/labs/lab12/results/bonus-pid-runc-container.txt deleted file mode 100644 index 1759a04d5..000000000 --- a/submissions/labs/lab12/results/bonus-pid-runc-container.txt +++ /dev/null @@ -1 +0,0 @@ -OVERWRITTEN THROUGH HOST PID NAMESPACE diff --git a/submissions/labs/lab12/results/bonus-pid-runc-exit-status.txt b/submissions/labs/lab12/results/bonus-pid-runc-exit-status.txt deleted file mode 100644 index 573541ac9..000000000 --- a/submissions/labs/lab12/results/bonus-pid-runc-exit-status.txt +++ /dev/null @@ -1 +0,0 @@ -0 diff --git a/submissions/labs/lab12/results/bonus-pid-runc-host.txt b/submissions/labs/lab12/results/bonus-pid-runc-host.txt deleted file mode 100644 index 1759a04d5..000000000 --- a/submissions/labs/lab12/results/bonus-pid-runc-host.txt +++ /dev/null @@ -1 +0,0 @@ -OVERWRITTEN THROUGH HOST PID NAMESPACE diff --git a/submissions/labs/lab12/results/bonus-pid-summary.txt b/submissions/labs/lab12/results/bonus-pid-summary.txt deleted file mode 100644 index 46bdcb869..000000000 --- a/submissions/labs/lab12/results/bonus-pid-summary.txt +++ /dev/null @@ -1,4 +0,0 @@ -runc_container_exit=0 -runc_host_value=OVERWRITTEN THROUGH HOST PID NAMESPACE -kata_container_exit=1 -kata_host_value=original diff --git a/submissions/labs/lab12/results/caps-diff.txt b/submissions/labs/lab12/results/caps-diff.txt deleted file mode 100644 index e69de29bb..000000000 diff --git a/submissions/labs/lab12/results/collector-status.txt b/submissions/labs/lab12/results/collector-status.txt deleted file mode 100644 index ff43ca409..000000000 --- a/submissions/labs/lab12/results/collector-status.txt +++ /dev/null @@ -1 +0,0 @@ -SUCCESS diff --git a/submissions/labs/lab12/results/containerd-active-after-kata.txt b/submissions/labs/lab12/results/containerd-active-after-kata.txt deleted file mode 100644 index 584c84786..000000000 --- a/submissions/labs/lab12/results/containerd-active-after-kata.txt +++ /dev/null @@ -1 +0,0 @@ -active diff --git a/submissions/labs/lab12/results/containerd-active.txt b/submissions/labs/lab12/results/containerd-active.txt deleted file mode 100644 index 584c84786..000000000 --- a/submissions/labs/lab12/results/containerd-active.txt +++ /dev/null @@ -1 +0,0 @@ -active diff --git a/submissions/labs/lab12/results/containerd-config-full.toml b/submissions/labs/lab12/results/containerd-config-full.toml deleted file mode 100644 index fdb5328ef..000000000 --- a/submissions/labs/lab12/results/containerd-config-full.toml +++ /dev/null @@ -1,34 +0,0 @@ -# Copyright 2018-2022 Docker Inc. - -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at - -# http://www.apache.org/licenses/LICENSE-2.0 - -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - -disabled_plugins = ["cri"] - -#root = "/var/lib/containerd" -#state = "/run/containerd" -#subreaper = true -#oom_score = 0 - -#[grpc] -# address = "/run/containerd/containerd.sock" -# uid = 0 -# gid = 0 - -#[debug] -# address = "/run/containerd/debug.sock" -# uid = 0 -# gid = 0 -# level = "info" - -[plugins.'io.containerd.grpc.v1.cri'.containerd.runtimes.kata] - runtime_type = 'io.containerd.kata.v2' diff --git a/submissions/labs/lab12/results/containerd-journal-final.txt b/submissions/labs/lab12/results/containerd-journal-final.txt deleted file mode 100644 index 9579f4c03..000000000 --- a/submissions/labs/lab12/results/containerd-journal-final.txt +++ /dev/null @@ -1,315 +0,0 @@ --- Logs begin at Mon 2024-10-07 21:49:33 EDT, end at Fri 2026-07-17 12:00:28 EDT. -- -Jul 17 11:56:33 remnux kata[14435]: begin to connect agent "vsock://3252076916" -Jul 17 11:56:33 remnux kata[14435]: try to connect agent server through Vsock { vsock_cid: 3252076916, port: 1024 } -Jul 17 11:56:33 remnux kata[14435]: Wait QEMU VM -Jul 17 11:56:40 remnux kata[14435]: vsock: connected to Vsock { vsock_cid: 3252076916, port: 1024 } after 9 attempts -Jul 17 11:56:40 remnux kata[14435]: get stream raw fd 16 with socket address: "vsock://3252076916" and server_port 1024 -Jul 17 11:56:40 remnux kata[14435]: update interface Interface { device: "eth0", name: "eth0", ip_addresses: [IPAddress { family: V4, address: "10.4.0.24", mask: "24" }, IPAddress { family: V6, address: "fe80::4cb9:4dff:fe46:4a44", mask: "64" }], mtu: 1500, hw_addr: "4e:b9:4d:46:4a:44", device_path: "", field_type: "veth", raw_flags: 0 } -Jul 17 11:56:40 remnux kata[14435]: try to connect to agent-log -Jul 17 11:56:40 remnux kata[14435]: update routes [Route { dest: "", gateway: "10.4.0.1", device: "eth0", source: "", scope: 0, family: V4, flags: 0, mtu: 0 }] -Jul 17 11:56:40 remnux kata[14435]: QemuInner::hypervisor_config() -Jul 17 11:56:40 remnux kata[14435]: QemuInner::set_guest_memory_block_size(): block size set to 134217728 -Jul 17 11:56:40 remnux kata[14435]: QemuInner::hypervisor_config() -Jul 17 11:56:40 remnux kata[14435]: QemuInner::hypervisor_config() -Jul 17 11:56:40 remnux kata[14435]: memory block size is 134217728, memory probe support false -Jul 17 11:56:40 remnux kata[14435]: oom watcher start -Jul 17 11:56:40 remnux kata[14435]: start runtime keep alive -Jul 17 11:56:40 remnux kata[14435]: QemuInner::hypervisor_config() -Jul 17 11:56:40 remnux kata[14435]: QemuInner::get_vmm_master_tid() -Jul 17 11:56:40 remnux kata[14435]: QemuInner::get_vmm_master_tid(): returning 14446 -Jul 17 11:56:40 remnux kata[14435]: QemuInner::get_ns_path() -Jul 17 11:56:40 remnux kata[14435]: set netns from old File { fd: 17, path: "net:[4026531840]", read: true, write: false } to new File { fd: 22, path: "net:[4026531840]", read: true, write: false } tid 14437 -Jul 17 11:56:40 remnux kata[14435]: set netns to old 17 -Jul 17 11:56:40 remnux kata[14435]: BUG: unknown mount flag: "index=off" -Jul 17 11:56:40 remnux kata[14435]: BUG: unknown mount flag: "workdir=/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/56/work" -Jul 17 11:56:40 remnux kata[14435]: BUG: unknown mount flag: "upperdir=/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/56/fs" -Jul 17 11:56:40 remnux kata[14435]: BUG: unknown mount flag: "lowerdir=/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/1/fs" -Jul 17 11:56:40 remnux kata[14435]: oci mount is : [Mount { destination: "/proc", typ: Some("proc"), source: Some("proc"), options: Some(["nosuid", "noexec", "nodev"]) }, Mount { destination: "/dev", typ: Some("tmpfs"), source: Some("tmpfs"), options: Some(["nosuid", "strictatime", "mode=755", "size=65536k"]) }, Mount { destination: "/sys", typ: Some("sysfs"), source: Some("sysfs"), options: Some(["nosuid", "noexec", "nodev", "rw"]) }, Mount { destination: "/host_tmp", typ: Some("none"), source: Some("/tmp"), options: Some(["rbind"]) }, Mount { destination: "/dev/pts", typ: Some("devpts"), source: Some("devpts"), options: Some(["nosuid", "noexec", "newinstance", "ptmxmode=0666", "mode=0620", "gid=5"]) }, Mount { destination: "/dev/shm", typ: Some("tmpfs"), source: Some("shm"), options: Some(["nosuid", "noexec", "nodev", "mode=1777", "size=65536k"]) }, Mount { destination: "/dev/mqueue", typ: Some("mqueue"), source: Some("mqueue"), options: Some(["nosuid", "noexec", "nodev"]) }, Mount { destination: "/sys/fs/cgroup", typ: Some("cgroup"), source: Some("cgroup"), options: Some(["rw", "nosuid", "noexec", "nodev"]) }, Mount { destination: "/etc/resolv.conf", typ: Some("bind"), source: Some("/var/lib/nerdctl/1935db59/containers/default/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/resolv.conf"), options: Some(["bind", "rprivate"]) }, Mount { destination: "/etc/hosts", typ: Some("bind"), source: Some("/var/lib/nerdctl/1935db59/etchosts/default/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/hosts"), options: Some(["bind", "rprivate"]) }, Mount { destination: "/etc/hostname", typ: Some("bind"), source: Some("/var/lib/nerdctl/1935db59/containers/default/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/hostname"), options: Some(["bind", "rprivate"]) }] -Jul 17 11:56:40 remnux kata[14435]: wait on container terminated -Jul 17 11:56:40 remnux kata[14435]: container terminated -Jul 17 11:56:40 remnux kata[14435]: stop container: agent remove container failed: rpc status: Status { code: INTERNAL, message: "Invalid container id\n\nStack backtrace:\n 0: \n 1: \n 2: \n 3: \n 4: \n 5: \n 6: \n 7: \n 8: \n 9: \n 10: \n 11: \n 12: \n 13: \n 14: \n 15: ", details: [], special_fields: SpecialFields { unknown_fields: UnknownFields { fields: None }, cached_size: CachedSize { size: 0 } } } -Jul 17 11:56:40 remnux kata[14435]: Cleaning up DefaultVolume is still unimplemented. -Jul 17 11:56:40 remnux kata[14435]: Cleaning up DefaultVolume is still unimplemented. -Jul 17 11:56:40 remnux kata[14435]: Cleaning up DefaultVolume is still unimplemented. -Jul 17 11:56:40 remnux kata[14435]: The path will be umounted due to no references, host_source = /tmp -Jul 17 11:56:40 remnux kata[14435]: lazy umount for /run/kata-containers/shared/sandboxes/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/rw/passthrough/sandbox-0ab98b72-tmp -Jul 17 11:56:40 remnux kata[14435]: Cleaning up DefaultVolume is still unimplemented. -Jul 17 11:56:40 remnux kata[14435]: Cleaning up DefaultVolume is still unimplemented. -Jul 17 11:56:40 remnux kata[14435]: Cleaning up DefaultVolume is still unimplemented. -Jul 17 11:56:40 remnux kata[14435]: The path will be umounted due to no references, host_source = /var/lib/nerdctl/1935db59/containers/default/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/resolv.conf -Jul 17 11:56:40 remnux kata[14435]: lazy umount for /run/kata-containers/shared/sandboxes/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/rw/passthrough/sandbox-82a80d1b-resolv.conf -Jul 17 11:56:40 remnux kata[14435]: The path will be umounted due to no references, host_source = /var/lib/nerdctl/1935db59/etchosts/default/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/hosts -Jul 17 11:56:40 remnux kata[14435]: lazy umount for /run/kata-containers/shared/sandboxes/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/rw/passthrough/sandbox-1a5128c6-hosts -Jul 17 11:56:40 remnux kata[14435]: The path will be umounted due to no references, host_source = /var/lib/nerdctl/1935db59/containers/default/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/hostname -Jul 17 11:56:40 remnux kata[14435]: lazy umount for /run/kata-containers/shared/sandboxes/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/rw/passthrough/sandbox-2308d1cf-hostname -Jul 17 11:56:40 remnux kata[14435]: lazy umount for /run/kata-containers/shared/sandboxes/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/rw/passthrough/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/rootfs -Jul 17 11:56:40 remnux kata[14435]: lazy umount for /run/containerd/io.containerd.runtime.v2.task/default/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/rootfs -Jul 17 11:56:40 remnux kata[14435]: shutdown -Jul 17 11:56:40 remnux kata[14435]: begin stop sandbox -Jul 17 11:56:40 remnux kata[14435]: Stopping QEMU VM -Jul 17 11:56:40 remnux kata[14435]: QemuInner::stop_vm(): kill()'ing qemu -Jul 17 11:56:40 remnux kata[14435]: oom watcher cancelled, sandbox is stopping -Jul 17 11:56:40 remnux kata[14435]: Failed to terminate pending RPC: the request has returned -Jul 17 11:56:40 remnux kata[14435]: finished reading qemu stderr -Jul 17 11:56:40 remnux kata[14435]: source: virtiofsd [2026-07-17T15:56:40Z INFO virtiofsd] Client disconnected, shutting down -Jul 17 11:56:40 remnux kata[14435]: wait virtiofsd Ok(ExitStatus(unix_wait_status(0))) -Jul 17 11:56:40 remnux kata[14435]: wait sandbox -Jul 17 11:56:40 remnux kata[14435]: sandbox stopped -Jul 17 11:56:40 remnux kata[14435]: delete hypervisor -Jul 17 11:56:40 remnux kata[14435]: QemuInner::cleanup() -Jul 17 11:56:40 remnux kata[14435]: resource clean up -Jul 17 11:56:40 remnux kata[14435]: set netns from old File { fd: 13, path: "net:[4026531840]", read: true, write: false } to new File { fd: 15, path: "/run/netns/cnitest-6d89cd7e-b3a5-50ef-9dfe-10c50694e440", read: true, write: false } tid 14436 -Jul 17 11:56:40 remnux kata[14435]: failed to detach endpoint: del network model failed. -Jul 17 11:56:40 remnux kata[14435]: set netns to old 13 -Jul 17 11:56:40 remnux kata[14435]: failed to remove network: failed to remove netns path -Jul 17 11:56:40 remnux kata[14435]: sandbox bindmounts empty, just skip it. -Jul 17 11:56:40 remnux kata[14435]: shutdown virtiofsd pid 14441 -Jul 17 11:56:40 remnux kata[14435]: stop monitor -Jul 17 11:56:40 remnux kata[14435]: stop runtime keep alive -Jul 17 11:56:40 remnux kata[14435]: stop agent -Jul 17 11:56:40 remnux kata[14435]: abort log forwarder thread -Jul 17 11:56:40 remnux kata[14435]: send shutdown message -Jul 17 11:56:40 remnux kata[14435]: receive action Shutdown -Jul 17 11:56:40 remnux kata[14435]: end to run service -Jul 17 11:56:40 remnux containerd[9105]: time="2026-07-17T11:56:40.675389392-04:00" level=info msg="shim disconnected" id=f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562 namespace=default -Jul 17 11:56:40 remnux containerd[9105]: time="2026-07-17T11:56:40.675440062-04:00" level=warning msg="cleaning up after shim disconnected" id=f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562 namespace=default -Jul 17 11:56:40 remnux containerd[9105]: time="2026-07-17T11:56:40.675444896-04:00" level=info msg="cleaning up dead shim" namespace=default -Jul 17 12:00:20 remnux systemd[1]: Stopping containerd container runtime... -Jul 17 12:00:20 remnux systemd[1]: containerd.service: Succeeded. -Jul 17 12:00:20 remnux systemd[1]: Stopped containerd container runtime. -Jul 17 12:00:20 remnux systemd[1]: containerd.service: Found left-over process 1998 (containerd-shim) in control group while starting unit. Ignoring. -Jul 17 12:00:20 remnux systemd[1]: This usually indicates unclean termination of a previous run, or service implementation deficiencies. -Jul 17 12:00:20 remnux systemd[1]: Starting containerd container runtime... -Jul 17 12:00:20 remnux systemd[1]: containerd.service: Found left-over process 1998 (containerd-shim) in control group while starting unit. Ignoring. -Jul 17 12:00:20 remnux systemd[1]: This usually indicates unclean termination of a previous run, or service implementation deficiencies. -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20-04:00" level=warning msg="containerd config version `1` has been deprecated and will be converted on each startup in containerd v2.0, use `containerd config migrate` after upgrading to containerd 2.0 to avoid conversion on startup" -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.349290822-04:00" level=info msg="starting containerd" revision= version=1.7.24 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.360035977-04:00" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.362040111-04:00" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.362123302-04:00" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.362197956-04:00" level=info msg="loading plugin \"io.containerd.warning.v1.deprecations\"..." type=io.containerd.warning.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.362244324-04:00" level=info msg="loading plugin \"io.containerd.snapshotter.v1.blockfile\"..." type=io.containerd.snapshotter.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.362290406-04:00" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.blockfile\"..." error="no scratch file generator: skip plugin" type=io.containerd.snapshotter.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.362347438-04:00" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.362496924-04:00" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.362549381-04:00" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.362585312-04:00" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." error="devmapper not configured: skip plugin" type=io.containerd.snapshotter.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.362618751-04:00" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.362665017-04:00" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.362762749-04:00" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.362886716-04:00" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.362928397-04:00" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.362966582-04:00" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.363005210-04:00" level=info msg="metadata content store policy set" policy=shared -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.363273346-04:00" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.363353323-04:00" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.363424507-04:00" level=info msg="loading plugin \"io.containerd.lease.v1.manager\"..." type=io.containerd.lease.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.363469342-04:00" level=info msg="loading plugin \"io.containerd.streaming.v1.manager\"..." type=io.containerd.streaming.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.363535384-04:00" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.363593159-04:00" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.363786794-04:00" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.371843162-04:00" level=info msg="loading plugin \"io.containerd.runtime.v2.shim\"..." type=io.containerd.runtime.v2 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.371873699-04:00" level=info msg="loading plugin \"io.containerd.sandbox.store.v1.local\"..." type=io.containerd.sandbox.store.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.371889541-04:00" level=info msg="loading plugin \"io.containerd.sandbox.controller.v1.local\"..." type=io.containerd.sandbox.controller.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.371901333-04:00" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.371911618-04:00" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.371922970-04:00" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.371943208-04:00" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.371960506-04:00" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.371974982-04:00" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.371988404-04:00" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.372004501-04:00" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.372033791-04:00" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.372048208-04:00" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.372063013-04:00" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.372077028-04:00" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.372090236-04:00" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.372105044-04:00" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.372114858-04:00" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.372131253-04:00" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.373102049-04:00" level=info msg="loading plugin \"io.containerd.grpc.v1.sandbox-controllers\"..." type=io.containerd.grpc.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.373140465-04:00" level=info msg="loading plugin \"io.containerd.grpc.v1.sandboxes\"..." type=io.containerd.grpc.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.373149554-04:00" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.373156638-04:00" level=info msg="loading plugin \"io.containerd.grpc.v1.streaming\"..." type=io.containerd.grpc.