You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
[net] Disable prio and cls cgroups to make working cgroup2 sock matching (#198)
* Unset CONFIG_CGROUP_NET_CLASSID, CONFIG_CGROUP_NET_PRIO and depended
modules CONFIG_NET_CLS_CGROUP, CONFIG_NETFILTER_XT_MATCH_CGROUP
in Kconfig to disable those v1 cgroups.
The system contains programs, which use both groups v1 and v2, e.g. docker
uses net_prio, net_cls and "ip vrf" uses cgroup2 socket matching.
But, Linux kernel does not allow to work with net_prio, net_cls and
socket matching from cgroup2 in the same time. Link to comment in source file:
https://elixir.bootlin.com/linux/v4.19.156/source/include/linux/cgroup-defs.h#L745
The related warning, appearing on startup: "sonic INFO kernel: [ 14.057746] cgroup:
cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation".
Disabling of net_prio and net_cls will prevent this conflict and make programs,
which uses cgroup2 socket matching, to be working correct.
Signed-off-by: Maksym Belei <[email protected]>
0 commit comments