From: Xiangyu Chen <xiangyu.c...@windriver.com>

Add CONFIG_CGROUP_BPF to ensure docker can be started under cgroup v2,
otherwise it would report the following error:

     Error: for ... error setting cgroup config for procHooks process:
     bpf_prog_query(BPF_CGROUP_DEVICE) failed: invalid argument: unknown

Cgroup v2 device controller has no interface files and is implemented on top
of cgroup BPF. To control access to device files, a user may create bpf programs
of type BPF_PROG_TYPE_CGROUP_DEVICE and attach them to cgroups with
BPF_CGROUP_DEVICE flag.

Signed-off-by: Xiangyu Chen <xiangyu.c...@windriver.com>
---
 recipes-kernel/linux/linux-yocto/docker.cfg | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/recipes-kernel/linux/linux-yocto/docker.cfg 
b/recipes-kernel/linux/linux-yocto/docker.cfg
index eeeaa242..4d8d7e04 100644
--- a/recipes-kernel/linux/linux-yocto/docker.cfg
+++ b/recipes-kernel/linux/linux-yocto/docker.cfg
@@ -11,3 +11,5 @@ CONFIG_IP_NF_TARGET_MASQUERADE=m
 CONFIG_NETFILTER_XT_MATCH_IPVS=m
 
 CONFIG_OVERLAY_FS=y
+
+CONFIG_CGROUP_BPF=y
-- 
2.25.1

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#8603): 
https://lists.yoctoproject.org/g/meta-virtualization/message/8603
Mute This Topic: https://lists.yoctoproject.org/mt/104758931/21656
Group Owner: meta-virtualization+ow...@lists.yoctoproject.org
Unsubscribe: https://lists.yoctoproject.org/g/meta-virtualization/unsub 
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to