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.373163154-04:00" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.373171576-04:00" level=info msg="loading plugin \"io.containerd.transfer.v1.local\"..." type=io.containerd.transfer.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.373186364-04:00" level=info msg="loading plugin \"io.containerd.grpc.v1.transfer\"..." type=io.containerd.grpc.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.373193853-04:00" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.373198999-04:00" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.373232478-04:00" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.373241964-04:00" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="skip plugin: tracing endpoint not configured" type=io.containerd.tracing.processor.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.373247899-04:00" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.373254107-04:00" level=info msg="skip loading plugin \"io.containerd.internal.v1.tracing\"..." error="skip plugin: tracing endpoint not configured" type=io.containerd.internal.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.373273409-04:00" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.373280689-04:00" level=info msg="loading plugin \"io.containerd.nri.v1.nri\"..." type=io.containerd.nri.v1 -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.373288514-04:00" level=info msg="NRI interface is disabled by configuration." -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.373491212-04:00" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.373516692-04:00" level=info msg=serving... address=/run/containerd/containerd.sock -Jul 17 12:00:20 remnux containerd[14678]: time="2026-07-17T12:00:20.373545592-04:00" level=info msg="containerd successfully booted in 0.024971s" -Jul 17 12:00:20 remnux systemd[1]: Started containerd container runtime. -Jul 17 12:00:22 remnux containerd[14678]: time="2026-07-17T12:00:22.548629605-04:00" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 -Jul 17 12:00:22 remnux containerd[14678]: time="2026-07-17T12:00:22.548692337-04:00" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 -Jul 17 12:00:22 remnux containerd[14678]: time="2026-07-17T12:00:22.548709192-04:00" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 -Jul 17 12:00:22 remnux containerd[14678]: time="2026-07-17T12:00:22.548759600-04:00" level=info msg="loading plugin \"io.containerd.ttrpc.v1.pause\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 -Jul 17 12:00:22 remnux containerd[14678]: time="2026-07-17T12:00:22.660318270-04:00" level=info msg="shim disconnected" id=0bc3f8a6dbbe16c7f6b026a71ff32278b7b52573070cb41e4ed12690cf750f7f namespace=default -Jul 17 12:00:22 remnux containerd[14678]: time="2026-07-17T12:00:22.660358835-04:00" level=warning msg="cleaning up after shim disconnected" id=0bc3f8a6dbbe16c7f6b026a71ff32278b7b52573070cb41e4ed12690cf750f7f namespace=default -Jul 17 12:00:22 remnux containerd[14678]: time="2026-07-17T12:00:22.660364949-04:00" level=info msg="cleaning up dead shim" namespace=default -Jul 17 12:00:22 remnux kata[14868]: start to run -Jul 17 12:00:22 remnux kata[14868]: begin to run service -Jul 17 12:00:22 remnux kata[14868]: wait server message -Jul 17 12:00:22 remnux kata[14868]: get config path "" -Jul 17 12:00:22 remnux kata[14868]: load configuration from: /opt/kata/share/defaults/kata-containers/runtime-rs/configuration-qemu-runtime-rs.toml -Jul 17 12:00:22 remnux kata[14868]: Adjusting hypervisor configuration ["qemu"] -Jul 17 12:00:22 remnux kata[14868]: get kata config: TomlConfig { agent: {"kata": Agent { debug: false, log_level: "info", enable_tracing: false, debug_console_enabled: false, visible_cdi_devices: false, server_port: 1024, log_port: 1025, passfd_listener_port: 1027, dial_timeout_ms: 10, reconnect_timeout_ms: 3000, cdh_api_timeout_ms: 50000, request_timeout_ms: 30000, health_check_request_timeout_ms: 90000, kernel_modules: [], container_pipe_size: 0, launch_process_timeout: 0, mem_agent: MemAgent { enable: false, memcg_disable: Some(false), memcg_swap: Some(false), memcg_swappiness_max: Some(50), memcg_period_secs: Some(600), memcg_period_psi_percent_limit: Some(1), memcg_eviction_psi_percent_limit: Some(1), memcg_eviction_run_aging_count_min: Some(3), compact_disable: Some(false), compact_period_secs: Some(600), compact_period_psi_percent_limit: Some(1), compact_psi_percent_limit: Some(5), compact_sec_max: Some(300), compact_order: Some(9), compact_threshold: Some(1024), compact_force_times: Some(9223372036854775807) }, policy: "" }}, hypervisor: {"qemu": Hypervisor { path: "/opt/kata/bin/qemu-system-x86_64", valid_hypervisor_paths: ["/opt/kata/bin/qemu-system-x86_64"], ctlpath: "", valid_ctlpaths: [], jailer_path: "", valid_jailer_paths: [], disable_nesting_checks: false, enable_iothreads: false, indep_iothreads: 0, blockdev_info: BlockDeviceInfo { disable_block_device_use: false, block_device_driver: "virtio-scsi", block_device_aio: "io_uring", block_device_cache_set: false, block_device_cache_direct: false, block_device_cache_noflush: false, block_device_logical_sector_size: 0, block_device_physical_sector_size: 0, disable_image_nvdimm: false, memory_offset: 0, enable_vhost_user_store: false, vhost_user_store_path: "", valid_vhost_user_store_paths: ["/var/run/kata-containers/vhost-user"], disk_rate_limiter_bw_max_rate: 0, disk_rate_limiter_bw_one_time_burst: None, disk_rate_limiter_ops_max_rate: 0, disk_rate_limiter_ops_one_time_burst: None, queue_size: 128, num_queues: 1 }, boot_info: BootInfo { kernel: "/opt/kata/share/kata-containers/vmlinux-6.18.35-197", kernel_params: "cgroup_no_v1=all systemd.unified_cgroup_hierarchy=1", kernel_verity_params: "", initrd: "", image: "/opt/kata/share/kata-containers/kata-ubuntu-noble.image", rootfs_type: "ext4", firmware: "", vm_rootfs_driver: "virtio-pmem" }, cpu_info: CpuInfo { cpu_features: "pmu=off", default_vcpus: 1.0, default_maxvcpus: 4 }, debug_info: DebugInfo { enable_debug: false, log_level: "info", guest_memory_dump_paging: false, guest_memory_dump_path: "", extra_monitor_socket: "" }, device_info: DeviceInfo { default_bridges: 1, hotplug_vfio_on_root_bus: false, cold_plug_vfio: "", pcie_root_port: 0, pcie_switch_port: 0, enable_iommu: false, enable_iommu_platform: false, reclaim_guest_freed_memory: false }, machine_info: MachineInfo { machine_type: "q35", machine_accelerators: "", pflashes: [], entropy_source: "/dev/urandom", valid_entropy_sources: ["/dev/urandom", "/dev/random", ""] }, memory_info: MemoryInfo { default_memory: 2048, default_maxmemory: 7935, memory_slots: 10, enable_mem_prealloc: false, enable_hugepages: false, hugepage_type: Hugetlbfs, enable_virtio_mem: false, enable_guest_swap: false, guest_swap_path: "/run/kata-containers/swap", guest_swap_size_percent: 100, guest_swap_create_threshold_secs: 60 }, network_info: NetworkInfo { disable_vhost_net: false, rx_rate_limiter_max_rate: 0, tx_rate_limiter_max_rate: 0, network_queues: 1 }, security_info: SecurityInfo { rootless: false, rootless_user: None, disable_seccomp: false, confidential_guest: false, sev_snp_guest: false, snp_id_block: "", snp_id_auth: "", snp_guest_policy: 196608, guest_hook_path: "", initdata: "", enable_annotations: ["enable_iommu", "kernel_params", "kernel_verity_params", "default_vcpus", "default_memory"], qgs_port: 0, seccomp_sandbox: Some(""), selinux_label: None }, shared_fs: SharedFsInfo { shared_fs: Some("virtio-fs"), virtio_fs_daemon: "/opt/kata/libexec/virtiofsd", valid_virtio_fs_daemon_paths: ["/opt/kata/libexec/virtiofsd"], virtio_fs_extra_args: ["--thread-pool-size=1", "-o", "announce_submounts"], virtio_fs_cache: "auto", virtio_fs_cache_size: 0, virtio_fs_queue_size: 1024, virtio_fs_is_dax: false }, remote_info: RemoteInfo { hypervisor_socket: "", hypervisor_timeout: 0, default_gpus: 0, default_gpu_model: "" }, vm_template: VmTemplateInfo { boot_to_be_template: false, boot_from_template: false, memory_path: "", device_state_path: "" }, factory: Factory { enable_template: false, template_path: "/run/vc/vm/template" }, prefetch_list_path: "", vendor: HypervisorVendor, disable_guest_selinux: true, disable_selinux: false }}, runtime: Runtime { name: "virt_container", hypervisor_name: "qemu", agent_name: "kata", debug: false, log_level: "info", experimental: [], internetworking_model: "tcfilter", disable_new_netns: false, sandbox_bind_mounts: [], sandbox_cgroup_only: true, enable_vcpus_pinning: false, enable_tracing: false, jaeger_endpoint: "", jaeger_user: "", jaeger_password: "", enable_pprof: false, static_sandbox_resource_mgmt: true, disable_guest_seccomp: true, disable_guest_empty_dir: false, emptydir_mode: "shared-fs", vfio_mode: "guest-kernel", vendor: RuntimeVendor, keep_abnormal: false, dan_conf: "", shared_mounts: [], use_passfd_io: false, passfd_listener_port: 1027, pod_resource_api_sock: "" } } -Jul 17 12:00:22 remnux kata[14868]: Annotation nerdctl/namespace not enabled -Jul 17 12:00:22 remnux kata[14868]: Annotation nerdctl/auto-remove not enabled -Jul 17 12:00:22 remnux kata[14868]: Annotation nerdctl/privileged not enabled -Jul 17 12:00:22 remnux kata[14868]: Annotation nerdctl/log-uri not enabled -Jul 17 12:00:22 remnux kata[14868]: Annotation nerdctl/host-config not enabled -Jul 17 12:00:22 remnux kata[14868]: Annotation nerdctl/extraHosts not enabled -Jul 17 12:00:22 remnux kata[14868]: Annotation nerdctl/state-dir not enabled -Jul 17 12:00:22 remnux kata[14868]: Annotation nerdctl/network-namespace not enabled -Jul 17 12:00:22 remnux kata[14868]: Annotation nerdctl/name not enabled -Jul 17 12:00:22 remnux kata[14868]: Annotation nerdctl/log-config not enabled -Jul 17 12:00:22 remnux kata[14868]: Annotation nerdctl/hostname not enabled -Jul 17 12:00:22 remnux kata[14868]: Annotation nerdctl/platform not enabled -Jul 17 12:00:22 remnux kata[14868]: Annotation nerdctl/domainname not enabled -Jul 17 12:00:22 remnux kata[14868]: Annotation nerdctl/networks not enabled -Jul 17 12:00:22 remnux kata[14868]: Annotation nerdctl/ipc not enabled -Jul 17 12:00:22 remnux kata[14868]: Annotation nerdctl/dns not enabled -Jul 17 12:00:22 remnux kata[14868]: Adjusting hypervisor configuration ["qemu"] -Jul 17 12:00:22 remnux kata[14868]: get config content TomlConfig { agent: {"kata": Agent { debug: false, log_level: "info", enable_tracing: false, debug_console_enabled: false, visible_cdi_devices: false, server_port: 1024, log_port: 1025, passfd_listener_port: 1027, dial_timeout_ms: 10, reconnect_timeout_ms: 3000, cdh_api_timeout_ms: 50000, request_timeout_ms: 30000, health_check_request_timeout_ms: 90000, kernel_modules: [], container_pipe_size: 0, launch_process_timeout: 0, mem_agent: MemAgent { enable: false, memcg_disable: Some(false), memcg_swap: Some(false), memcg_swappiness_max: Some(50), memcg_period_secs: Some(600), memcg_period_psi_percent_limit: Some(1), memcg_eviction_psi_percent_limit: Some(1), memcg_eviction_run_aging_count_min: Some(3), compact_disable: Some(false), compact_period_secs: Some(600), compact_period_psi_percent_limit: Some(1), compact_psi_percent_limit: Some(5), compact_sec_max: Some(300), compact_order: Some(9), compact_threshold: Some(1024), compact_force_times: Some(9223372036854775807) }, policy: "" }}, hypervisor: {"qemu": Hypervisor { path: "/opt/kata/bin/qemu-system-x86_64", valid_hypervisor_paths: ["/opt/kata/bin/qemu-system-x86_64"], ctlpath: "", valid_ctlpaths: [], jailer_path: "", valid_jailer_paths: [], disable_nesting_checks: false, enable_iothreads: false, indep_iothreads: 0, blockdev_info: BlockDeviceInfo { disable_block_device_use: false, block_device_driver: "virtio-scsi", block_device_aio: "io_uring", block_device_cache_set: false, block_device_cache_direct: false, block_device_cache_noflush: false, block_device_logical_sector_size: 0, block_device_physical_sector_size: 0, disable_image_nvdimm: false, memory_offset: 0, enable_vhost_user_store: false, vhost_user_store_path: "", valid_vhost_user_store_paths: ["/var/run/kata-containers/vhost-user"], disk_rate_limiter_bw_max_rate: 0, disk_rate_limiter_bw_one_time_burst: None, disk_rate_limiter_ops_max_rate: 0, disk_rate_limiter_ops_one_time_burst: None, queue_size: 128, num_queues: 1 }, boot_info: BootInfo { kernel: "/opt/kata/share/kata-containers/vmlinux-6.18.35-197", kernel_params: "agent.cdh_api_timeout=50 cgroup_no_v1=all systemd.unified_cgroup_hierarchy=1", kernel_verity_params: "", initrd: "", image: "/opt/kata/share/kata-containers/kata-ubuntu-noble.image", rootfs_type: "ext4", firmware: "", vm_rootfs_driver: "virtio-pmem" }, cpu_info: CpuInfo { cpu_features: "pmu=off", default_vcpus: 1.0, default_maxvcpus: 4 }, debug_info: DebugInfo { enable_debug: false, log_level: "info", guest_memory_dump_paging: false, guest_memory_dump_path: "", extra_monitor_socket: "" }, device_info: DeviceInfo { default_bridges: 1, hotplug_vfio_on_root_bus: false, cold_plug_vfio: "", pcie_root_port: 0, pcie_switch_port: 0, enable_iommu: false, enable_iommu_platform: false, reclaim_guest_freed_memory: false }, machine_info: MachineInfo { machine_type: "q35", machine_accelerators: "", pflashes: [], entropy_source: "/dev/urandom", valid_entropy_sources: ["/dev/urandom", "/dev/random", ""] }, memory_info: MemoryInfo { default_memory: 2048, default_maxmemory: 7935, memory_slots: 10, enable_mem_prealloc: false, enable_hugepages: false, hugepage_type: Hugetlbfs, enable_virtio_mem: false, enable_guest_swap: false, guest_swap_path: "/run/kata-containers/swap", guest_swap_size_percent: 100, guest_swap_create_threshold_secs: 60 }, network_info: NetworkInfo { disable_vhost_net: false, rx_rate_limiter_max_rate: 0, tx_rate_limiter_max_rate: 0, network_queues: 1 }, security_info: SecurityInfo { rootless: false, rootless_user: None, disable_seccomp: false, confidential_guest: false, sev_snp_guest: false, snp_id_block: "", snp_id_auth: "", snp_guest_policy: 196608, guest_hook_path: "", initdata: "", enable_annotations: ["enable_iommu", "kernel_params", "kernel_verity_params", "default_vcpus", "default_memory"], qgs_port: 0, seccomp_sandbox: Some(""), selinux_label: None }, shared_fs: SharedFsInfo { shared_fs: Some("virtio-fs"), virtio_fs_daemon: "/opt/kata/libexec/virtiofsd", valid_virtio_fs_daemon_paths: ["/opt/kata/libexec/virtiofsd"], virtio_fs_extra_args: ["--thread-pool-size=1", "-o", "announce_submounts"], virtio_fs_cache: "auto", virtio_fs_cache_size: 0, virtio_fs_queue_size: 1024, virtio_fs_is_dax: false }, remote_info: RemoteInfo { hypervisor_socket: "", hypervisor_timeout: 0, default_gpus: 0, default_gpu_model: "" }, vm_template: VmTemplateInfo { boot_to_be_template: false, boot_from_template: false, memory_path: "", device_state_path: "" }, factory: Factory { enable_template: false, template_path: "/run/vc/vm/template" }, prefetch_list_path: "", vendor: HypervisorVendor, disable_guest_selinux: true, disable_selinux: false }}, runtime: Runtime { name: "virt_container", hypervisor_name: "qemu", agent_name: "kata", debug: false, log_level: "info", experimental: [], internetworking_model: "tcfilter", disable_new_netns: false, sandbox_bind_mounts: [], sandbox_cgroup_only: true, enable_vcpus_pinning: false, enable_tracing: false, jaeger_endpoint: "", jaeger_user: "", jaeger_password: "", enable_pprof: false, static_sandbox_resource_mgmt: true, disable_guest_seccomp: true, disable_guest_empty_dir: false, emptydir_mode: "shared-fs", vfio_mode: "guest-kernel", vendor: RuntimeVendor, keep_abnormal: false, dan_conf: "", shared_mounts: [], use_passfd_io: false, passfd_listener_port: 1027, pod_resource_api_sock: "" } } -Jul 17 12:00:22 remnux kata[14868]: (from PodSandbox's annotation / SingleContainer's spec) initial size: vcpu=0, mem_mb=0 -Jul 17 12:00:22 remnux kata[14868]: new runtime handler virt_container -Jul 17 12:00:22 remnux kata[14868]: QemuInner::hypervisor_config() -Jul 17 12:00:22 remnux kata[14868]: shim management http server starts -Jul 17 12:00:22 remnux kata[14868]: Preparing QEMU VM -Jul 17 12:00:22 remnux kata[14868]: QemuInner::hypervisor_config() -Jul 17 12:00:22 remnux kata[14868]: prepare vm socket config for sandbox. -Jul 17 12:00:22 remnux kata[14868]: QemuInner::hypervisor_config() -Jul 17 12:00:22 remnux kata[14868]: QemuInner::hypervisor_config() -Jul 17 12:00:22 remnux kata[14868]: QemuInner::hypervisor_config() -Jul 17 12:00:22 remnux kata[14868]: QemuInner::hypervisor_config() -Jul 17 12:00:22 remnux kata[14868]: QemuInner::hypervisor_config() -Jul 17 12:00:22 remnux kata[14868]: QemuInner::hypervisor_config() -Jul 17 12:00:22 remnux kata[14868]: QemuInner::hypervisor_config() -Jul 17 12:00:22 remnux kata[14868]: no pod devices to prepare for sandbox. -Jul 17 12:00:22 remnux kata[14868]: QemuInner::hypervisor_config() -Jul 17 12:00:22 remnux kata[14868]: No PCIe ports available for VM. -Jul 17 12:00:22 remnux kata[14868]: QemuInner::add_device() Vsock(VsockDevice { id: "9c953172ff711438", config: VsockConfig { guest_cid: 4294967295 } }) -Jul 17 12:00:22 remnux kata[14868]: QemuInner::hypervisor_config() -Jul 17 12:00:22 remnux kata[14868]: QemuInner::hypervisor_config() -Jul 17 12:00:22 remnux kata[14868]: QemuInner::hypervisor_config() -Jul 17 12:00:22 remnux kata[14868]: QemuInner::add_device() ShareFs(ShareFsDevice { device_id: "50ba1325f3e5ee74", config: ShareFsConfig { host_shared_path: "/run/kata-containers/shared/sandboxes/498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee/ro", fs_type: "virtio-fs", sock_path: "/run/kata/498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee/root/virtiofsd.sock", mount_tag: "kataShared", queue_size: 1024, queue_num: 1, options: [], mount_config: None } }) -Jul 17 12:00:22 remnux kata[14868]: QemuInner::hypervisor_config() -Jul 17 12:00:22 remnux kata[14868]: mgmt-svr: binding to path unix:///run/kata/498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee/shim-monitor.sock -Jul 17 12:00:22 remnux kata[14868]: source: virtiofsd [2026-07-17T16:00:22Z WARN virtiofsd] Use of deprecated option format '-o': Please specify options without it (e.g., '--cache auto' instead of '-o cache=auto') -Jul 17 12:00:22 remnux kata[14868]: source: virtiofsd [2026-07-17T16:00:22Z INFO virtiofsd] Waiting for vhost-user socket connection... -Jul 17 12:00:22 remnux kata[14868]: start virtiofsd successfully -Jul 17 12:00:22 remnux kata[14868]: sandbox bindmounts empty, just skip it. -Jul 17 12:00:22 remnux kata[14868]: QemuInner::add_device() Block(BlockDevice { device_id: "a0742d93036f4fc", attach_count: 1, config: BlockConfig { path_on_host: "/opt/kata/share/kata-containers/kata-ubuntu-noble.image", is_readonly: true, no_drop: false, format: Raw, is_direct: None, index: 0, blkdev_aio: IoUring, driver_option: "nvdimm", virt_path: "/dev/pmem0", pci_path: None, scsi_addr: None, ccw_addr: None, attach_count: 0, major: 0, minor: 0, queue_size: 0, num_queues: 0, logical_sector_size: 0, physical_sector_size: 0 } }) -Jul 17 12:00:22 remnux kata[14868]: Starting QEMU VM -Jul 17 12:00:22 remnux kata[14868]: qemu args: -name sandbox-498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee -kernel /opt/kata/share/kata-containers/vmlinux-6.18.35-197 -append reboot=k panic=1 systemd.unit=kata-containers.target systemd.mask=systemd-networkd.service systemd.mask=systemd-networkd.socket root=/dev/pmem0p1 rootflags=dax,data=ordered,errors=remount-ro ro rootfstype=ext4 agent.cdh_api_timeout=50 cgroup_no_v1=all systemd.unified_cgroup_hierarchy=1 selinux=0 console=hvc0 -smp 1 -machine q35,accel=kvm,nvdimm=on,kernel_irqchip=on -cpu host,pmu=off -m 2G,slots=10,maxmem=7935M -object memory-backend-file,id=entire-guest-memory-share,mem-path=/dev/shm,size=2G,share=on,prealloc=off,readonly=off -qmp unix:fd=16,server=on,wait=off -rtc base=utc,clock=host,driftfix=slew -object rng-random,id=rng0,filename=/dev/urandom -device virtio-rng-pci,rng=rng0 -device pci-bridge,bus=pcie.0,id=pci-bridge-0,chassis_nr=1,shpc=off,addr=2,io-reserve=4k,mem-reserve=1m,pref64-reserve=1m -device virtio-scsi-pci,id=scsi0,disable-modern=true -device vhost-vsock-pci,disable-modern=true,vhostfd=17,guest-cid=4238183007 -chardev socket,id=virtiofsd-chardev,path=/run/kata/498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee/root/virtiofsd.sock -device vhost-user-fs-pci,chardev=virtiofsd-chardev,tag=kataShared,queue-size=1024 -numa node,memdev=entire-guest-memory-share -object memory-backend-file,id=TODO,mem-path=/opt/kata/share/kata-containers/kata-ubuntu-noble.image,size=256M,share=off,prealloc=off,readonly=on -device nvdimm,memdev=TODO,unarmed=on -device virtio-serial-pci,id=serial0 -device virtconsole,id=console0,chardev=charconsole0 -chardev socket,id=charconsole0,server=on,wait=off,path=/run/kata/498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee/root/console.sock -vga none -no-user-config -nodefaults -nographic -no-reboot -Jul 17 12:00:22 remnux kata[14868]: qemu cmd: Command { std: "/opt/kata/bin/qemu-system-x86_64" "-name" "sandbox-498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee" "-kernel" "/opt/kata/share/kata-containers/vmlinux-6.18.35-197" "-append" "reboot=k panic=1 systemd.unit=kata-containers.target systemd.mask=systemd-networkd.service systemd.mask=systemd-networkd.socket root=/dev/pmem0p1 rootflags=dax,data=ordered,errors=remount-ro ro rootfstype=ext4 agent.cdh_api_timeout=50 cgroup_no_v1=all systemd.unified_cgroup_hierarchy=1 selinux=0 console=hvc0" "-smp" "1" "-machine" "q35,accel=kvm,nvdimm=on,kernel_irqchip=on" "-cpu" "host,pmu=off" "-m" "2G,slots=10,maxmem=7935M" "-object" "memory-backend-file,id=entire-guest-memory-share,mem-path=/dev/shm,size=2G,share=on,prealloc=off,readonly=off" "-qmp" "unix:fd=16,server=on,wait=off" "-rtc" "base=utc,clock=host,driftfix=slew" "-object" "rng-random,id=rng0,filename=/dev/urandom" "-device" "virtio-rng-pci,rng=rng0" "-device" "pci-bridge,bus=pcie.0,id=pci-bridge-0,chassis_nr=1,shpc=off,addr=2,io-reserve=4k,mem-reserve=1m,pref64-reserve=1m" "-device" "virtio-scsi-pci,id=scsi0,disable-modern=true" "-device" "vhost-vsock-pci,disable-modern=true,vhostfd=17,guest-cid=4238183007" "-chardev" "socket,id=virtiofsd-chardev,path=/run/kata/498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee/root/virtiofsd.sock" "-device" "vhost-user-fs-pci,chardev=virtiofsd-chardev,tag=kataShared,queue-size=1024" "-numa" "node,memdev=entire-guest-memory-share" "-object" "memory-backend-file,id=TODO,mem-path=/opt/kata/share/kata-containers/kata-ubuntu-noble.image,size=256M,share=off,prealloc=off,readonly=on" "-device" "nvdimm,memdev=TODO,unarmed=on" "-device" "virtio-serial-pci,id=serial0" "-device" "virtconsole,id=console0,chardev=charconsole0" "-chardev" "socket,id=charconsole0,server=on,wait=off,path=/run/kata/498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee/root/console.sock" "-vga" "none" "-no-user-config" "-nodefaults" "-nographic" "-no-reboot", kill_on_drop: false } -Jul 17 12:00:22 remnux kata[14868]: qemu process started -Jul 17 12:00:22 remnux kata[14868]: source: virtiofsd [2026-07-17T16:00:22Z INFO virtiofsd] Client connected, servicing requests -Jul 17 12:00:22 remnux kata[14868]: QMP initialized: QMP { - version: VersionInfo { - package: "kata-static", - qemu: VersionTriple { - major: 11, - micro: 1, - minor: 0, - }, - }, - capabilities: [ - Unknown( - String("oob"), - ), - ], - } -Jul 17 12:00:22 remnux kata[14868]: start vm -Jul 17 12:00:22 remnux kata[14868]: QemuInner::get_vmm_master_tid() -Jul 17 12:00:22 remnux kata[14868]: QemuInner::get_vmm_master_tid(): returning 14879 -Jul 17 12:00:22 remnux kata[14868]: starting reading qemu stderr -Jul 17 12:00:22 remnux kata[14868]: execute hook Hook { path: "/usr/local/bin/nerdctl", args: Some(["/usr/local/bin/nerdctl", "internal", "oci-hook", "createRuntime"]), env: Some(["COLORTERM=truecolor", "XAUTHORITY=/run/user/1000/gdm/Xauthority", "LANG=en_US.UTF-8", "LS_COLORS=rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:mi=00:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arc=01;31:*.arj=01;31:*.taz=01;31:*.lha=01;31:*.lz4=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.tzo=01;31:*.t7z=01;31:*.zip=01;31:*.z=01;31:*.dz=01;31:*.gz=01;31:*.lrz=01;31:*.lz=01;31:*.lzo=01;31:*.xz=01;31:*.zst=01;31:*.tzst=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.war=01;31:*.ear=01;31:*.sar=01;31:*.rar=01;31:*.alz=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.cab=01;31:*.wim=01;31:*.swm=01;31:*.dwm=01;31:*.esd=01;31:*.jpg=01;35:*.jpeg=01;35:*.mjpg=01;35:*.mjpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.webm=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=00;36:*.au=00;36:*.flac=00;36:*.m4a=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.oga=00;36:*.opus=00;36:*.spx=00;36:*.xspf=00;36:", "TERM=xterm-256color", "DISPLAY=:0", "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin", "MAIL=/var/mail/root", "LOGNAME=root", "USER=root", "HOME=/root", "SHELL=/bin/bash", "SUDO_COMMAND=/usr/bin/timeout --foreground --kill-after=15s 120 nerdctl run --name lab12-pid-kata --rm --net=none --runtime=io.containerd.kata.v2 --privileged --pid=host alpine:3.20 sh -c \n echo \"ATTEMPTED THROUGH KATA PID NAMESPACE\" \\\n > /proc/1/root/tmp/lab12-target\n\n cat /proc/1/root/tmp/lab12-target\n ", "SUDO_USER=remnux", "SUDO_UID=1000", "SUDO_GID=1000", "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin:/usr/sbin:/sbin"]), timeout: None } -Jul 17 12:00:22 remnux kata[14868]: exit status of hook Hook { path: "/usr/local/bin/nerdctl", args: Some(["/usr/local/bin/nerdctl", "internal", "oci-hook", "createRuntime"]), env: Some(["COLORTERM=truecolor", "XAUTHORITY=/run/user/1000/gdm/Xauthority", "LANG=en_US.UTF-8", "LS_COLORS=rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:mi=00:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arc=01;31:*.arj=01;31:*.taz=01;31:*.lha=01;31:*.lz4=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.tzo=01;31:*.t7z=01;31:*.zip=01;31:*.z=01;31:*.dz=01;31:*.gz=01;31:*.lrz=01;31:*.lz=01;31:*.lzo=01;31:*.xz=01;31:*.zst=01;31:*.tzst=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.war=01;31:*.ear=01;31:*.sar=01;31:*.rar=01;31:*.alz=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.cab=01;31:*.wim=01;31:*.swm=01;31:*.dwm=01;31:*.esd=01;31:*.jpg=01;35:*.jpeg=01;35:*.mjpg=01;35:*.mjpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.webm=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=00;36:*.au=00;36:*.flac=00;36:*.m4a=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.oga=00;36:*.opus=00;36:*.spx=00;36:*.xspf=00;36:", "TERM=xterm-256color", "DISPLAY=:0", "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin", "MAIL=/var/mail/root", "LOGNAME=root", "USER=root", "HOME=/root", "SHELL=/bin/bash", "SUDO_COMMAND=/usr/bin/timeout --foreground --kill-after=15s 120 nerdctl run --name lab12-pid-kata --rm --net=none --runtime=io.containerd.kata.v2 --privileged --pid=host alpine:3.20 sh -c \n echo \"ATTEMPTED THROUGH KATA PID NAMESPACE\" \\\n > /proc/1/root/tmp/lab12-target\n\n cat /proc/1/root/tmp/lab12-target\n ", "SUDO_USER=remnux", "SUDO_UID=1000", "SUDO_GID=1000", "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin:/usr/sbin:/sbin"]), timeout: None } : Exited(0) -Jul 17 12:00:22 remnux kata[14868]: hook Hook { path: "/usr/local/bin/nerdctl", args: Some(["/usr/local/bin/nerdctl", "internal", "oci-hook", "createRuntime"]), env: Some(["COLORTERM=truecolor", "XAUTHORITY=/run/user/1000/gdm/Xauthority", "LANG=en_US.UTF-8", "LS_COLORS=rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:mi=00:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arc=01;31:*.arj=01;31:*.taz=01;31:*.lha=01;31:*.lz4=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.tzo=01;31:*.t7z=01;31:*.zip=01;31:*.z=01;31:*.dz=01;31:*.gz=01;31:*.lrz=01;31:*.lz=01;31:*.lzo=01;31:*.xz=01;31:*.zst=01;31:*.tzst=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.war=01;31:*.ear=01;31:*.sar=01;31:*.rar=01;31:*.alz=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.cab=01;31:*.wim=01;31:*.swm=01;31:*.dwm=01;31:*.esd=01;31:*.jpg=01;35:*.jpeg=01;35:*.mjpg=01;35:*.mjpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.webm=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=00;36:*.au=00;36:*.flac=00;36:*.m4a=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.oga=00;36:*.opus=00;36:*.spx=00;36:*.xspf=00;36:", "TERM=xterm-256color", "DISPLAY=:0", "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin", "MAIL=/var/mail/root", "LOGNAME=root", "USER=root", "HOME=/root", "SHELL=/bin/bash", "SUDO_COMMAND=/usr/bin/timeout --foreground --kill-after=15s 120 nerdctl run --name lab12-pid-kata --rm --net=none --runtime=io.containerd.kata.v2 --privileged --pid=host alpine:3.20 sh -c \n echo \"ATTEMPTED THROUGH KATA PID NAMESPACE\" \\\n > /proc/1/root/tmp/lab12-target\n\n cat /proc/1/root/tmp/lab12-target\n ", "SUDO_USER=remnux", "SUDO_UID=1000", "SUDO_GID=1000", "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin:/usr/sbin:/sbin"]), timeout: None } succeeds -Jul 17 12:00:22 remnux kata[14868]: hook /usr/local/bin/nerdctl finished -Jul 17 12:00:22 remnux kata[14868]: QemuInner::hypervisor_config() -Jul 17 12:00:22 remnux kata[14868]: get network entity from config NetworkWithNetNsConfig { network_model: "tcfilter", netns_path: "/var/run/netns/cnitest-17c55bf8-3970-6ee7-6c16-8084c2a6c46a", queues: 1, network_created: true } tid Pid(14894) -Jul 17 12:00:22 remnux kata[14868]: set netns from old File { fd: 24, path: "net:[4026531840]", read: true, write: false } to new File { fd: 25, path: "/run/netns/cnitest-17c55bf8-3970-6ee7-6c16-8084c2a6c46a", read: true, write: false } tid 14894 -Jul 17 12:00:22 remnux kata[14868]: set netns to old 24 -Jul 17 12:00:22 remnux kata[14868]: set netns from old File { fd: 24, path: "net:[4026531840]", read: true, write: false } to new File { fd: 26, path: "/run/netns/cnitest-17c55bf8-3970-6ee7-6c16-8084c2a6c46a", read: true, write: false } tid 14894 -Jul 17 12:00:22 remnux kata[14868]: set netns to old 24 -Jul 17 12:00:22 remnux kata[14868]: QemuInner::get_agent_socket() -Jul 17 12:00:22 remnux kata[14868]: begin to connect agent "vsock://4238183007" -Jul 17 12:00:22 remnux kata[14868]: try to connect agent server through Vsock { vsock_cid: 4238183007, port: 1024 } -Jul 17 12:00:22 remnux kata[14868]: Wait QEMU VM -Jul 17 12:00:22 remnux kata[14868]: QemuInner::get_vmm_master_tid() -Jul 17 12:00:22 remnux kata[14868]: QemuInner::get_vmm_master_tid(): returning 14879 -Jul 17 12:00:28 remnux kata[14868]: vsock: connected to Vsock { vsock_cid: 4238183007, port: 1024 } after 9 attempts -Jul 17 12:00:28 remnux kata[14868]: get stream raw fd 16 with socket address: "vsock://4238183007" and server_port 1024 -Jul 17 12:00:28 remnux kata[14868]: QemuInner::hypervisor_config() -Jul 17 12:00:28 remnux kata[14868]: try to connect to agent-log -Jul 17 12:00:28 remnux kata[14868]: QemuInner::set_guest_memory_block_size(): block size set to 134217728 -Jul 17 12:00:28 remnux kata[14868]: QemuInner::hypervisor_config() -Jul 17 12:00:28 remnux kata[14868]: QemuInner::hypervisor_config() -Jul 17 12:00:28 remnux kata[14868]: memory block size is 134217728, memory probe support false -Jul 17 12:00:28 remnux kata[14868]: oom watcher start -Jul 17 12:00:28 remnux kata[14868]: start runtime keep alive -Jul 17 12:00:28 remnux kata[14868]: QemuInner::hypervisor_config() -Jul 17 12:00:28 remnux kata[14868]: QemuInner::get_ns_path() -Jul 17 12:00:28 remnux kata[14868]: set netns from old File { fd: 17, path: "net:[4026531840]", read: true, write: false } to new File { fd: 22, path: "net:[4026531840]", read: true, write: false } tid 14869 -Jul 17 12:00:28 remnux kata[14868]: set netns to old 17 -Jul 17 12:00:28 remnux kata[14868]: BUG: unknown mount flag: "index=off" -Jul 17 12:00:28 remnux kata[14868]: BUG: unknown mount flag: "workdir=/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/60/work" -Jul 17 12:00:28 remnux kata[14868]: BUG: unknown mount flag: "upperdir=/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/60/fs" -Jul 17 12:00:28 remnux kata[14868]: BUG: unknown mount flag: "lowerdir=/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/1/fs" -Jul 17 12:00:28 remnux kata[14868]: oci mount is : [Mount { destination: "/proc", typ: Some("proc"), source: Some("proc"), options: Some(["nosuid", "noexec", "nodev"]) }, Mount { destination: "/dev", typ: Some("tmpfs"), source: Some("tmpfs"), options: Some(["nosuid", "strictatime", "mode=755", "size=65536k"]) }, Mount { destination: "/sys", typ: Some("sysfs"), source: Some("sysfs"), options: Some(["nosuid", "noexec", "nodev", "rw"]) }, Mount { destination: "/dev/pts", typ: Some("devpts"), source: Some("devpts"), options: Some(["nosuid", "noexec", "newinstance", "ptmxmode=0666", "mode=0620", "gid=5"]) }, Mount { destination: "/dev/shm", typ: Some("tmpfs"), source: Some("shm"), options: Some(["nosuid", "noexec", "nodev", "mode=1777", "size=65536k"]) }, Mount { destination: "/dev/mqueue", typ: Some("mqueue"), source: Some("mqueue"), options: Some(["nosuid", "noexec", "nodev"]) }, Mount { destination: "/sys/fs/cgroup", typ: Some("cgroup"), source: Some("cgroup"), options: Some(["rw", "nosuid", "noexec", "nodev"]) }, Mount { destination: "/etc/resolv.conf", typ: Some("bind"), source: Some("/var/lib/nerdctl/1935db59/containers/default/498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee/resolv.conf"), options: Some(["bind", "rprivate"]) }, Mount { destination: "/etc/hosts", typ: Some("bind"), source: Some("/var/lib/nerdctl/1935db59/etchosts/default/498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee/hosts"), options: Some(["bind", "rprivate"]) }, Mount { destination: "/etc/hostname", typ: Some("bind"), source: Some("/var/lib/nerdctl/1935db59/containers/default/498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee/hostname"), options: Some(["bind", "rprivate"]) }] -Jul 17 12:00:28 remnux kata[14868]: wait on container terminated -Jul 17 12:00:28 remnux kata[14868]: container terminated -Jul 17 12:00:28 remnux kata[14868]: stop container: agent remove container failed: rpc status: Status { code: INTERNAL, message: "Invalid container id\n\nStack backtrace:\n 0: \n 1: \n 2: \n 3: \n 4: \n 5: \n 6: \n 7: \n 8: \n 9: \n 10: \n 11: \n 12: \n 13: \n 14: \n 15: ", details: [], special_fields: SpecialFields { unknown_fields: UnknownFields { fields: None }, cached_size: CachedSize { size: 0 } } } -Jul 17 12:00:28 remnux kata[14868]: Cleaning up DefaultVolume is still unimplemented. -Jul 17 12:00:28 remnux kata[14868]: Cleaning up DefaultVolume is still unimplemented. -Jul 17 12:00:28 remnux kata[14868]: Cleaning up DefaultVolume is still unimplemented. -Jul 17 12:00:28 remnux kata[14868]: Cleaning up DefaultVolume is still unimplemented. -Jul 17 12:00:28 remnux kata[14868]: Cleaning up DefaultVolume is still unimplemented. -Jul 17 12:00:28 remnux kata[14868]: Cleaning up DefaultVolume is still unimplemented. -Jul 17 12:00:28 remnux kata[14868]: The path will be umounted due to no references, host_source = /var/lib/nerdctl/1935db59/containers/default/498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee/resolv.conf -Jul 17 12:00:28 remnux kata[14868]: lazy umount for /run/kata-containers/shared/sandboxes/498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee/rw/passthrough/sandbox-a9641e9b-resolv.conf -Jul 17 12:00:28 remnux kata[14868]: The path will be umounted due to no references, host_source = /var/lib/nerdctl/1935db59/etchosts/default/498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee/hosts -Jul 17 12:00:28 remnux kata[14868]: lazy umount for /run/kata-containers/shared/sandboxes/498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee/rw/passthrough/sandbox-3f906b0b-hosts -Jul 17 12:00:28 remnux kata[14868]: The path will be umounted due to no references, host_source = /var/lib/nerdctl/1935db59/containers/default/498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee/hostname -Jul 17 12:00:28 remnux kata[14868]: lazy umount for /run/kata-containers/shared/sandboxes/498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee/rw/passthrough/sandbox-766848bc-hostname -Jul 17 12:00:28 remnux kata[14868]: lazy umount for /run/kata-containers/shared/sandboxes/498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee/rw/passthrough/498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee/rootfs -Jul 17 12:00:28 remnux kata[14868]: lazy umount for /run/containerd/io.containerd.runtime.v2.task/default/498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee/rootfs -Jul 17 12:00:28 remnux kata[14868]: shutdown -Jul 17 12:00:28 remnux kata[14868]: begin stop sandbox -Jul 17 12:00:28 remnux kata[14868]: Stopping QEMU VM -Jul 17 12:00:28 remnux kata[14868]: QemuInner::stop_vm(): kill()'ing qemu -Jul 17 12:00:28 remnux kata[14868]: oom watcher cancelled, sandbox is stopping -Jul 17 12:00:28 remnux kata[14868]: Failed to terminate pending RPC: the request has returned -Jul 17 12:00:28 remnux kata[14868]: source: virtiofsd [2026-07-17T16:00:28Z INFO virtiofsd] Client disconnected, shutting down -Jul 17 12:00:28 remnux kata[14868]: finished reading qemu stderr -Jul 17 12:00:28 remnux kata[14868]: wait virtiofsd Ok(ExitStatus(unix_wait_status(0))) -Jul 17 12:00:28 remnux kata[14868]: wait sandbox -Jul 17 12:00:28 remnux kata[14868]: sandbox stopped -Jul 17 12:00:28 remnux kata[14868]: delete hypervisor -Jul 17 12:00:28 remnux kata[14868]: QemuInner::cleanup() -Jul 17 12:00:28 remnux kata[14868]: resource clean up -Jul 17 12:00:28 remnux kata[14868]: set netns from old File { fd: 13, path: "net:[4026531840]", read: true, write: false } to new File { fd: 14, path: "/run/netns/cnitest-17c55bf8-3970-6ee7-6c16-8084c2a6c46a", read: true, write: false } tid 14870 -Jul 17 12:00:28 remnux kata[14868]: set netns to old 13 -Jul 17 12:00:28 remnux kata[14868]: failed to remove network: failed to remove netns path -Jul 17 12:00:28 remnux kata[14868]: sandbox bindmounts empty, just skip it. -Jul 17 12:00:28 remnux kata[14868]: shutdown virtiofsd pid 14874 -Jul 17 12:00:28 remnux kata[14868]: stop monitor -Jul 17 12:00:28 remnux containerd[14678]: time="2026-07-17T12:00:28.864498811-04:00" level=info msg="shim disconnected" id=498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee namespace=default -Jul 17 12:00:28 remnux containerd[14678]: time="2026-07-17T12:00:28.864549080-04:00" level=warning msg="cleaning up after shim disconnected" id=498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee namespace=default -Jul 17 12:00:28 remnux containerd[14678]: time="2026-07-17T12:00:28.864556238-04:00" level=info msg="cleaning up dead shim" namespace=default -Jul 17 12:00:28 remnux kata[14868]: stop runtime keep alive -Jul 17 12:00:28 remnux kata[14868]: stop agent -Jul 17 12:00:28 remnux kata[14868]: abort log forwarder thread -Jul 17 12:00:28 remnux kata[14868]: send shutdown message -Jul 17 12:00:28 remnux kata[14868]: receive action Shutdown -Jul 17 12:00:28 remnux kata[14868]: end to run service diff --git a/submissions/labs/lab12/results/containerd-journal.txt b/submissions/labs/lab12/results/containerd-journal.txt deleted file mode 100644 index 6ebef44a3..000000000 --- a/submissions/labs/lab12/results/containerd-journal.txt +++ /dev/null @@ -1,269 +0,0 @@ --- Logs begin at Mon 2024-10-07 21:49:33 EDT, end at Fri 2026-07-17 11:56:40 EDT. -- -Jul 17 11:56:32 remnux kata[13933]: Cleaning up DefaultVolume is still unimplemented. -Jul 17 11:56:32 remnux kata[13933]: Cleaning up DefaultVolume is still unimplemented. -Jul 17 11:56:32 remnux kata[13933]: Cleaning up DefaultVolume is still unimplemented. -Jul 17 11:56:32 remnux kata[13933]: Cleaning up DefaultVolume is still unimplemented. -Jul 17 11:56:32 remnux kata[13933]: Cleaning up DefaultVolume is still unimplemented. -Jul 17 11:56:32 remnux kata[13933]: Cleaning up DefaultVolume is still unimplemented. -Jul 17 11:56:32 remnux kata[13933]: The path will be umounted due to no references, host_source = /var/lib/nerdctl/1935db59/containers/default/25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f/resolv.conf -Jul 17 11:56:32 remnux kata[13933]: lazy umount for /run/kata-containers/shared/sandboxes/25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f/rw/passthrough/sandbox-767c7981-resolv.conf -Jul 17 11:56:32 remnux kata[13933]: The path will be umounted due to no references, host_source = /var/lib/nerdctl/1935db59/etchosts/default/25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f/hosts -Jul 17 11:56:32 remnux kata[13933]: lazy umount for /run/kata-containers/shared/sandboxes/25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f/rw/passthrough/sandbox-11f8c259-hosts -Jul 17 11:56:32 remnux kata[13933]: The path will be umounted due to no references, host_source = /var/lib/nerdctl/1935db59/containers/default/25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f/hostname -Jul 17 11:56:32 remnux kata[13933]: lazy umount for /run/kata-containers/shared/sandboxes/25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f/rw/passthrough/sandbox-417f2d60-hostname -Jul 17 11:56:32 remnux kata[13933]: lazy umount for /run/kata-containers/shared/sandboxes/25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f/rw/passthrough/25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f/rootfs -Jul 17 11:56:32 remnux kata[13933]: lazy umount for /run/containerd/io.containerd.runtime.v2.task/default/25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f/rootfs -Jul 17 11:56:32 remnux kata[13933]: end io wait thread -Jul 17 11:56:32 remnux kata[13933]: end wait exited -Jul 17 11:56:32 remnux kata[13933]: wait process exit status ProcessExitStatus { exit_code: 0, exit_time: Some(SystemTime { tv_sec: 1784303792, tv_nsec: 379981952 }) } -Jul 17 11:56:32 remnux kata[13933]: container process exited with ProcessExitStatus { exit_code: 0, exit_time: Some(SystemTime { tv_sec: 1784303792, tv_nsec: 379981952 }) } -Jul 17 11:56:32 remnux kata[13933]: begin stop sandbox -Jul 17 11:56:32 remnux kata[13933]: Stopping QEMU VM -Jul 17 11:56:32 remnux kata[13933]: QemuInner::stop_vm(): kill()'ing qemu -Jul 17 11:56:32 remnux kata[13933]: end wait exited -Jul 17 11:56:32 remnux kata[13933]: wait process exit status ProcessExitStatus { exit_code: 0, exit_time: Some(SystemTime { tv_sec: 1784303792, tv_nsec: 379981952 }) } -Jul 17 11:56:32 remnux kata[13933]: begin stop sandbox -Jul 17 11:56:32 remnux kata[13933]: end wait exited -Jul 17 11:56:32 remnux kata[13933]: wait process exit status ProcessExitStatus { exit_code: 0, exit_time: Some(SystemTime { tv_sec: 1784303792, tv_nsec: 379981952 }) } -Jul 17 11:56:32 remnux kata[13933]: container process exited with ProcessExitStatus { exit_code: 0, exit_time: Some(SystemTime { tv_sec: 1784303792, tv_nsec: 379981952 }) } -Jul 17 11:56:32 remnux kata[13933]: begin stop sandbox -Jul 17 11:56:32 remnux kata[13933]: oom watcher cancelled, sandbox is stopping -Jul 17 11:56:32 remnux kata[13933]: Failed to terminate pending RPC: the request has returned -Jul 17 11:56:32 remnux kata[13933]: source: virtiofsd [2026-07-17T15:56:32Z INFO virtiofsd] Client disconnected, shutting down -Jul 17 11:56:32 remnux kata[13933]: finished reading qemu stderr -Jul 17 11:56:32 remnux kata[13933]: wait sandbox -Jul 17 11:56:32 remnux kata[13933]: Stopping QEMU VM -Jul 17 11:56:32 remnux kata[13933]: QemuInner::stop_vm(): qemu process isn't running (likely stopped already) -Jul 17 11:56:32 remnux kata[13933]: wait sandbox -Jul 17 11:56:32 remnux kata[13933]: Stopping QEMU VM -Jul 17 11:56:32 remnux kata[13933]: QemuInner::stop_vm(): qemu process isn't running (likely stopped already) -Jul 17 11:56:32 remnux kata[13933]: wait sandbox -Jul 17 11:56:32 remnux kata[13933]: sandbox stopped -Jul 17 11:56:32 remnux kata[13933]: sandbox stopped -Jul 17 11:56:32 remnux kata[13933]: sandbox stopped -Jul 17 11:56:32 remnux kata[13933]: receive action Event(TaskExit { container_id: "25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f", id: "25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f", pid: 13944, exit_status: 0, exited_at: MessageField(Some(Timestamp { seconds: 1784303792, nanos: 0, special_fields: SpecialFields { unknown_fields: UnknownFields { fields: None }, cached_size: CachedSize { size: 0 } } })), special_fields: SpecialFields { unknown_fields: UnknownFields { fields: None }, cached_size: CachedSize { size: 0 } } }) -Jul 17 11:56:32 remnux kata[13933]: get event TaskExit { container_id: "25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f", id: "25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f", pid: 13944, exit_status: 0, exited_at: MessageField(Some(Timestamp { seconds: 1784303792, nanos: 0, special_fields: SpecialFields { unknown_fields: UnknownFields { fields: None }, cached_size: CachedSize { size: 0 } } })), special_fields: SpecialFields { unknown_fields: UnknownFields { fields: None }, cached_size: CachedSize { size: 0 } } } -Jul 17 11:56:32 remnux kata[13933]: receive action Event(TaskExit { container_id: "25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f", id: "25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f", pid: 13944, exit_status: 0, exited_at: MessageField(Some(Timestamp { seconds: 1784303792, nanos: 0, special_fields: SpecialFields { unknown_fields: UnknownFields { fields: None }, cached_size: CachedSize { size: 0 } } })), special_fields: SpecialFields { unknown_fields: UnknownFields { fields: None }, cached_size: CachedSize { size: 0 } } }) -Jul 17 11:56:32 remnux kata[13933]: get event TaskExit { container_id: "25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f", id: "25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f", pid: 13944, exit_status: 0, exited_at: MessageField(Some(Timestamp { seconds: 1784303792, nanos: 0, special_fields: SpecialFields { unknown_fields: UnknownFields { fields: None }, cached_size: CachedSize { size: 0 } } })), special_fields: SpecialFields { unknown_fields: UnknownFields { fields: None }, cached_size: CachedSize { size: 0 } } } -Jul 17 11:56:32 remnux kata[13933]: execute hook Hook { path: "/usr/local/bin/nerdctl", args: Some(["/usr/local/bin/nerdctl", "internal", "oci-hook", "postStop"]), env: Some(["COLORTERM=truecolor", "XAUTHORITY=/run/user/1000/gdm/Xauthority", "LANG=en_US.UTF-8", "LS_COLORS=rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:mi=00:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arc=01;31:*.arj=01;31:*.taz=01;31:*.lha=01;31:*.lz4=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.tzo=01;31:*.t7z=01;31:*.zip=01;31:*.z=01;31:*.dz=01;31:*.gz=01;31:*.lrz=01;31:*.lz=01;31:*.lzo=01;31:*.xz=01;31:*.zst=01;31:*.tzst=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.war=01;31:*.ear=01;31:*.sar=01;31:*.rar=01;31:*.alz=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.cab=01;31:*.wim=01;31:*.swm=01;31:*.dwm=01;31:*.esd=01;31:*.jpg=01;35:*.jpeg=01;35:*.mjpg=01;35:*.mjpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.webm=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=00;36:*.au=00;36:*.flac=00;36:*.m4a=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.oga=00;36:*.opus=00;36:*.spx=00;36:*.xspf=00;36:", "TERM=xterm-256color", "DISPLAY=:0", "LC_ALL=C", "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin", "MAIL=/var/mail/root", "LOGNAME=root", "USER=root", "HOME=/root", "SHELL=/bin/bash", "SUDO_COMMAND=/usr/bin/timeout --foreground --kill-after=15s 120 nerdctl run --rm --runtime=io.containerd.kata.v2 alpine:3.20 sh -c LC_ALL=C dd if=/dev/zero of=/dev/null bs=1M count=100 2>&1", "SUDO_USER=remnux", "SUDO_UID=1000", "SUDO_GID=1000", "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin:/usr/sbin:/sbin"]), timeout: None } -Jul 17 11:56:32 remnux kata[13933]: exit status of hook Hook { path: "/usr/local/bin/nerdctl", args: Some(["/usr/local/bin/nerdctl", "internal", "oci-hook", "postStop"]), env: Some(["COLORTERM=truecolor", "XAUTHORITY=/run/user/1000/gdm/Xauthority", "LANG=en_US.UTF-8", "LS_COLORS=rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:mi=00:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arc=01;31:*.arj=01;31:*.taz=01;31:*.lha=01;31:*.lz4=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.tzo=01;31:*.t7z=01;31:*.zip=01;31:*.z=01;31:*.dz=01;31:*.gz=01;31:*.lrz=01;31:*.lz=01;31:*.lzo=01;31:*.xz=01;31:*.zst=01;31:*.tzst=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.war=01;31:*.ear=01;31:*.sar=01;31:*.rar=01;31:*.alz=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.cab=01;31:*.wim=01;31:*.swm=01;31:*.dwm=01;31:*.esd=01;31:*.jpg=01;35:*.jpeg=01;35:*.mjpg=01;35:*.mjpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.webm=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=00;36:*.au=00;36:*.flac=00;36:*.m4a=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.oga=00;36:*.opus=00;36:*.spx=00;36:*.xspf=00;36:", "TERM=xterm-256color", "DISPLAY=:0", "LC_ALL=C", "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin", "MAIL=/var/mail/root", "LOGNAME=root", "USER=root", "HOME=/root", "SHELL=/bin/bash", "SUDO_COMMAND=/usr/bin/timeout --foreground --kill-after=15s 120 nerdctl run --rm --runtime=io.containerd.kata.v2 alpine:3.20 sh -c LC_ALL=C dd if=/dev/zero of=/dev/null bs=1M count=100 2>&1", "SUDO_USER=remnux", "SUDO_UID=1000", "SUDO_GID=1000", "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin:/usr/sbin:/sbin"]), timeout: None } : Exited(0) -Jul 17 11:56:32 remnux kata[13933]: hook Hook { path: "/usr/local/bin/nerdctl", args: Some(["/usr/local/bin/nerdctl", "internal", "oci-hook", "postStop"]), env: Some(["COLORTERM=truecolor", "XAUTHORITY=/run/user/1000/gdm/Xauthority", "LANG=en_US.UTF-8", "LS_COLORS=rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:mi=00:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arc=01;31:*.arj=01;31:*.taz=01;31:*.lha=01;31:*.lz4=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.tzo=01;31:*.t7z=01;31:*.zip=01;31:*.z=01;31:*.dz=01;31:*.gz=01;31:*.lrz=01;31:*.lz=01;31:*.lzo=01;31:*.xz=01;31:*.zst=01;31:*.tzst=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.war=01;31:*.ear=01;31:*.sar=01;31:*.rar=01;31:*.alz=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.cab=01;31:*.wim=01;31:*.swm=01;31:*.dwm=01;31:*.esd=01;31:*.jpg=01;35:*.jpeg=01;35:*.mjpg=01;35:*.mjpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.webm=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=00;36:*.au=00;36:*.flac=00;36:*.m4a=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.oga=00;36:*.opus=00;36:*.spx=00;36:*.xspf=00;36:", "TERM=xterm-256color", "DISPLAY=:0", "LC_ALL=C", "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin", "MAIL=/var/mail/root", "LOGNAME=root", "USER=root", "HOME=/root", "SHELL=/bin/bash", "SUDO_COMMAND=/usr/bin/timeout --foreground --kill-after=15s 120 nerdctl run --rm --runtime=io.containerd.kata.v2 alpine:3.20 sh -c LC_ALL=C dd if=/dev/zero of=/dev/null bs=1M count=100 2>&1", "SUDO_USER=remnux", "SUDO_UID=1000", "SUDO_GID=1000", "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin:/usr/sbin:/sbin"]), timeout: None } succeeds -Jul 17 11:56:32 remnux kata[13933]: hook /usr/local/bin/nerdctl finished -Jul 17 11:56:32 remnux kata[13933]: receive action Event(TaskDelete { container_id: "", pid: 13944, exit_status: 0, exited_at: MessageField(None), id: "25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f", special_fields: SpecialFields { unknown_fields: UnknownFields { fields: None }, cached_size: CachedSize { size: 0 } } }) -Jul 17 11:56:32 remnux kata[13933]: get event TaskDelete { container_id: "", pid: 13944, exit_status: 0, exited_at: MessageField(None), id: "25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f", special_fields: SpecialFields { unknown_fields: UnknownFields { fields: None }, cached_size: CachedSize { size: 0 } } } -Jul 17 11:56:32 remnux kata[13933]: wait virtiofsd Ok(ExitStatus(unix_wait_status(0))) -Jul 17 11:56:32 remnux kata[13933]: shutdown -Jul 17 11:56:32 remnux kata[13933]: delete hypervisor -Jul 17 11:56:32 remnux kata[13933]: QemuInner::cleanup() -Jul 17 11:56:32 remnux kata[13933]: resource clean up -Jul 17 11:56:32 remnux kata[13933]: set netns from old File { fd: 13, path: "net:[4026531840]", read: true, write: false } to new File { fd: 14, path: "/run/netns/cnitest-25ac153e-49ca-1ecf-bebb-e7bd691b5b72", read: true, write: false } tid 13935 -Jul 17 11:56:32 remnux kata[13933]: failed to detach endpoint: del network model failed. -Jul 17 11:56:32 remnux kata[13933]: set netns to old 13 -Jul 17 11:56:32 remnux kata[13933]: failed to remove network: failed to remove netns path -Jul 17 11:56:32 remnux kata[13933]: sandbox bindmounts empty, just skip it. -Jul 17 11:56:32 remnux containerd[9105]: time="2026-07-17T11:56:32.577373796-04:00" level=info msg="shim disconnected" id=25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f namespace=default -Jul 17 11:56:32 remnux containerd[9105]: time="2026-07-17T11:56:32.577415016-04:00" level=warning msg="cleaning up after shim disconnected" id=25cd9ae8bb5dee55ba74a70ea416404656e036453702ca709961c3ab9c3b3b7f namespace=default -Jul 17 11:56:32 remnux containerd[9105]: time="2026-07-17T11:56:32.577420506-04:00" level=info msg="cleaning up dead shim" namespace=default -Jul 17 11:56:32 remnux kata[13933]: shutdown virtiofsd pid 13939 -Jul 17 11:56:32 remnux kata[13933]: stop monitor -Jul 17 11:56:32 remnux kata[13933]: stop runtime keep alive -Jul 17 11:56:32 remnux kata[13933]: stop agent -Jul 17 11:56:32 remnux kata[13933]: abort log forwarder thread -Jul 17 11:56:32 remnux kata[13933]: send shutdown message -Jul 17 11:56:32 remnux kata[13933]: receive action Shutdown -Jul 17 11:56:32 remnux kata[13933]: end to run service -Jul 17 11:56:32 remnux containerd[9105]: time="2026-07-17T11:56:32.725516250-04:00" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 -Jul 17 11:56:32 remnux containerd[9105]: time="2026-07-17T11:56:32.725820484-04:00" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 -Jul 17 11:56:32 remnux containerd[9105]: time="2026-07-17T11:56:32.725841364-04:00" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 -Jul 17 11:56:32 remnux containerd[9105]: time="2026-07-17T11:56:32.726712280-04:00" level=info msg="loading plugin \"io.containerd.ttrpc.v1.pause\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 -Jul 17 11:56:33 remnux containerd[9105]: time="2026-07-17T11:56:33.027058686-04:00" level=info msg="shim disconnected" id=f18f3ce7ac9b7aff3f3147553c420757f2dadc7aafa717e5d05b2046eb4f7c14 namespace=default -Jul 17 11:56:33 remnux containerd[9105]: time="2026-07-17T11:56:33.027101734-04:00" level=warning msg="cleaning up after shim disconnected" id=f18f3ce7ac9b7aff3f3147553c420757f2dadc7aafa717e5d05b2046eb4f7c14 namespace=default -Jul 17 11:56:33 remnux containerd[9105]: time="2026-07-17T11:56:33.027107253-04:00" level=info msg="cleaning up dead shim" namespace=default -Jul 17 11:56:33 remnux kata[14435]: start to run -Jul 17 11:56:33 remnux kata[14435]: begin to run service -Jul 17 11:56:33 remnux kata[14435]: wait server message -Jul 17 11:56:33 remnux kata[14435]: get config path "" -Jul 17 11:56:33 remnux kata[14435]: load configuration from: /opt/kata/share/defaults/kata-containers/runtime-rs/configuration-qemu-runtime-rs.toml -Jul 17 11:56:33 remnux kata[14435]: Adjusting hypervisor configuration ["qemu"] -Jul 17 11:56:33 remnux kata[14435]: get kata config: TomlConfig { agent: {"kata": Agent { debug: false, log_level: "info", enable_tracing: false, debug_console_enabled: false, visible_cdi_devices: false, server_port: 1024, log_port: 1025, passfd_listener_port: 1027, dial_timeout_ms: 10, reconnect_timeout_ms: 3000, cdh_api_timeout_ms: 50000, request_timeout_ms: 30000, health_check_request_timeout_ms: 90000, kernel_modules: [], container_pipe_size: 0, launch_process_timeout: 0, mem_agent: MemAgent { enable: false, memcg_disable: Some(false), memcg_swap: Some(false), memcg_swappiness_max: Some(50), memcg_period_secs: Some(600), memcg_period_psi_percent_limit: Some(1), memcg_eviction_psi_percent_limit: Some(1), memcg_eviction_run_aging_count_min: Some(3), compact_disable: Some(false), compact_period_secs: Some(600), compact_period_psi_percent_limit: Some(1), compact_psi_percent_limit: Some(5), compact_sec_max: Some(300), compact_order: Some(9), compact_threshold: Some(1024), compact_force_times: Some(9223372036854775807) }, policy: "" }}, hypervisor: {"qemu": Hypervisor { path: "/opt/kata/bin/qemu-system-x86_64", valid_hypervisor_paths: ["/opt/kata/bin/qemu-system-x86_64"], ctlpath: "", valid_ctlpaths: [], jailer_path: "", valid_jailer_paths: [], disable_nesting_checks: false, enable_iothreads: false, indep_iothreads: 0, blockdev_info: BlockDeviceInfo { disable_block_device_use: false, block_device_driver: "virtio-scsi", block_device_aio: "io_uring", block_device_cache_set: false, block_device_cache_direct: false, block_device_cache_noflush: false, block_device_logical_sector_size: 0, block_device_physical_sector_size: 0, disable_image_nvdimm: false, memory_offset: 0, enable_vhost_user_store: false, vhost_user_store_path: "", valid_vhost_user_store_paths: ["/var/run/kata-containers/vhost-user"], disk_rate_limiter_bw_max_rate: 0, disk_rate_limiter_bw_one_time_burst: None, disk_rate_limiter_ops_max_rate: 0, disk_rate_limiter_ops_one_time_burst: None, queue_size: 128, num_queues: 1 }, boot_info: BootInfo { kernel: "/opt/kata/share/kata-containers/vmlinux-6.18.35-197", kernel_params: "cgroup_no_v1=all systemd.unified_cgroup_hierarchy=1", kernel_verity_params: "", initrd: "", image: "/opt/kata/share/kata-containers/kata-ubuntu-noble.image", rootfs_type: "ext4", firmware: "", vm_rootfs_driver: "virtio-pmem" }, cpu_info: CpuInfo { cpu_features: "pmu=off", default_vcpus: 1.0, default_maxvcpus: 4 }, debug_info: DebugInfo { enable_debug: false, log_level: "info", guest_memory_dump_paging: false, guest_memory_dump_path: "", extra_monitor_socket: "" }, device_info: DeviceInfo { default_bridges: 1, hotplug_vfio_on_root_bus: false, cold_plug_vfio: "", pcie_root_port: 0, pcie_switch_port: 0, enable_iommu: false, enable_iommu_platform: false, reclaim_guest_freed_memory: false }, machine_info: MachineInfo { machine_type: "q35", machine_accelerators: "", pflashes: [], entropy_source: "/dev/urandom", valid_entropy_sources: ["/dev/urandom", "/dev/random", ""] }, memory_info: MemoryInfo { default_memory: 2048, default_maxmemory: 7935, memory_slots: 10, enable_mem_prealloc: false, enable_hugepages: false, hugepage_type: Hugetlbfs, enable_virtio_mem: false, enable_guest_swap: false, guest_swap_path: "/run/kata-containers/swap", guest_swap_size_percent: 100, guest_swap_create_threshold_secs: 60 }, network_info: NetworkInfo { disable_vhost_net: false, rx_rate_limiter_max_rate: 0, tx_rate_limiter_max_rate: 0, network_queues: 1 }, security_info: SecurityInfo { rootless: false, rootless_user: None, disable_seccomp: false, confidential_guest: false, sev_snp_guest: false, snp_id_block: "", snp_id_auth: "", snp_guest_policy: 196608, guest_hook_path: "", initdata: "", enable_annotations: ["enable_iommu", "kernel_params", "kernel_verity_params", "default_vcpus", "default_memory"], qgs_port: 0, seccomp_sandbox: Some(""), selinux_label: None }, shared_fs: SharedFsInfo { shared_fs: Some("virtio-fs"), virtio_fs_daemon: "/opt/kata/libexec/virtiofsd", valid_virtio_fs_daemon_paths: ["/opt/kata/libexec/virtiofsd"], virtio_fs_extra_args: ["--thread-pool-size=1", "-o", "announce_submounts"], virtio_fs_cache: "auto", virtio_fs_cache_size: 0, virtio_fs_queue_size: 1024, virtio_fs_is_dax: false }, remote_info: RemoteInfo { hypervisor_socket: "", hypervisor_timeout: 0, default_gpus: 0, default_gpu_model: "" }, vm_template: VmTemplateInfo { boot_to_be_template: false, boot_from_template: false, memory_path: "", device_state_path: "" }, factory: Factory { enable_template: false, template_path: "/run/vc/vm/template" }, prefetch_list_path: "", vendor: HypervisorVendor, disable_guest_selinux: true, disable_selinux: false }}, runtime: Runtime { name: "virt_container", hypervisor_name: "qemu", agent_name: "kata", debug: false, log_level: "info", experimental: [], internetworking_model: "tcfilter", disable_new_netns: false, sandbox_bind_mounts: [], sandbox_cgroup_only: true, enable_vcpus_pinning: false, enable_tracing: false, jaeger_endpoint: "", jaeger_user: "", jaeger_password: "", enable_pprof: false, static_sandbox_resource_mgmt: true, disable_guest_seccomp: true, disable_guest_empty_dir: false, emptydir_mode: "shared-fs", vfio_mode: "guest-kernel", vendor: RuntimeVendor, keep_abnormal: false, dan_conf: "", shared_mounts: [], use_passfd_io: false, passfd_listener_port: 1027, pod_resource_api_sock: "" } } -Jul 17 11:56:33 remnux kata[14435]: Annotation nerdctl/state-dir not enabled -Jul 17 11:56:33 remnux kata[14435]: Annotation nerdctl/extraHosts not enabled -Jul 17 11:56:33 remnux kata[14435]: Annotation nerdctl/ipc not enabled -Jul 17 11:56:33 remnux kata[14435]: Annotation nerdctl/privileged not enabled -Jul 17 11:56:33 remnux kata[14435]: Annotation nerdctl/auto-remove not enabled -Jul 17 11:56:33 remnux kata[14435]: Annotation nerdctl/host-config not enabled -Jul 17 11:56:33 remnux kata[14435]: Annotation nerdctl/name not enabled -Jul 17 11:56:33 remnux kata[14435]: Annotation nerdctl/namespace not enabled -Jul 17 11:56:33 remnux kata[14435]: Annotation nerdctl/log-config not enabled -Jul 17 11:56:33 remnux kata[14435]: Annotation nerdctl/hostname not enabled -Jul 17 11:56:33 remnux kata[14435]: Annotation nerdctl/domainname not enabled -Jul 17 11:56:33 remnux kata[14435]: Annotation nerdctl/networks not enabled -Jul 17 11:56:33 remnux kata[14435]: Annotation nerdctl/log-uri not enabled -Jul 17 11:56:33 remnux kata[14435]: Annotation nerdctl/platform not enabled -Jul 17 11:56:33 remnux kata[14435]: Annotation nerdctl/dns not enabled -Jul 17 11:56:33 remnux kata[14435]: Annotation nerdctl/mounts.0 not enabled -Jul 17 11:56:33 remnux kata[14435]: Annotation nerdctl/network-namespace not enabled -Jul 17 11:56:33 remnux kata[14435]: Adjusting hypervisor configuration ["qemu"] -Jul 17 11:56:33 remnux kata[14435]: get config content TomlConfig { agent: {"kata": Agent { debug: false, log_level: "info", enable_tracing: false, debug_console_enabled: false, visible_cdi_devices: false, server_port: 1024, log_port: 1025, passfd_listener_port: 1027, dial_timeout_ms: 10, reconnect_timeout_ms: 3000, cdh_api_timeout_ms: 50000, request_timeout_ms: 30000, health_check_request_timeout_ms: 90000, kernel_modules: [], container_pipe_size: 0, launch_process_timeout: 0, mem_agent: MemAgent { enable: false, memcg_disable: Some(false), memcg_swap: Some(false), memcg_swappiness_max: Some(50), memcg_period_secs: Some(600), memcg_period_psi_percent_limit: Some(1), memcg_eviction_psi_percent_limit: Some(1), memcg_eviction_run_aging_count_min: Some(3), compact_disable: Some(false), compact_period_secs: Some(600), compact_period_psi_percent_limit: Some(1), compact_psi_percent_limit: Some(5), compact_sec_max: Some(300), compact_order: Some(9), compact_threshold: Some(1024), compact_force_times: Some(9223372036854775807) }, policy: "" }}, hypervisor: {"qemu": Hypervisor { path: "/opt/kata/bin/qemu-system-x86_64", valid_hypervisor_paths: ["/opt/kata/bin/qemu-system-x86_64"], ctlpath: "", valid_ctlpaths: [], jailer_path: "", valid_jailer_paths: [], disable_nesting_checks: false, enable_iothreads: false, indep_iothreads: 0, blockdev_info: BlockDeviceInfo { disable_block_device_use: false, block_device_driver: "virtio-scsi", block_device_aio: "io_uring", block_device_cache_set: false, block_device_cache_direct: false, block_device_cache_noflush: false, block_device_logical_sector_size: 0, block_device_physical_sector_size: 0, disable_image_nvdimm: false, memory_offset: 0, enable_vhost_user_store: false, vhost_user_store_path: "", valid_vhost_user_store_paths: ["/var/run/kata-containers/vhost-user"], disk_rate_limiter_bw_max_rate: 0, disk_rate_limiter_bw_one_time_burst: None, disk_rate_limiter_ops_max_rate: 0, disk_rate_limiter_ops_one_time_burst: None, queue_size: 128, num_queues: 1 }, boot_info: BootInfo { kernel: "/opt/kata/share/kata-containers/vmlinux-6.18.35-197", kernel_params: "agent.cdh_api_timeout=50 cgroup_no_v1=all systemd.unified_cgroup_hierarchy=1", kernel_verity_params: "", initrd: "", image: "/opt/kata/share/kata-containers/kata-ubuntu-noble.image", rootfs_type: "ext4", firmware: "", vm_rootfs_driver: "virtio-pmem" }, cpu_info: CpuInfo { cpu_features: "pmu=off", default_vcpus: 1.0, default_maxvcpus: 4 }, debug_info: DebugInfo { enable_debug: false, log_level: "info", guest_memory_dump_paging: false, guest_memory_dump_path: "", extra_monitor_socket: "" }, device_info: DeviceInfo { default_bridges: 1, hotplug_vfio_on_root_bus: false, cold_plug_vfio: "", pcie_root_port: 0, pcie_switch_port: 0, enable_iommu: false, enable_iommu_platform: false, reclaim_guest_freed_memory: false }, machine_info: MachineInfo { machine_type: "q35", machine_accelerators: "", pflashes: [], entropy_source: "/dev/urandom", valid_entropy_sources: ["/dev/urandom", "/dev/random", ""] }, memory_info: MemoryInfo { default_memory: 2048, default_maxmemory: 7935, memory_slots: 10, enable_mem_prealloc: false, enable_hugepages: false, hugepage_type: Hugetlbfs, enable_virtio_mem: false, enable_guest_swap: false, guest_swap_path: "/run/kata-containers/swap", guest_swap_size_percent: 100, guest_swap_create_threshold_secs: 60 }, network_info: NetworkInfo { disable_vhost_net: false, rx_rate_limiter_max_rate: 0, tx_rate_limiter_max_rate: 0, network_queues: 1 }, security_info: SecurityInfo { rootless: false, rootless_user: None, disable_seccomp: false, confidential_guest: false, sev_snp_guest: false, snp_id_block: "", snp_id_auth: "", snp_guest_policy: 196608, guest_hook_path: "", initdata: "", enable_annotations: ["enable_iommu", "kernel_params", "kernel_verity_params", "default_vcpus", "default_memory"], qgs_port: 0, seccomp_sandbox: Some(""), selinux_label: None }, shared_fs: SharedFsInfo { shared_fs: Some("virtio-fs"), virtio_fs_daemon: "/opt/kata/libexec/virtiofsd", valid_virtio_fs_daemon_paths: ["/opt/kata/libexec/virtiofsd"], virtio_fs_extra_args: ["--thread-pool-size=1", "-o", "announce_submounts"], virtio_fs_cache: "auto", virtio_fs_cache_size: 0, virtio_fs_queue_size: 1024, virtio_fs_is_dax: false }, remote_info: RemoteInfo { hypervisor_socket: "", hypervisor_timeout: 0, default_gpus: 0, default_gpu_model: "" }, vm_template: VmTemplateInfo { boot_to_be_template: false, boot_from_template: false, memory_path: "", device_state_path: "" }, factory: Factory { enable_template: false, template_path: "/run/vc/vm/template" }, prefetch_list_path: "", vendor: HypervisorVendor, disable_guest_selinux: true, disable_selinux: false }}, runtime: Runtime { name: "virt_container", hypervisor_name: "qemu", agent_name: "kata", debug: false, log_level: "info", experimental: [], internetworking_model: "tcfilter", disable_new_netns: false, sandbox_bind_mounts: [], sandbox_cgroup_only: true, enable_vcpus_pinning: false, enable_tracing: false, jaeger_endpoint: "", jaeger_user: "", jaeger_password: "", enable_pprof: false, static_sandbox_resource_mgmt: true, disable_guest_seccomp: true, disable_guest_empty_dir: false, emptydir_mode: "shared-fs", vfio_mode: "guest-kernel", vendor: RuntimeVendor, keep_abnormal: false, dan_conf: "", shared_mounts: [], use_passfd_io: false, passfd_listener_port: 1027, pod_resource_api_sock: "" } } -Jul 17 11:56:33 remnux kata[14435]: (from PodSandbox's annotation / SingleContainer's spec) initial size: vcpu=0, mem_mb=0 -Jul 17 11:56:33 remnux kata[14435]: new runtime handler virt_container -Jul 17 11:56:33 remnux kata[14435]: QemuInner::hypervisor_config() -Jul 17 11:56:33 remnux kata[14435]: shim management http server starts -Jul 17 11:56:33 remnux kata[14435]: mgmt-svr: binding to path unix:///run/kata/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/shim-monitor.sock -Jul 17 11:56:33 remnux kata[14435]: Preparing QEMU VM -Jul 17 11:56:33 remnux kata[14435]: QemuInner::hypervisor_config() -Jul 17 11:56:33 remnux kata[14435]: prepare vm socket config for sandbox. -Jul 17 11:56:33 remnux kata[14435]: QemuInner::hypervisor_config() -Jul 17 11:56:33 remnux kata[14435]: QemuInner::hypervisor_config() -Jul 17 11:56:33 remnux kata[14435]: QemuInner::hypervisor_config() -Jul 17 11:56:33 remnux kata[14435]: QemuInner::hypervisor_config() -Jul 17 11:56:33 remnux kata[14435]: QemuInner::hypervisor_config() -Jul 17 11:56:33 remnux kata[14435]: QemuInner::hypervisor_config() -Jul 17 11:56:33 remnux kata[14435]: QemuInner::hypervisor_config() -Jul 17 11:56:33 remnux kata[14435]: no pod devices to prepare for sandbox. -Jul 17 11:56:33 remnux kata[14435]: QemuInner::hypervisor_config() -Jul 17 11:56:33 remnux kata[14435]: No PCIe ports available for VM. -Jul 17 11:56:33 remnux kata[14435]: QemuInner::add_device() Vsock(VsockDevice { id: "58d97fa93010fe", config: VsockConfig { guest_cid: 4294967295 } }) -Jul 17 11:56:33 remnux kata[14435]: QemuInner::hypervisor_config() -Jul 17 11:56:33 remnux kata[14435]: QemuInner::hypervisor_config() -Jul 17 11:56:33 remnux kata[14435]: QemuInner::hypervisor_config() -Jul 17 11:56:33 remnux kata[14435]: QemuInner::add_device() ShareFs(ShareFsDevice { device_id: "92aaa03ec6e34bb", config: ShareFsConfig { host_shared_path: "/run/kata-containers/shared/sandboxes/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/ro", fs_type: "virtio-fs", sock_path: "/run/kata/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/root/virtiofsd.sock", mount_tag: "kataShared", queue_size: 1024, queue_num: 1, options: [], mount_config: None } }) -Jul 17 11:56:33 remnux kata[14435]: QemuInner::hypervisor_config() -Jul 17 11:56:33 remnux kata[14435]: QemuInner::get_vmm_master_tid() -Jul 17 11:56:33 remnux kata[14435]: source: virtiofsd [2026-07-17T15:56:33Z WARN virtiofsd] Use of deprecated option format '-o': Please specify options without it (e.g., '--cache auto' instead of '-o cache=auto') -Jul 17 11:56:33 remnux containerd[9105]: time="2026-07-17T11:56:33.190340331-04:00" level=error msg="get state for f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562" error="Others(\"failed to handle message handler TaskRequest\\n\\nCaused by:\\n 0: state process\\n 1: qemu process not running\\n\\nStack backtrace:\\n 0: anyhow::error::::msg\\n 1: ::get_vmm_master_tid::{{closure}}\\n 2: virt_container::container_manager::manager::VirtContainerManager::get_vmm_master_tid::{{closure}}\\n 3: ::state_process::{{closure}}::{{closure}}\\n 4: ::state_process::{{closure}}\\n 5: runtimes::manager::RuntimeHandlerManager::handler_task_request::{{closure}}::{{closure}}\\n 6: runtimes::manager::RuntimeHandlerManager::handler_task_message::{{closure}}::{{closure}}\\n 7: runtimes::manager::RuntimeHandlerManager::handler_task_message::{{closure}}\\n 8: ::state::{{closure}}\\n 9: ::handler::{{closure}}\\n 10: ttrpc::asynchronous::server::HandlerContext::handle_request::{{closure}}\\n 11: ::handle_msg::{{closure}}::{{closure}}\\n 12: tokio::runtime::task::raw::poll\\n 13: tokio::runtime::scheduler::multi_thread::worker::Context::run_task\\n 14: tokio::runtime::task::raw::poll\\n 15: std::sys::backtrace::__rust_begin_short_backtrace\\n 16: core::ops::function::FnOnce::call_once{{vtable.shim}}\\n 17: std::sys::thread::unix::Thread::new::thread_start\"): unknown" -Jul 17 11:56:33 remnux containerd[9105]: time="2026-07-17T11:56:33.190454758-04:00" level=warning msg="unknown status" status=0 -Jul 17 11:56:33 remnux kata[14435]: QemuInner::get_vmm_master_tid() -Jul 17 11:56:33 remnux kata[14435]: source: virtiofsd [2026-07-17T15:56:33Z INFO virtiofsd] Waiting for vhost-user socket connection... -Jul 17 11:56:33 remnux kata[14435]: start virtiofsd successfully -Jul 17 11:56:33 remnux kata[14435]: sandbox bindmounts empty, just skip it. -Jul 17 11:56:33 remnux kata[14435]: QemuInner::add_device() Block(BlockDevice { device_id: "1a702eafadeda4", attach_count: 1, config: BlockConfig { path_on_host: "/opt/kata/share/kata-containers/kata-ubuntu-noble.image", is_readonly: true, no_drop: false, format: Raw, is_direct: None, index: 0, blkdev_aio: IoUring, driver_option: "nvdimm", virt_path: "/dev/pmem0", pci_path: None, scsi_addr: None, ccw_addr: None, attach_count: 0, major: 0, minor: 0, queue_size: 0, num_queues: 0, logical_sector_size: 0, physical_sector_size: 0 } }) -Jul 17 11:56:33 remnux kata[14435]: Starting QEMU VM -Jul 17 11:56:33 remnux kata[14435]: qemu args: -name sandbox-f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562 -kernel /opt/kata/share/kata-containers/vmlinux-6.18.35-197 -append reboot=k panic=1 systemd.unit=kata-containers.target systemd.mask=systemd-networkd.service systemd.mask=systemd-networkd.socket root=/dev/pmem0p1 rootflags=dax,data=ordered,errors=remount-ro ro rootfstype=ext4 agent.cdh_api_timeout=50 cgroup_no_v1=all systemd.unified_cgroup_hierarchy=1 selinux=0 console=hvc0 -smp 1 -machine q35,accel=kvm,nvdimm=on,kernel_irqchip=on -cpu host,pmu=off -m 2G,slots=10,maxmem=7935M -object memory-backend-file,id=entire-guest-memory-share,mem-path=/dev/shm,size=2G,share=on,prealloc=off,readonly=off -qmp unix:fd=16,server=on,wait=off -rtc base=utc,clock=host,driftfix=slew -object rng-random,id=rng0,filename=/dev/urandom -device virtio-rng-pci,rng=rng0 -device pci-bridge,bus=pcie.0,id=pci-bridge-0,chassis_nr=1,shpc=off,addr=2,io-reserve=4k,mem-reserve=1m,pref64-reserve=1m -device virtio-scsi-pci,id=scsi0,disable-modern=true -device vhost-vsock-pci,disable-modern=true,vhostfd=17,guest-cid=3252076916 -chardev socket,id=virtiofsd-chardev,path=/run/kata/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/root/virtiofsd.sock -device vhost-user-fs-pci,chardev=virtiofsd-chardev,tag=kataShared,queue-size=1024 -numa node,memdev=entire-guest-memory-share -object memory-backend-file,id=TODO,mem-path=/opt/kata/share/kata-containers/kata-ubuntu-noble.image,size=256M,share=off,prealloc=off,readonly=on -device nvdimm,memdev=TODO,unarmed=on -device virtio-serial-pci,id=serial0 -device virtconsole,id=console0,chardev=charconsole0 -chardev socket,id=charconsole0,server=on,wait=off,path=/run/kata/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/root/console.sock -vga none -no-user-config -nodefaults -nographic -no-reboot -Jul 17 11:56:33 remnux kata[14435]: qemu cmd: Command { std: "/opt/kata/bin/qemu-system-x86_64" "-name" "sandbox-f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562" "-kernel" "/opt/kata/share/kata-containers/vmlinux-6.18.35-197" "-append" "reboot=k panic=1 systemd.unit=kata-containers.target systemd.mask=systemd-networkd.service systemd.mask=systemd-networkd.socket root=/dev/pmem0p1 rootflags=dax,data=ordered,errors=remount-ro ro rootfstype=ext4 agent.cdh_api_timeout=50 cgroup_no_v1=all systemd.unified_cgroup_hierarchy=1 selinux=0 console=hvc0" "-smp" "1" "-machine" "q35,accel=kvm,nvdimm=on,kernel_irqchip=on" "-cpu" "host,pmu=off" "-m" "2G,slots=10,maxmem=7935M" "-object" "memory-backend-file,id=entire-guest-memory-share,mem-path=/dev/shm,size=2G,share=on,prealloc=off,readonly=off" "-qmp" "unix:fd=16,server=on,wait=off" "-rtc" "base=utc,clock=host,driftfix=slew" "-object" "rng-random,id=rng0,filename=/dev/urandom" "-device" "virtio-rng-pci,rng=rng0" "-device" "pci-bridge,bus=pcie.0,id=pci-bridge-0,chassis_nr=1,shpc=off,addr=2,io-reserve=4k,mem-reserve=1m,pref64-reserve=1m" "-device" "virtio-scsi-pci,id=scsi0,disable-modern=true" "-device" "vhost-vsock-pci,disable-modern=true,vhostfd=17,guest-cid=3252076916" "-chardev" "socket,id=virtiofsd-chardev,path=/run/kata/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/root/virtiofsd.sock" "-device" "vhost-user-fs-pci,chardev=virtiofsd-chardev,tag=kataShared,queue-size=1024" "-numa" "node,memdev=entire-guest-memory-share" "-object" "memory-backend-file,id=TODO,mem-path=/opt/kata/share/kata-containers/kata-ubuntu-noble.image,size=256M,share=off,prealloc=off,readonly=on" "-device" "nvdimm,memdev=TODO,unarmed=on" "-device" "virtio-serial-pci,id=serial0" "-device" "virtconsole,id=console0,chardev=charconsole0" "-chardev" "socket,id=charconsole0,server=on,wait=off,path=/run/kata/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/root/console.sock" "-vga" "none" "-no-user-config" "-nodefaults" "-nographic" "-no-reboot", kill_on_drop: false } -Jul 17 11:56:33 remnux kata[14435]: qemu process started -Jul 17 11:56:33 remnux kata[14435]: source: virtiofsd [2026-07-17T15:56:33Z INFO virtiofsd] Client connected, servicing requests -Jul 17 11:56:33 remnux kata[14435]: QMP initialized: QMP { - version: VersionInfo { - package: "kata-static", - qemu: VersionTriple { - major: 11, - micro: 1, - minor: 0, - }, - }, - capabilities: [ - Unknown( - String("oob"), - ), - ], - } -Jul 17 11:56:33 remnux kata[14435]: start vm -Jul 17 11:56:33 remnux kata[14435]: QemuInner::get_vmm_master_tid() -Jul 17 11:56:33 remnux kata[14435]: QemuInner::get_vmm_master_tid(): returning 14446 -Jul 17 11:56:33 remnux kata[14435]: starting reading qemu stderr -Jul 17 11:56:33 remnux kata[14435]: execute hook Hook { path: "/usr/local/bin/nerdctl", args: Some(["/usr/local/bin/nerdctl", "internal", "oci-hook", "createRuntime"]), env: Some(["COLORTERM=truecolor", "XAUTHORITY=/run/user/1000/gdm/Xauthority", "LANG=en_US.UTF-8", "LS_COLORS=rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:mi=00:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arc=01;31:*.arj=01;31:*.taz=01;31:*.lha=01;31:*.lz4=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.tzo=01;31:*.t7z=01;31:*.zip=01;31:*.z=01;31:*.dz=01;31:*.gz=01;31:*.lrz=01;31:*.lz=01;31:*.lzo=01;31:*.xz=01;31:*.zst=01;31:*.tzst=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.war=01;31:*.ear=01;31:*.sar=01;31:*.rar=01;31:*.alz=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.cab=01;31:*.wim=01;31:*.swm=01;31:*.dwm=01;31:*.esd=01;31:*.jpg=01;35:*.jpeg=01;35:*.mjpg=01;35:*.mjpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.webm=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=00;36:*.au=00;36:*.flac=00;36:*.m4a=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.oga=00;36:*.opus=00;36:*.spx=00;36:*.xspf=00;36:", "TERM=xterm-256color", "DISPLAY=:0", "LC_ALL=C", "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin", "MAIL=/var/mail/root", "LOGNAME=root", "USER=root", "HOME=/root", "SHELL=/bin/bash", "SUDO_COMMAND=/usr/bin/timeout --foreground --kill-after=15s 120 nerdctl run --rm --runtime=io.containerd.kata.v2 --privileged -v /tmp:/host_tmp alpine:3.20 sh -c echo \"ATTEMPTED OVERWRITE FROM KATA\" > /host_tmp/lab12-target 2>&1; cat /host_tmp/lab12-target; exit 0", "SUDO_USER=remnux", "SUDO_UID=1000", "SUDO_GID=1000", "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin:/usr/sbin:/sbin"]), timeout: None } -Jul 17 11:56:33 remnux kata[14435]: exit status of hook Hook { path: "/usr/local/bin/nerdctl", args: Some(["/usr/local/bin/nerdctl", "internal", "oci-hook", "createRuntime"]), env: Some(["COLORTERM=truecolor", "XAUTHORITY=/run/user/1000/gdm/Xauthority", "LANG=en_US.UTF-8", "LS_COLORS=rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:mi=00:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arc=01;31:*.arj=01;31:*.taz=01;31:*.lha=01;31:*.lz4=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.tzo=01;31:*.t7z=01;31:*.zip=01;31:*.z=01;31:*.dz=01;31:*.gz=01;31:*.lrz=01;31:*.lz=01;31:*.lzo=01;31:*.xz=01;31:*.zst=01;31:*.tzst=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.war=01;31:*.ear=01;31:*.sar=01;31:*.rar=01;31:*.alz=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.cab=01;31:*.wim=01;31:*.swm=01;31:*.dwm=01;31:*.esd=01;31:*.jpg=01;35:*.jpeg=01;35:*.mjpg=01;35:*.mjpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.webm=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=00;36:*.au=00;36:*.flac=00;36:*.m4a=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.oga=00;36:*.opus=00;36:*.spx=00;36:*.xspf=00;36:", "TERM=xterm-256color", "DISPLAY=:0", "LC_ALL=C", "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin", "MAIL=/var/mail/root", "LOGNAME=root", "USER=root", "HOME=/root", "SHELL=/bin/bash", "SUDO_COMMAND=/usr/bin/timeout --foreground --kill-after=15s 120 nerdctl run --rm --runtime=io.containerd.kata.v2 --privileged -v /tmp:/host_tmp alpine:3.20 sh -c echo \"ATTEMPTED OVERWRITE FROM KATA\" > /host_tmp/lab12-target 2>&1; cat /host_tmp/lab12-target; exit 0", "SUDO_USER=remnux", "SUDO_UID=1000", "SUDO_GID=1000", "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin:/usr/sbin:/sbin"]), timeout: None } : Exited(0) -Jul 17 11:56:33 remnux kata[14435]: hook Hook { path: "/usr/local/bin/nerdctl", args: Some(["/usr/local/bin/nerdctl", "internal", "oci-hook", "createRuntime"]), env: Some(["COLORTERM=truecolor", "XAUTHORITY=/run/user/1000/gdm/Xauthority", "LANG=en_US.UTF-8", "LS_COLORS=rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:mi=00:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arc=01;31:*.arj=01;31:*.taz=01;31:*.lha=01;31:*.lz4=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.tzo=01;31:*.t7z=01;31:*.zip=01;31:*.z=01;31:*.dz=01;31:*.gz=01;31:*.lrz=01;31:*.lz=01;31:*.lzo=01;31:*.xz=01;31:*.zst=01;31:*.tzst=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.war=01;31:*.ear=01;31:*.sar=01;31:*.rar=01;31:*.alz=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.cab=01;31:*.wim=01;31:*.swm=01;31:*.dwm=01;31:*.esd=01;31:*.jpg=01;35:*.jpeg=01;35:*.mjpg=01;35:*.mjpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.webm=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=00;36:*.au=00;36:*.flac=00;36:*.m4a=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.oga=00;36:*.opus=00;36:*.spx=00;36:*.xspf=00;36:", "TERM=xterm-256color", "DISPLAY=:0", "LC_ALL=C", "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin", "MAIL=/var/mail/root", "LOGNAME=root", "USER=root", "HOME=/root", "SHELL=/bin/bash", "SUDO_COMMAND=/usr/bin/timeout --foreground --kill-after=15s 120 nerdctl run --rm --runtime=io.containerd.kata.v2 --privileged -v /tmp:/host_tmp alpine:3.20 sh -c echo \"ATTEMPTED OVERWRITE FROM KATA\" > /host_tmp/lab12-target 2>&1; cat /host_tmp/lab12-target; exit 0", "SUDO_USER=remnux", "SUDO_UID=1000", "SUDO_GID=1000", "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin:/usr/sbin:/sbin"]), timeout: None } succeeds -Jul 17 11:56:33 remnux kata[14435]: hook /usr/local/bin/nerdctl finished -Jul 17 11:56:33 remnux kata[14435]: QemuInner::hypervisor_config() -Jul 17 11:56:33 remnux kata[14435]: get network entity from config NetworkWithNetNsConfig { network_model: "tcfilter", netns_path: "/var/run/netns/cnitest-6d89cd7e-b3a5-50ef-9dfe-10c50694e440", queues: 1, network_created: true } tid Pid(14565) -Jul 17 11:56:33 remnux kata[14435]: set netns from old File { fd: 24, path: "net:[4026531840]", read: true, write: false } to new File { fd: 25, path: "/run/netns/cnitest-6d89cd7e-b3a5-50ef-9dfe-10c50694e440", read: true, write: false } tid 14565 -Jul 17 11:56:33 remnux kata[14435]: set netns from old File { fd: 26, path: "net:[4026532225]", read: true, write: false } to new File { fd: 27, path: "/run/netns/cnitest-6d89cd7e-b3a5-50ef-9dfe-10c50694e440", read: true, write: false } tid 14565 -Jul 17 11:56:33 remnux kata[14435]: veth network interface found: eth0 -Jul 17 11:56:33 remnux kata[14435]: create link with fds [File { fd: 27, path: "/dev/net/tun", read: true, write: true }] -Jul 17 11:56:33 remnux kata[14435]: network info NetworkInfoFromLink { interface: Interface { device: "eth0", name: "eth0", ip_addresses: [IPAddress { family: V4, address: "10.4.0.24", mask: "24" }, IPAddress { family: V6, address: "fe80::4cb9:4dff:fe46:4a44", mask: "64" }], mtu: 1500, hw_addr: "4e:b9:4d:46:4a:44", device_path: "", field_type: "veth", raw_flags: 0 }, neighs: [ARPNeighbor { to_ip_address: Some(IPAddress { family: V6, address: "ff02::16", mask: "" }), device: "eth0", ll_addr: "33:33:00:00:00:16", state: 64, flags: 0 }, ARPNeighbor { to_ip_address: Some(IPAddress { family: V6, address: "ff02::2", mask: "" }), device: "eth0", ll_addr: "33:33:00:00:00:02", state: 64, flags: 0 }], routes: [Route { dest: "", gateway: "10.4.0.1", device: "eth0", source: "", scope: 0, family: V4, flags: 0, mtu: 0 }] } -Jul 17 11:56:33 remnux kata[14435]: set netns to old 26 -Jul 17 11:56:33 remnux kata[14435]: set netns to old 24 -Jul 17 11:56:33 remnux kata[14435]: set netns from old File { fd: 24, path: "net:[4026531840]", read: true, write: false } to new File { fd: 26, path: "/run/netns/cnitest-6d89cd7e-b3a5-50ef-9dfe-10c50694e440", read: true, write: false } tid 14565 -Jul 17 11:56:33 remnux kata[14435]: QemuInner::add_device() Network(NetworkDevice { device_id: "d8a4792699f4cd5", config: NetworkConfig { index: 0, host_dev_name: "tap0_kata", virt_iface_name: "eth0", guest_mac: Some(4e:b9:4d:46:4a:44), queue_size: 0, queue_num: 0, use_shared_irq: None, use_generic_irq: None, allow_duplicate_mac: false } }) -Jul 17 11:56:33 remnux kata[14435]: found PCI bridge: pci-bridge-0 -Jul 17 11:56:33 remnux kata[14435]: already occupied slots on bridge pci-bridge-0: [] -Jul 17 11:56:33 remnux kata[14435]: found free slot on bridge pci-bridge-0: 0 -Jul 17 11:56:33 remnux kata[14435]: passing fd 25 as fd0 -Jul 17 11:56:33 remnux kata[14435]: sendmsg() result: Ok( - 56, - ) -Jul 17 11:56:33 remnux kata[14435]: successfully passed fd0 (25) -Jul 17 11:56:33 remnux kata[14435]: passing fd 27 as vhostfd0 -Jul 17 11:56:33 remnux kata[14435]: sendmsg() result: Ok( - 61, - ) -Jul 17 11:56:33 remnux kata[14435]: successfully passed vhostfd0 (27) -Jul 17 11:56:33 remnux kata[14435]: set netns to old 24 -Jul 17 11:56:33 remnux kata[14435]: QemuInner::get_agent_socket() -Jul 17 11:56:33 remnux kata[14435]: begin to connect agent "vsock://3252076916" -Jul 17 11:56:33 remnux kata[14435]: try to connect agent server through Vsock { vsock_cid: 3252076916, port: 1024 } -Jul 17 11:56:33 remnux kata[14435]: Wait QEMU VM -Jul 17 11:56:40 remnux kata[14435]: vsock: connected to Vsock { vsock_cid: 3252076916, port: 1024 } after 9 attempts -Jul 17 11:56:40 remnux kata[14435]: get stream raw fd 16 with socket address: "vsock://3252076916" and server_port 1024 -Jul 17 11:56:40 remnux kata[14435]: update interface Interface { device: "eth0", name: "eth0", ip_addresses: [IPAddress { family: V4, address: "10.4.0.24", mask: "24" }, IPAddress { family: V6, address: "fe80::4cb9:4dff:fe46:4a44", mask: "64" }], mtu: 1500, hw_addr: "4e:b9:4d:46:4a:44", device_path: "", field_type: "veth", raw_flags: 0 } -Jul 17 11:56:40 remnux kata[14435]: try to connect to agent-log -Jul 17 11:56:40 remnux kata[14435]: update routes [Route { dest: "", gateway: "10.4.0.1", device: "eth0", source: "", scope: 0, family: V4, flags: 0, mtu: 0 }] -Jul 17 11:56:40 remnux kata[14435]: QemuInner::hypervisor_config() -Jul 17 11:56:40 remnux kata[14435]: QemuInner::set_guest_memory_block_size(): block size set to 134217728 -Jul 17 11:56:40 remnux kata[14435]: QemuInner::hypervisor_config() -Jul 17 11:56:40 remnux kata[14435]: QemuInner::hypervisor_config() -Jul 17 11:56:40 remnux kata[14435]: memory block size is 134217728, memory probe support false -Jul 17 11:56:40 remnux kata[14435]: oom watcher start -Jul 17 11:56:40 remnux kata[14435]: start runtime keep alive -Jul 17 11:56:40 remnux kata[14435]: QemuInner::hypervisor_config() -Jul 17 11:56:40 remnux kata[14435]: QemuInner::get_vmm_master_tid() -Jul 17 11:56:40 remnux kata[14435]: QemuInner::get_vmm_master_tid(): returning 14446 -Jul 17 11:56:40 remnux kata[14435]: QemuInner::get_ns_path() -Jul 17 11:56:40 remnux kata[14435]: set netns from old File { fd: 17, path: "net:[4026531840]", read: true, write: false } to new File { fd: 22, path: "net:[4026531840]", read: true, write: false } tid 14437 -Jul 17 11:56:40 remnux kata[14435]: set netns to old 17 -Jul 17 11:56:40 remnux kata[14435]: BUG: unknown mount flag: "index=off" -Jul 17 11:56:40 remnux kata[14435]: BUG: unknown mount flag: "workdir=/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/56/work" -Jul 17 11:56:40 remnux kata[14435]: BUG: unknown mount flag: "upperdir=/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/56/fs" -Jul 17 11:56:40 remnux kata[14435]: BUG: unknown mount flag: "lowerdir=/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/1/fs" -Jul 17 11:56:40 remnux kata[14435]: oci mount is : [Mount { destination: "/proc", typ: Some("proc"), source: Some("proc"), options: Some(["nosuid", "noexec", "nodev"]) }, Mount { destination: "/dev", typ: Some("tmpfs"), source: Some("tmpfs"), options: Some(["nosuid", "strictatime", "mode=755", "size=65536k"]) }, Mount { destination: "/sys", typ: Some("sysfs"), source: Some("sysfs"), options: Some(["nosuid", "noexec", "nodev", "rw"]) }, Mount { destination: "/host_tmp", typ: Some("none"), source: Some("/tmp"), options: Some(["rbind"]) }, Mount { destination: "/dev/pts", typ: Some("devpts"), source: Some("devpts"), options: Some(["nosuid", "noexec", "newinstance", "ptmxmode=0666", "mode=0620", "gid=5"]) }, Mount { destination: "/dev/shm", typ: Some("tmpfs"), source: Some("shm"), options: Some(["nosuid", "noexec", "nodev", "mode=1777", "size=65536k"]) }, Mount { destination: "/dev/mqueue", typ: Some("mqueue"), source: Some("mqueue"), options: Some(["nosuid", "noexec", "nodev"]) }, Mount { destination: "/sys/fs/cgroup", typ: Some("cgroup"), source: Some("cgroup"), options: Some(["rw", "nosuid", "noexec", "nodev"]) }, Mount { destination: "/etc/resolv.conf", typ: Some("bind"), source: Some("/var/lib/nerdctl/1935db59/containers/default/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/resolv.conf"), options: Some(["bind", "rprivate"]) }, Mount { destination: "/etc/hosts", typ: Some("bind"), source: Some("/var/lib/nerdctl/1935db59/etchosts/default/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/hosts"), options: Some(["bind", "rprivate"]) }, Mount { destination: "/etc/hostname", typ: Some("bind"), source: Some("/var/lib/nerdctl/1935db59/containers/default/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/hostname"), options: Some(["bind", "rprivate"]) }] -Jul 17 11:56:40 remnux kata[14435]: wait on container terminated -Jul 17 11:56:40 remnux kata[14435]: container terminated -Jul 17 11:56:40 remnux kata[14435]: stop container: agent remove container failed: rpc status: Status { code: INTERNAL, message: "Invalid container id\n\nStack backtrace:\n 0: \n 1: \n 2: \n 3: \n 4: \n 5: \n 6: \n 7: \n 8: \n 9: \n 10: \n 11: \n 12: \n 13: \n 14: \n 15: ", details: [], special_fields: SpecialFields { unknown_fields: UnknownFields { fields: None }, cached_size: CachedSize { size: 0 } } } -Jul 17 11:56:40 remnux kata[14435]: Cleaning up DefaultVolume is still unimplemented. -Jul 17 11:56:40 remnux kata[14435]: Cleaning up DefaultVolume is still unimplemented. -Jul 17 11:56:40 remnux kata[14435]: Cleaning up DefaultVolume is still unimplemented. -Jul 17 11:56:40 remnux kata[14435]: The path will be umounted due to no references, host_source = /tmp -Jul 17 11:56:40 remnux kata[14435]: lazy umount for /run/kata-containers/shared/sandboxes/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/rw/passthrough/sandbox-0ab98b72-tmp -Jul 17 11:56:40 remnux kata[14435]: Cleaning up DefaultVolume is still unimplemented. -Jul 17 11:56:40 remnux kata[14435]: Cleaning up DefaultVolume is still unimplemented. -Jul 17 11:56:40 remnux kata[14435]: Cleaning up DefaultVolume is still unimplemented. -Jul 17 11:56:40 remnux kata[14435]: The path will be umounted due to no references, host_source = /var/lib/nerdctl/1935db59/containers/default/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/resolv.conf -Jul 17 11:56:40 remnux kata[14435]: lazy umount for /run/kata-containers/shared/sandboxes/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/rw/passthrough/sandbox-82a80d1b-resolv.conf -Jul 17 11:56:40 remnux kata[14435]: The path will be umounted due to no references, host_source = /var/lib/nerdctl/1935db59/etchosts/default/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/hosts -Jul 17 11:56:40 remnux kata[14435]: lazy umount for /run/kata-containers/shared/sandboxes/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/rw/passthrough/sandbox-1a5128c6-hosts -Jul 17 11:56:40 remnux kata[14435]: The path will be umounted due to no references, host_source = /var/lib/nerdctl/1935db59/containers/default/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/hostname -Jul 17 11:56:40 remnux kata[14435]: lazy umount for /run/kata-containers/shared/sandboxes/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/rw/passthrough/sandbox-2308d1cf-hostname -Jul 17 11:56:40 remnux kata[14435]: lazy umount for /run/kata-containers/shared/sandboxes/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/rw/passthrough/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/rootfs -Jul 17 11:56:40 remnux kata[14435]: lazy umount for /run/containerd/io.containerd.runtime.v2.task/default/f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562/rootfs -Jul 17 11:56:40 remnux kata[14435]: shutdown -Jul 17 11:56:40 remnux kata[14435]: begin stop sandbox -Jul 17 11:56:40 remnux kata[14435]: Stopping QEMU VM -Jul 17 11:56:40 remnux kata[14435]: QemuInner::stop_vm(): kill()'ing qemu -Jul 17 11:56:40 remnux kata[14435]: oom watcher cancelled, sandbox is stopping -Jul 17 11:56:40 remnux kata[14435]: Failed to terminate pending RPC: the request has returned -Jul 17 11:56:40 remnux kata[14435]: finished reading qemu stderr -Jul 17 11:56:40 remnux kata[14435]: source: virtiofsd [2026-07-17T15:56:40Z INFO virtiofsd] Client disconnected, shutting down -Jul 17 11:56:40 remnux kata[14435]: wait virtiofsd Ok(ExitStatus(unix_wait_status(0))) -Jul 17 11:56:40 remnux kata[14435]: wait sandbox -Jul 17 11:56:40 remnux kata[14435]: sandbox stopped -Jul 17 11:56:40 remnux kata[14435]: delete hypervisor -Jul 17 11:56:40 remnux kata[14435]: QemuInner::cleanup() -Jul 17 11:56:40 remnux kata[14435]: resource clean up -Jul 17 11:56:40 remnux kata[14435]: set netns from old File { fd: 13, path: "net:[4026531840]", read: true, write: false } to new File { fd: 15, path: "/run/netns/cnitest-6d89cd7e-b3a5-50ef-9dfe-10c50694e440", read: true, write: false } tid 14436 -Jul 17 11:56:40 remnux kata[14435]: failed to detach endpoint: del network model failed. -Jul 17 11:56:40 remnux kata[14435]: set netns to old 13 -Jul 17 11:56:40 remnux kata[14435]: failed to remove network: failed to remove netns path -Jul 17 11:56:40 remnux kata[14435]: sandbox bindmounts empty, just skip it. -Jul 17 11:56:40 remnux kata[14435]: shutdown virtiofsd pid 14441 -Jul 17 11:56:40 remnux kata[14435]: stop monitor -Jul 17 11:56:40 remnux kata[14435]: stop runtime keep alive -Jul 17 11:56:40 remnux kata[14435]: stop agent -Jul 17 11:56:40 remnux kata[14435]: abort log forwarder thread -Jul 17 11:56:40 remnux kata[14435]: send shutdown message -Jul 17 11:56:40 remnux kata[14435]: receive action Shutdown -Jul 17 11:56:40 remnux kata[14435]: end to run service -Jul 17 11:56:40 remnux containerd[9105]: time="2026-07-17T11:56:40.675389392-04:00" level=info msg="shim disconnected" id=f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562 namespace=default -Jul 17 11:56:40 remnux containerd[9105]: time="2026-07-17T11:56:40.675440062-04:00" level=warning msg="cleaning up after shim disconnected" id=f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562 namespace=default -Jul 17 11:56:40 remnux containerd[9105]: time="2026-07-17T11:56:40.675444896-04:00" level=info msg="cleaning up dead shim" namespace=default diff --git a/submissions/labs/lab12/results/containerd-status-after-kata.txt b/submissions/labs/lab12/results/containerd-status-after-kata.txt deleted file mode 100644 index 821bdda80..000000000 --- a/submissions/labs/lab12/results/containerd-status-after-kata.txt +++ /dev/null @@ -1,23 +0,0 @@ -* containerd.service - containerd container runtime - Loaded: loaded (/lib/systemd/system/containerd.service; enabled; vendor preset: enabled) - Active: active (running) since Fri 2026-07-17 11:55:12 EDT; 3s ago - Docs: https://containerd.io - Process: 9104 ExecStartPre=/sbin/modprobe overlay (code=exited, status=0/SUCCESS) - Main PID: 9105 (containerd) - Tasks: 23 - Memory: 78.2M - CGroup: /system.slice/containerd.service - |-1998 /usr/bin/containerd-shim-runc-v2 -namespace moby -id 0f1b51a1c76dbcdebfae45ab3a79b301b783e379fcd4dd86ff696c001332f1c5 -address /run/containerd/containerd.sock - |-8927 /opt/kata/runtime-rs/bin/containerd-shim-kata-v2 -id 0dead0d386bb8bfe4986081886c24d6044d66816d0dafe7e85b76bc1ebca84d1 -namespace default -address /run/containerd/containerd.sock -publish-binary /usr/bin/containerd - `-9105 /usr/bin/containerd - -Jul 17 11:55:12 remnux containerd[9105]: time="2026-07-17T11:55:12.206199536-04:00" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="skip plugin: tracing endpoint not configured" type=io.containerd.tracing.processor.v1 -Jul 17 11:55:12 remnux containerd[9105]: time="2026-07-17T11:55:12.206208725-04:00" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 -Jul 17 11:55:12 remnux containerd[9105]: time="2026-07-17T11:55:12.206217871-04:00" level=info msg="skip loading plugin \"io.containerd.internal.v1.tracing\"..." error="skip plugin: tracing endpoint not configured" type=io.containerd.internal.v1 -Jul 17 11:55:12 remnux containerd[9105]: time="2026-07-17T11:55:12.206538563-04:00" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 -Jul 17 11:55:12 remnux containerd[9105]: time="2026-07-17T11:55:12.206555713-04:00" level=info msg="loading plugin \"io.containerd.nri.v1.nri\"..." type=io.containerd.nri.v1 -Jul 17 11:55:12 remnux containerd[9105]: time="2026-07-17T11:55:12.206564937-04:00" level=info msg="NRI interface is disabled by configuration." -Jul 17 11:55:12 remnux containerd[9105]: time="2026-07-17T11:55:12.206716785-04:00" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc -Jul 17 11:55:12 remnux containerd[9105]: time="2026-07-17T11:55:12.206745517-04:00" level=info msg=serving... address=/run/containerd/containerd.sock -Jul 17 11:55:12 remnux containerd[9105]: time="2026-07-17T11:55:12.206788777-04:00" level=info msg="containerd successfully booted in 0.042209s" -Jul 17 11:55:12 remnux systemd[1]: Started containerd container runtime. diff --git a/submissions/labs/lab12/results/containerd-status-before-kata.txt b/submissions/labs/lab12/results/containerd-status-before-kata.txt deleted file mode 100644 index 5d35d468f..000000000 --- a/submissions/labs/lab12/results/containerd-status-before-kata.txt +++ /dev/null @@ -1,23 +0,0 @@ -* containerd.service - containerd container runtime - Loaded: loaded (/lib/systemd/system/containerd.service; enabled; vendor preset: enabled) - Active: active (running) since Fri 2026-07-17 11:55:09 EDT; 2s ago - Docs: https://containerd.io - Process: 9037 ExecStartPre=/sbin/modprobe overlay (code=exited, status=0/SUCCESS) - Main PID: 9038 (containerd) - Tasks: 23 - Memory: 78.3M - CGroup: /system.slice/containerd.service - |-1998 /usr/bin/containerd-shim-runc-v2 -namespace moby -id 0f1b51a1c76dbcdebfae45ab3a79b301b783e379fcd4dd86ff696c001332f1c5 -address /run/containerd/containerd.sock - |-8927 /opt/kata/runtime-rs/bin/containerd-shim-kata-v2 -id 0dead0d386bb8bfe4986081886c24d6044d66816d0dafe7e85b76bc1ebca84d1 -namespace default -address /run/containerd/containerd.sock -publish-binary /usr/bin/containerd - `-9038 /usr/bin/containerd - -Jul 17 11:55:09 remnux containerd[9038]: time="2026-07-17T11:55:09.942403933-04:00" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 -Jul 17 11:55:09 remnux containerd[9038]: time="2026-07-17T11:55:09.942414504-04:00" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="skip plugin: tracing endpoint not configured" type=io.containerd.tracing.processor.v1 -Jul 17 11:55:09 remnux containerd[9038]: time="2026-07-17T11:55:09.942424115-04:00" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 -Jul 17 11:55:09 remnux containerd[9038]: time="2026-07-17T11:55:09.942430837-04:00" level=info msg="skip loading plugin \"io.containerd.internal.v1.tracing\"..." error="skip plugin: tracing endpoint not configured" type=io.containerd.internal.v1 -Jul 17 11:55:09 remnux containerd[9038]: time="2026-07-17T11:55:09.942436127-04:00" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 -Jul 17 11:55:09 remnux containerd[9038]: time="2026-07-17T11:55:09.942442667-04:00" level=info msg="loading plugin \"io.containerd.nri.v1.nri\"..." type=io.containerd.nri.v1 -Jul 17 11:55:09 remnux containerd[9038]: time="2026-07-17T11:55:09.942448246-04:00" level=info msg="NRI interface is disabled by configuration." -Jul 17 11:55:09 remnux containerd[9038]: time="2026-07-17T11:55:09.942633379-04:00" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc -Jul 17 11:55:09 remnux containerd[9038]: time="2026-07-17T11:55:09.942656607-04:00" level=info msg=serving... address=/run/containerd/containerd.sock -Jul 17 11:55:09 remnux containerd[9038]: time="2026-07-17T11:55:09.942686346-04:00" level=info msg="containerd successfully booted in 0.028186s" diff --git a/submissions/labs/lab12/results/containerd-status-final.txt b/submissions/labs/lab12/results/containerd-status-final.txt deleted file mode 100644 index e860cb365..000000000 --- a/submissions/labs/lab12/results/containerd-status-final.txt +++ /dev/null @@ -1,22 +0,0 @@ -● containerd.service - containerd container runtime - Loaded: loaded (/lib/systemd/system/containerd.service; enabled; vendor preset: enabled) - Active: active (running) since Fri 2026-07-17 12:00:20 EDT; 8s ago - Docs: https://containerd.io - Process: 14677 ExecStartPre=/sbin/modprobe overlay (code=exited, status=0/SUCCESS) - Main PID: 14678 (containerd) - Tasks: 23 - Memory: 82.3M - CGroup: /system.slice/containerd.service - ├─ 1998 /usr/bin/containerd-shim-runc-v2 -namespace moby -id 0f1b51a1c76dbcdebfae45ab3a79b301b783e379fcd4dd86ff696c001332f1c5 -address /run/containerd/containerd.sock - └─14678 /usr/bin/containerd - -Jul 17 12:00:28 remnux kata[14868]: stop monitor -Jul 17 12:00:28 remnux containerd[14678]: time="2026-07-17T12:00:28.864498811-04:00" level=info msg="shim disconnected" id=498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee namespace=default -Jul 17 12:00:28 remnux containerd[14678]: time="2026-07-17T12:00:28.864549080-04:00" level=warning msg="cleaning up after shim disconnected" id=498fda4cf8895793deb784b593d8092bf8ffc8a979a446301eb11c276934fdee namespace=default -Jul 17 12:00:28 remnux containerd[14678]: time="2026-07-17T12:00:28.864556238-04:00" level=info msg="cleaning up dead shim" namespace=default -Jul 17 12:00:28 remnux kata[14868]: stop runtime keep alive -Jul 17 12:00:28 remnux kata[14868]: stop agent -Jul 17 12:00:28 remnux kata[14868]: abort log forwarder thread -Jul 17 12:00:28 remnux kata[14868]: send shutdown message -Jul 17 12:00:28 remnux kata[14868]: receive action Shutdown -Jul 17 12:00:28 remnux kata[14868]: end to run service diff --git a/submissions/labs/lab12/results/containerd-status.txt b/submissions/labs/lab12/results/containerd-status.txt deleted file mode 100644 index d5ef0c3cb..000000000 --- a/submissions/labs/lab12/results/containerd-status.txt +++ /dev/null @@ -1,22 +0,0 @@ -* containerd.service - containerd container runtime - Loaded: loaded (/lib/systemd/system/containerd.service; enabled; vendor preset: enabled) - Active: active (running) since Fri 2026-07-17 11:55:12 EDT; 1min 28s ago - Docs: https://containerd.io - Process: 9104 ExecStartPre=/sbin/modprobe overlay (code=exited, status=0/SUCCESS) - Main PID: 9105 (containerd) - Tasks: 24 - Memory: 88.2M - CGroup: /system.slice/containerd.service - |-1998 /usr/bin/containerd-shim-runc-v2 -namespace moby -id 0f1b51a1c76dbcdebfae45ab3a79b301b783e379fcd4dd86ff696c001332f1c5 -address /run/containerd/containerd.sock - `-9105 /usr/bin/containerd - -Jul 17 11:56:40 remnux kata[14435]: stop monitor -Jul 17 11:56:40 remnux kata[14435]: stop runtime keep alive -Jul 17 11:56:40 remnux kata[14435]: stop agent -Jul 17 11:56:40 remnux kata[14435]: abort log forwarder thread -Jul 17 11:56:40 remnux kata[14435]: send shutdown message -Jul 17 11:56:40 remnux kata[14435]: receive action Shutdown -Jul 17 11:56:40 remnux kata[14435]: end to run service -Jul 17 11:56:40 remnux containerd[9105]: time="2026-07-17T11:56:40.675389392-04:00" level=info msg="shim disconnected" id=f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562 namespace=default -Jul 17 11:56:40 remnux containerd[9105]: time="2026-07-17T11:56:40.675440062-04:00" level=warning msg="cleaning up after shim disconnected" id=f24e06d2094aba036d97198f395af9ec5995f393b642538b2876afdb58dc2562 namespace=default -Jul 17 11:56:40 remnux containerd[9105]: time="2026-07-17T11:56:40.675444896-04:00" level=info msg="cleaning up dead shim" namespace=default diff --git a/submissions/labs/lab12/results/failure-context.txt b/submissions/labs/lab12/results/failure-context.txt deleted file mode 100644 index 21b009e58..000000000 --- a/submissions/labs/lab12/results/failure-context.txt +++ /dev/null @@ -1,5 +0,0 @@ -stage=original bind-mount bonus experiment -date=2026-07-17T11:56:40-04:00 -user=uid=1000(remnux) gid=1000(remnux) groups=1000(remnux),4(adm),24(cdrom),27(sudo),30(dip),46(plugdev),114(lpadmin),115(sambashare),133(wireshark),998(docker) -pwd=/home/remnux/DevSecOps-Intro -root=/home/remnux/DevSecOps-Intro diff --git a/submissions/labs/lab12/results/git-branch.txt b/submissions/labs/lab12/results/git-branch.txt deleted file mode 100644 index ce90d0a09..000000000 --- a/submissions/labs/lab12/results/git-branch.txt +++ /dev/null @@ -1 +0,0 @@ -feature/lab12 diff --git a/submissions/labs/lab12/results/git-head.txt b/submissions/labs/lab12/results/git-head.txt deleted file mode 100644 index d3c5257f4..000000000 --- a/submissions/labs/lab12/results/git-head.txt +++ /dev/null @@ -1 +0,0 @@ -7f777bf2b97dee0362254be52e4d9aba16948893 diff --git a/submissions/labs/lab12/results/git-status-after.txt b/submissions/labs/lab12/results/git-status-after.txt deleted file mode 100644 index 6621d919b..000000000 --- a/submissions/labs/lab12/results/git-status-after.txt +++ /dev/null @@ -1,44 +0,0 @@ - M .gitignore - M labs/lab11/docker-compose.yml - M labs/lab12/scripts/install-kata-assets.sh - M labs/lab5/scripts/zap-auth.yaml -?? PR_BODY.md -?? lab11-results.tar.gz -?? lab12-results.tar.gz -?? lab6-scan-results.tar.gz -?? lab6-scan-results.tar.gz.sha256 -?? lab7-evidence.tar.gz -?? lab7-final-results.tar.gz -?? lab7-run.log -?? lab9-results-20260710-134049.tar.gz -?? lab9-results-20260710-134049/ -?? lab9-results-20260710-134616.tar.gz -?? lab9-results-20260710-134616/ -?? lab9-results-20260710-135010.tar.gz -?? lab9-results-20260710-135010/ -?? lab9-results-20260710-135239.tar.gz -?? lab9-results-20260710-135239/ -?? lab9-results-20260710-135541.tar.gz -?? lab9-results-20260710-135541/ -?? lab9-results-20260710-135841.tar.gz -?? lab9-results-20260710-135841/ -?? lab9-results-20260710-140103.tar.gz -?? lab9-results-20260710-140103/ -?? lab9-results-20260710-140418.tar.gz -?? lab9-results-20260710-140418/ -?? lab9-results-20260710-140713.tar.gz -?? lab9-results-20260710-140713/ -?? lab9-results-20260710-140952.tar.gz -?? lab9-results-20260710-140952/ -?? lab9-results-20260710-141244.tar.gz -?? lab9-results-20260710-141244/ -?? labs/lab11/results/ -?? labs/lab11/run-and-collect.sh -?? labs/lab11/scripts/ -?? labs/lab4/ -?? labs/lab5/analysis/ -?? labs/lab5/zap/ -?? labs/lab8/ -?? labs/lab9/analysis/ -?? vulnerability-db_v6.1.7_2026-06-18T00:59:35Z_1781769478.tar.zst -?? vulnerability-db_v6.1.7_2026-06-18T00:59:35Z_1781769478.tar.zst.aria2 diff --git a/submissions/labs/lab12/results/git-status-before.txt b/submissions/labs/lab12/results/git-status-before.txt deleted file mode 100644 index 6621d919b..000000000 --- a/submissions/labs/lab12/results/git-status-before.txt +++ /dev/null @@ -1,44 +0,0 @@ - M .gitignore - M labs/lab11/docker-compose.yml - M labs/lab12/scripts/install-kata-assets.sh - M labs/lab5/scripts/zap-auth.yaml -?? PR_BODY.md -?? lab11-results.tar.gz -?? lab12-results.tar.gz -?? lab6-scan-results.tar.gz -?? lab6-scan-results.tar.gz.sha256 -?? lab7-evidence.tar.gz -?? lab7-final-results.tar.gz -?? lab7-run.log -?? lab9-results-20260710-134049.tar.gz -?? lab9-results-20260710-134049/ -?? lab9-results-20260710-134616.tar.gz -?? lab9-results-20260710-134616/ -?? lab9-results-20260710-135010.tar.gz -?? lab9-results-20260710-135010/ -?? lab9-results-20260710-135239.tar.gz -?? lab9-results-20260710-135239/ -?? lab9-results-20260710-135541.tar.gz -?? lab9-results-20260710-135541/ -?? lab9-results-20260710-135841.tar.gz -?? lab9-results-20260710-135841/ -?? lab9-results-20260710-140103.tar.gz -?? lab9-results-20260710-140103/ -?? lab9-results-20260710-140418.tar.gz -?? lab9-results-20260710-140418/ -?? lab9-results-20260710-140713.tar.gz -?? lab9-results-20260710-140713/ -?? lab9-results-20260710-140952.tar.gz -?? lab9-results-20260710-140952/ -?? lab9-results-20260710-141244.tar.gz -?? lab9-results-20260710-141244/ -?? labs/lab11/results/ -?? labs/lab11/run-and-collect.sh -?? labs/lab11/scripts/ -?? labs/lab4/ -?? labs/lab5/analysis/ -?? labs/lab5/zap/ -?? labs/lab8/ -?? labs/lab9/analysis/ -?? vulnerability-db_v6.1.7_2026-06-18T00:59:35Z_1781769478.tar.zst -?? vulnerability-db_v6.1.7_2026-06-18T00:59:35Z_1781769478.tar.zst.aria2 diff --git a/submissions/labs/lab12/results/host-kernel-release.txt b/submissions/labs/lab12/results/host-kernel-release.txt deleted file mode 100644 index 4caee941d..000000000 --- a/submissions/labs/lab12/results/host-kernel-release.txt +++ /dev/null @@ -1 +0,0 @@ -5.15.0-139-generic diff --git a/submissions/labs/lab12/results/host-uname.txt b/submissions/labs/lab12/results/host-uname.txt deleted file mode 100644 index ad97ed21f..000000000 --- a/submissions/labs/lab12/results/host-uname.txt +++ /dev/null @@ -1 +0,0 @@ -Linux remnux 5.15.0-139-generic #149~20.04.1-Ubuntu SMP Wed Apr 16 08:29:56 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux diff --git a/submissions/labs/lab12/results/image-pull.txt b/submissions/labs/lab12/results/image-pull.txt deleted file mode 100644 index 2031a8f44..000000000 --- a/submissions/labs/lab12/results/image-pull.txt +++ /dev/null @@ -1,70 +0,0 @@ -docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 0.1 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 0.2 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 0.3 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 0.4 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 0.5 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 0.6 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 0.7 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 0.8 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 0.9 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 1.0 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 1.1 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 1.2 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 1.3 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 1.4 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 1.5 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 1.6 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 1.7 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 1.8 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 1.9 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 2.0 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 2.1 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 2.2 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 2.3 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 2.4 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 2.5 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 2.6 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 2.7 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 2.8 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 2.9 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 3.0 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 3.1 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolved |++++++++++++++++++++++++++++++++++++++| -index-sha256:d9e853e87e55526f6b2917df91a2115c36dd7c696a35be12163d44e6e2a4b6bc: exists |++++++++++++++++++++++++++++++++++++++| -elapsed: 3.2 s total: 0.0 B (0.0 B/s) -      docker.io/library/alpine:3.20: resolved |++++++++++++++++++++++++++++++++++++++| -index-sha256:d9e853e87e55526f6b2917df91a2115c36dd7c696a35be12163d44e6e2a4b6bc: exists |++++++++++++++++++++++++++++++++++++++| -manifest-sha256:c64c687cbea9300178b30c95835354e34c4e4febc4badfe27102879de0483b5e: done |++++++++++++++++++++++++++++++++++++++| -config-sha256:bf8527eb54c3680e728d5b4b383a8ba730d72dae7236fbc8dff97ed6b224a731: done |++++++++++++++++++++++++++++++++++++++| -elapsed: 3.3 s total: 0.0 B (0.0 B/s) diff --git a/submissions/labs/lab12/results/kata-devs.txt b/submissions/labs/lab12/results/kata-devs.txt deleted file mode 100644 index aa74579ef..000000000 --- a/submissions/labs/lab12/results/kata-devs.txt +++ /dev/null @@ -1,14 +0,0 @@ -fd -full -mqueue -null -ptmx -pts -random -shm -stderr -stdin -stdout -tty -urandom -zero diff --git a/submissions/labs/lab12/results/kernel-release-comparison.txt b/submissions/labs/lab12/results/kernel-release-comparison.txt deleted file mode 100644 index 40b4e6fec..000000000 --- a/submissions/labs/lab12/results/kernel-release-comparison.txt +++ /dev/null @@ -1,3 +0,0 @@ -host_release=5.15.0-139-generic -runc_release=5.15.0-139-generic -kata_release=6.18.35 diff --git a/submissions/labs/lab12/results/lscpu.txt b/submissions/labs/lab12/results/lscpu.txt deleted file mode 100644 index 96311fc99..000000000 --- a/submissions/labs/lab12/results/lscpu.txt +++ /dev/null @@ -1,40 +0,0 @@ -Architecture: x86_64 -CPU op-mode(s): 32-bit, 64-bit -Byte Order: Little Endian -Address sizes: 46 bits physical, 48 bits virtual -CPU(s): 4 -On-line CPU(s) list: 0-3 -Thread(s) per core: 1 -Core(s) per socket: 4 -Socket(s): 1 -NUMA node(s): 1 -Vendor ID: GenuineIntel -CPU family: 6 -Model: 170 -Model name: Intel(R) Core(TM) Ultra 9 185H -Stepping: 4 -CPU MHz: 3071.998 -BogoMIPS: 6143.99 -Virtualization: VT-x -Hypervisor vendor: KVM -Virtualization type: full -L1d cache: 192 KiB -L1i cache: 256 KiB -L2 cache: 8 MiB -L3 cache: 96 MiB -NUMA node0 CPU(s): 0-3 -Vulnerability Gather data sampling: Not affected -Vulnerability Itlb multihit: Not affected -Vulnerability L1tf: Not affected -Vulnerability Mds: Not affected -Vulnerability Meltdown: Not affected -Vulnerability Mmio stale data: Not affected -Vulnerability Reg file data sampling: Not affected -Vulnerability Retbleed: Not affected -Vulnerability Spec rstack overflow: Not affected -Vulnerability Spec store bypass: Vulnerable -Vulnerability Spectre v1: Mitigation; usercopy/swapgs barriers and __user pointer sanitization -Vulnerability Spectre v2: Mitigation; Retpolines; STIBP disabled; RSB filling; PBRSB-eIBRS Not affected; BHI SW loop, KVM SW loop -Vulnerability Srbds: Not affected -Vulnerability Tsx async abort: Not affected -Flags: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 pcid sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch invpcid_single tpr_shadow vnmi flexpriority ept vpid fsgsbase bmi1 avx2 bmi2 invpcid rdseed adx clflushopt sha_ni arat md_clear flush_l1d arch_capabilities diff --git a/submissions/labs/lab12/results/nerdctl-ps-all.txt b/submissions/labs/lab12/results/nerdctl-ps-all.txt deleted file mode 100644 index f71d9fd44..000000000 --- a/submissions/labs/lab12/results/nerdctl-ps-all.txt +++ /dev/null @@ -1 +0,0 @@ -CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES diff --git a/submissions/labs/lab12/results/nerdctl-version.txt b/submissions/labs/lab12/results/nerdctl-version.txt deleted file mode 100644 index 822a33a3c..000000000 --- a/submissions/labs/lab12/results/nerdctl-version.txt +++ /dev/null @@ -1 +0,0 @@ -nerdctl version 2.3.4 diff --git a/submissions/labs/lab12/results/os-release.txt b/submissions/labs/lab12/results/os-release.txt deleted file mode 100644 index 5e42801c6..000000000 --- a/submissions/labs/lab12/results/os-release.txt +++ /dev/null @@ -1,12 +0,0 @@ -NAME="Ubuntu" -VERSION="20.04.6 LTS (Focal Fossa)" -ID=ubuntu -ID_LIKE=debian -PRETTY_NAME="Ubuntu 20.04.6 LTS" -VERSION_ID="20.04" -HOME_URL="https://www.ubuntu.com/" -SUPPORT_URL="https://help.ubuntu.com/" -BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/" -PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy" -VERSION_CODENAME=focal -UBUNTU_CODENAME=focal diff --git a/submissions/labs/lab12/results/repository-root.txt b/submissions/labs/lab12/results/repository-root.txt deleted file mode 100644 index 70bd6df94..000000000 --- a/submissions/labs/lab12/results/repository-root.txt +++ /dev/null @@ -1 +0,0 @@ -/home/remnux/DevSecOps-Intro diff --git a/submissions/labs/lab12/results/run.log b/submissions/labs/lab12/results/run.log deleted file mode 100644 index f5fb9513c..000000000 --- a/submissions/labs/lab12/results/run.log +++ /dev/null @@ -1,384 +0,0 @@ - -============================================================ -==> Repository preflight -============================================================ -/home/remnux/DevSecOps-Intro - M .gitignore - M labs/lab11/docker-compose.yml - M labs/lab12/scripts/install-kata-assets.sh - M labs/lab5/scripts/zap-auth.yaml -?? PR_BODY.md -?? lab11-results.tar.gz -?? lab12-results.tar.gz -?? lab6-scan-results.tar.gz -?? lab6-scan-results.tar.gz.sha256 -?? lab7-evidence.tar.gz -?? lab7-final-results.tar.gz -?? lab7-run.log -?? lab9-results-20260710-134049.tar.gz -?? lab9-results-20260710-134049/ -?? lab9-results-20260710-134616.tar.gz -?? lab9-results-20260710-134616/ -?? lab9-results-20260710-135010.tar.gz -?? lab9-results-20260710-135010/ -?? lab9-results-20260710-135239.tar.gz -?? lab9-results-20260710-135239/ -?? lab9-results-20260710-135541.tar.gz -?? lab9-results-20260710-135541/ -?? lab9-results-20260710-135841.tar.gz -?? lab9-results-20260710-135841/ -?? lab9-results-20260710-140103.tar.gz -?? lab9-results-20260710-140103/ -?? lab9-results-20260710-140418.tar.gz -?? lab9-results-20260710-140418/ -?? lab9-results-20260710-140713.tar.gz -?? lab9-results-20260710-140713/ -?? lab9-results-20260710-140952.tar.gz -?? lab9-results-20260710-140952/ -?? lab9-results-20260710-141244.tar.gz -?? lab9-results-20260710-141244/ -?? labs/lab11/results/ -?? labs/lab11/run-and-collect.sh -?? labs/lab11/scripts/ -?? labs/lab4/ -?? labs/lab5/analysis/ -?? labs/lab5/zap/ -?? labs/lab8/ -?? labs/lab9/analysis/ -?? vulnerability-db_v6.1.7_2026-06-18T00:59:35Z_1781769478.tar.zst -?? vulnerability-db_v6.1.7_2026-06-18T00:59:35Z_1781769478.tar.zst.aria2 -feature/lab12 -7f777bf2b97dee0362254be52e4d9aba16948893 - -============================================================ -==> Host and KVM preflight -============================================================ -Linux remnux 5.15.0-139-generic #149~20.04.1-Ubuntu SMP Wed Apr 16 08:29:56 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux -5.15.0-139-generic -NAME="Ubuntu" -VERSION="20.04.6 LTS (Focal Fossa)" -ID=ubuntu -ID_LIKE=debian -PRETTY_NAME="Ubuntu 20.04.6 LTS" -VERSION_ID="20.04" -HOME_URL="https://www.ubuntu.com/" -SUPPORT_URL="https://help.ubuntu.com/" -BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/" -PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy" -VERSION_CODENAME=focal -UBUNTU_CODENAME=focal -Architecture: x86_64 -CPU op-mode(s): 32-bit, 64-bit -Byte Order: Little Endian -Address sizes: 46 bits physical, 48 bits virtual -CPU(s): 4 -On-line CPU(s) list: 0-3 -Thread(s) per core: 1 -Core(s) per socket: 4 -Socket(s): 1 -NUMA node(s): 1 -Vendor ID: GenuineIntel -CPU family: 6 -Model: 170 -Model name: Intel(R) Core(TM) Ultra 9 185H -Stepping: 4 -CPU MHz: 3071.998 -BogoMIPS: 6143.99 -Virtualization: VT-x -Hypervisor vendor: KVM -Virtualization type: full -L1d cache: 192 KiB -L1i cache: 256 KiB -L2 cache: 8 MiB -L3 cache: 96 MiB -NUMA node0 CPU(s): 0-3 -Vulnerability Gather data sampling: Not affected -Vulnerability Itlb multihit: Not affected -Vulnerability L1tf: Not affected -Vulnerability Mds: Not affected -Vulnerability Meltdown: Not affected -Vulnerability Mmio stale data: Not affected -Vulnerability Reg file data sampling: Not affected -Vulnerability Retbleed: Not affected -Vulnerability Spec rstack overflow: Not affected -Vulnerability Spec store bypass: Vulnerable -Vulnerability Spectre v1: Mitigation; usercopy/swapgs barriers and __user pointer sanitization -Vulnerability Spectre v2: Mitigation; Retpolines; STIBP disabled; RSB filling; PBRSB-eIBRS Not affected; BHI SW loop, KVM SW loop -Vulnerability Srbds: Not affected -Vulnerability Tsx async abort: Not affected -Flags: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 pcid sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch invpcid_single tpr_shadow vnmi flexpriority ept vpid fsgsbase bmi1 avx2 bmi2 invpcid rdseed adx clflushopt sha_ni arat md_clear flush_l1d arch_capabilities -=== loaded KVM modules === -kvm_intel 380928 0 -kvm 1019904 1 kvm_intel - -=== /dev/kvm === -crw-rw----+ 1 root kvm 10, 232 Jul 17 11:55 /dev/kvm - -============================================================ -==> Checking base dependencies -============================================================ -All base commands are already installed. - -============================================================ -==> Checking containerd -============================================================ -containerd github.com/containerd/containerd 1.7.24 - -============================================================ -==> Checking nerdctl -============================================================ -nerdctl version 2.3.4 - -============================================================ -==> Starting containerd -============================================================ -active -* containerd.service - containerd container runtime - Loaded: loaded (/lib/systemd/system/containerd.service; enabled; vendor preset: enabled) - Active: active (running) since Fri 2026-07-17 11:55:09 EDT; 2s ago - Docs: https://containerd.io - Process: 9037 ExecStartPre=/sbin/modprobe overlay (code=exited, status=0/SUCCESS) - Main PID: 9038 (containerd) - Tasks: 23 - Memory: 78.3M - CGroup: /system.slice/containerd.service - |-1998 /usr/bin/containerd-shim-runc-v2 -namespace moby -id 0f1b51a1c76dbcdebfae45ab3a79b301b783e379fcd4dd86ff696c001332f1c5 -address /run/containerd/containerd.sock - |-8927 /opt/kata/runtime-rs/bin/containerd-shim-kata-v2 -id 0dead0d386bb8bfe4986081886c24d6044d66816d0dafe7e85b76bc1ebca84d1 -namespace default -address /run/containerd/containerd.sock -publish-binary /usr/bin/containerd - `-9038 /usr/bin/containerd - -Jul 17 11:55:09 remnux containerd[9038]: time="2026-07-17T11:55:09.942403933-04:00" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 -Jul 17 11:55:09 remnux containerd[9038]: time="2026-07-17T11:55:09.942414504-04:00" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="skip plugin: tracing endpoint not configured" type=io.containerd.tracing.processor.v1 -Jul 17 11:55:09 remnux containerd[9038]: time="2026-07-17T11:55:09.942424115-04:00" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 -Jul 17 11:55:09 remnux containerd[9038]: time="2026-07-17T11:55:09.942430837-04:00" level=info msg="skip loading plugin \"io.containerd.internal.v1.tracing\"..." error="skip plugin: tracing endpoint not configured" type=io.containerd.internal.v1 -Jul 17 11:55:09 remnux containerd[9038]: time="2026-07-17T11:55:09.942436127-04:00" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 -Jul 17 11:55:09 remnux containerd[9038]: time="2026-07-17T11:55:09.942442667-04:00" level=info msg="loading plugin \"io.containerd.nri.v1.nri\"..." type=io.containerd.nri.v1 -Jul 17 11:55:09 remnux containerd[9038]: time="2026-07-17T11:55:09.942448246-04:00" level=info msg="NRI interface is disabled by configuration." -Jul 17 11:55:09 remnux containerd[9038]: time="2026-07-17T11:55:09.942633379-04:00" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc -Jul 17 11:55:09 remnux containerd[9038]: time="2026-07-17T11:55:09.942656607-04:00" level=info msg=serving... address=/run/containerd/containerd.sock -Jul 17 11:55:09 remnux containerd[9038]: time="2026-07-17T11:55:09.942686346-04:00" level=info msg="containerd successfully booted in 0.028186s" - -============================================================ -==> Installing and configuring Kata -============================================================ -Using already installed Kata version: 3.32.0 -Kata runtime-rs configuration: -/opt/kata/share/defaults/kata-containers/runtime-rs/configuration-qemu-runtime-rs.toml -Kata shim: -/opt/kata/runtime-rs/bin/containerd-shim-kata-v2 -Updated /etc/containerd/config.toml with Kata runtime: io.containerd.kata.v2 -Restart containerd to apply: sudo systemctl restart containerd -active -* containerd.service - containerd container runtime - Loaded: loaded (/lib/systemd/system/containerd.service; enabled; vendor preset: enabled) - Active: active (running) since Fri 2026-07-17 11:55:12 EDT; 3s ago - Docs: https://containerd.io - Process: 9104 ExecStartPre=/sbin/modprobe overlay (code=exited, status=0/SUCCESS) - Main PID: 9105 (containerd) - Tasks: 23 - Memory: 78.2M - CGroup: /system.slice/containerd.service - |-1998 /usr/bin/containerd-shim-runc-v2 -namespace moby -id 0f1b51a1c76dbcdebfae45ab3a79b301b783e379fcd4dd86ff696c001332f1c5 -address /run/containerd/containerd.sock - |-8927 /opt/kata/runtime-rs/bin/containerd-shim-kata-v2 -id 0dead0d386bb8bfe4986081886c24d6044d66816d0dafe7e85b76bc1ebca84d1 -namespace default -address /run/containerd/containerd.sock -publish-binary /usr/bin/containerd - `-9105 /usr/bin/containerd - -Jul 17 11:55:12 remnux containerd[9105]: time="2026-07-17T11:55:12.206199536-04:00" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="skip plugin: tracing endpoint not configured" type=io.containerd.tracing.processor.v1 -Jul 17 11:55:12 remnux containerd[9105]: time="2026-07-17T11:55:12.206208725-04:00" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 -Jul 17 11:55:12 remnux containerd[9105]: time="2026-07-17T11:55:12.206217871-04:00" level=info msg="skip loading plugin \"io.containerd.internal.v1.tracing\"..." error="skip plugin: tracing endpoint not configured" type=io.containerd.internal.v1 -Jul 17 11:55:12 remnux containerd[9105]: time="2026-07-17T11:55:12.206538563-04:00" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 -Jul 17 11:55:12 remnux containerd[9105]: time="2026-07-17T11:55:12.206555713-04:00" level=info msg="loading plugin \"io.containerd.nri.v1.nri\"..." type=io.containerd.nri.v1 -Jul 17 11:55:12 remnux containerd[9105]: time="2026-07-17T11:55:12.206564937-04:00" level=info msg="NRI interface is disabled by configuration." -Jul 17 11:55:12 remnux containerd[9105]: time="2026-07-17T11:55:12.206716785-04:00" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc -Jul 17 11:55:12 remnux containerd[9105]: time="2026-07-17T11:55:12.206745517-04:00" level=info msg=serving... address=/run/containerd/containerd.sock -Jul 17 11:55:12 remnux containerd[9105]: time="2026-07-17T11:55:12.206788777-04:00" level=info msg="containerd successfully booted in 0.042209s" -Jul 17 11:55:12 remnux systemd[1]: Started containerd container runtime. -[plugins.'io.containerd.grpc.v1.cri'.containerd.runtimes.kata] - runtime_type = 'io.containerd.kata.v2' - -============================================================ -==> Recording versions -============================================================ -containerd github.com/containerd/containerd 1.7.24 -nerdctl version 2.3.4 -runc version 1.1.12-0ubuntu2~20.04.1 -spec: 1.0.2-dev -go: go1.21.1 -libseccomp: 2.5.1 -3.32.0 - -============================================================ -==> Pulling alpine:3.20 -============================================================ -docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 0.1 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 0.2 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 0.3 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 0.4 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 0.5 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 0.6 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 0.7 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 0.8 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 0.9 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 1.0 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 1.1 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 1.2 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 1.3 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 1.4 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 1.5 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 1.6 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 1.7 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 1.8 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 1.9 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 2.0 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 2.1 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 2.2 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 2.3 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 2.4 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 2.5 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 2.6 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 2.7 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 2.8 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 2.9 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 3.0 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolving |--------------------------------------| -elapsed: 3.1 s total: 0.0 B (0.0 B/s) -  docker.io/library/alpine:3.20: resolved |++++++++++++++++++++++++++++++++++++++| -index-sha256:d9e853e87e55526f6b2917df91a2115c36dd7c696a35be12163d44e6e2a4b6bc: exists |++++++++++++++++++++++++++++++++++++++| -elapsed: 3.2 s total: 0.0 B (0.0 B/s) -      docker.io/library/alpine:3.20: resolved |++++++++++++++++++++++++++++++++++++++| -index-sha256:d9e853e87e55526f6b2917df91a2115c36dd7c696a35be12163d44e6e2a4b6bc: exists |++++++++++++++++++++++++++++++++++++++| -manifest-sha256:c64c687cbea9300178b30c95835354e34c4e4febc4badfe27102879de0483b5e: done |++++++++++++++++++++++++++++++++++++++| -config-sha256:bf8527eb54c3680e728d5b4b383a8ba730d72dae7236fbc8dff97ed6b224a731: done |++++++++++++++++++++++++++++++++++++++| -elapsed: 3.3 s total: 0.0 B (0.0 B/s) - -============================================================ -==> Collecting kernel identity for runc and Kata -============================================================ ---- runc --- -+ nerdctl run --rm alpine:3.20 sh -c uname -a; echo "--- cpuinfo ---"; head -3 /proc/cpuinfo -Linux 9730d7860109 5.15.0-139-generic #149~20.04.1-Ubuntu SMP Wed Apr 16 08:29:56 UTC 2025 x86_64 Linux ---- cpuinfo --- -processor : 0 -vendor_id : GenuineIntel -cpu family : 6 ---- kata --- -+ nerdctl run --rm --runtime=io.containerd.kata.v2 alpine:3.20 sh -c uname -a; echo "--- cpuinfo ---"; head -3 /proc/cpuinfo -Linux 1c60be6cde44 6.18.35 #1 SMP Mon Jun 15 12:55:58 UTC 2026 x86_64 Linux ---- cpuinfo --- -processor : 0 -vendor_id : GenuineIntel -cpu family : 6 -host_release=5.15.0-139-generic -runc_release=run -kata_release=run -WARNING: runc kernel release does not equal host release. - -============================================================ -==> Collecting /dev and capability evidence -============================================================ -+ nerdctl run --rm alpine:3.20 sh -c ls -1 /dev | sort -+ nerdctl run --rm --runtime=io.containerd.kata.v2 alpine:3.20 sh -c ls -1 /dev | sort -+ nerdctl run --rm alpine:3.20 sh -c grep ^Cap /proc/1/status -+ nerdctl run --rm --runtime=io.containerd.kata.v2 alpine:3.20 sh -c grep ^Cap /proc/1/status ---- /dev diff --- ---- /home/remnux/DevSecOps-Intro/labs/lab12/results/runc-devs.txt 2026-07-17 11:55:25.857191627 -0400 -+++ /home/remnux/DevSecOps-Intro/labs/lab12/results/kata-devs.txt 2026-07-17 11:55:32.264393747 -0400 -@@ -1,4 +1,3 @@ --core - fd - full - mqueue ---- runc capabilities --- -CapInh: 0000000000000000 -CapPrm: 00000000a80425fb -CapEff: 00000000a80425fb -CapBnd: 00000000a80425fb -CapAmb: 0000000000000000 ---- kata capabilities --- -CapInh: 0000000000000000 -CapPrm: 00000000a80425fb -CapEff: 00000000a80425fb -CapBnd: 00000000a80425fb -CapAmb: 0000000000000000 - -============================================================ -==> Running cold-start benchmark -============================================================ -Warming up runc once -+ nerdctl run --rm alpine:3.20 true -Warming up Kata once -+ nerdctl run --rm --runtime=io.containerd.kata.v2 alpine:3.20 true -+ nerdctl run --rm alpine:3.20 true -runc,1,0.526595584 -+ nerdctl run --rm alpine:3.20 true -runc,2,0.552260352 -+ nerdctl run --rm alpine:3.20 true -runc,3,0.481219072 -+ nerdctl run --rm alpine:3.20 true -runc,4,0.423924224 -+ nerdctl run --rm alpine:3.20 true -runc,5,0.372067072 -+ nerdctl run --rm --runtime=io.containerd.kata.v2 alpine:3.20 true -kata,1,7.855792128 -+ nerdctl run --rm --runtime=io.containerd.kata.v2 alpine:3.20 true -kata,2,7.574585856 -+ nerdctl run --rm --runtime=io.containerd.kata.v2 alpine:3.20 true -kata,3,7.067718144 -+ nerdctl run --rm --runtime=io.containerd.kata.v2 alpine:3.20 true -kata,4,6.545513984 -+ nerdctl run --rm --runtime=io.containerd.kata.v2 alpine:3.20 true -kata,5,7.210876160 -runc_samples=0.526595584,0.552260352,0.481219072,0.423924224,0.372067072 -runc_average=0.471213261 -runc_median=0.481219072 -kata_samples=7.855792128,7.574585856,7.067718144,6.545513984,7.210876160 -kata_average=7.250897254 -kata_median=7.210876160 -cold_start_overhead_ratio=15.3877 - -============================================================ -==> Running course-prescribed 100 MiB /dev/null benchmark -============================================================ -+ nerdctl run --rm alpine:3.20 sh -c LC_ALL=C dd if=/dev/zero of=/dev/null bs=1M count=100 2>&1 -+ nerdctl run --rm --runtime=io.containerd.kata.v2 alpine:3.20 sh -c LC_ALL=C dd if=/dev/zero of=/dev/null bs=1M count=100 2>&1 ---- runc I/O --- -100+0 records in -100+0 records out -104857600 bytes (100.0MB) copied, 0.004719 seconds, 20.7GB/s ---- Kata I/O --- -100+0 records in -100+0 records out -104857600 bytes (100.0MB) copied, 0.023807 seconds, 4.1GB/s - -============================================================ -==> Bonus experiment 1: exact bind-mount vector from the assignment -============================================================ -OVERWRITTEN BY RUNC CONTAINER diff --git a/submissions/labs/lab12/results/runc-devs.txt b/submissions/labs/lab12/results/runc-devs.txt deleted file mode 100644 index c42a695d3..000000000 --- a/submissions/labs/lab12/results/runc-devs.txt +++ /dev/null @@ -1,15 +0,0 @@ -core -fd -full -mqueue -null -ptmx -pts -random -shm -stderr -stdin -stdout -tty -urandom -zero diff --git a/submissions/labs/lab12/results/runc-version.txt b/submissions/labs/lab12/results/runc-version.txt deleted file mode 100644 index 3cd9507d2..000000000 --- a/submissions/labs/lab12/results/runc-version.txt +++ /dev/null @@ -1,4 +0,0 @@ -runc version 1.1.12-0ubuntu2~20.04.1 -spec: 1.0.2-dev -go: go1.21.1 -libseccomp: 2.5.1