[SOLVED]How do I enable CONFIG_CGROUP_BPF when using OpenRC?

[allistarM]

Hi all,
My docker environment stopped working and the error when running "docker compose up -d" is:

Code: Select all

Error response from daemon: failed to create task for container: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: error setting cgroup config for procHooks process: bpf_prog_query(BPF_CGROUP_DEVICE) failed: function not implemented: unknown

It seems I need to enable the CONFIG_CGROUP_BPF kernel config option, but this is only available if you're using Systemd. I'm using OpenRC. Here's the details for that config option:

Code: Select all

 Symbol: CGROUP_BPF [=n]
  │ Type  : bool
  │ Defined at init/Kconfig:1157
  │   Prompt: Support for eBPF programs attached to cgroups
  │   Depends on: CGROUPS [=y] && BPF_SYSCALL [=n]
  │   Location:
  │     -> General setup
  │ (1)   -> Control Group support (CGROUPS [=y])
  │         -> Support for eBPF programs attached to cgroups (CGROUP_BPF [=n])
  │ Selects: SOCK_CGROUP_DATA [=y]
  │ Selected by [n]:
  │   - GENTOO_LINUX_INIT_SYSTEMD [=n] && GENTOO_LINUX [=y] && GENTOO_LINUX_UDEV [=y]

How do I enable this option when I'm using OpenRC? If I can't, then how do I run docker on OpenRC?

[pietinger]

This has nothing to do with systemd. Look at the line:

Depends on: CGROUPS [=y] && BPF_SYSCALL [=n]

You have CGROUPS enabled. Good. But your are missing BPF_SYSCALL.

Enable it:

Code: Select all

General setup  --->
    BPF subsystem  --->
        [*] Enable bpf() system call

Now you should be able to enable:

Code: Select all

General setup  --->
    -*- Control Group support  --->
        [*]   Support for eBPF programs attached to cgroups

[allistarM]

Thank you very much! Your post is appreciated. I should read what the kernel config says more closely. I was worried I'd have to convert to systemd which would be an annoyance.

I now have the kernel option enabled and my docker containers are working again.
Thanks again!

[pietinger]

Thanks again!

You are very Welcome !

Have fun with Gentoo !

[ricardo82]

This has nothing to do with systemd. Look at the line:

Depends on: CGROUPS [=y] && BPF_SYSCALL [=n]

You have CGROUPS enabled. Good. But your are missing BPF_SYSCALL.

Enable it:

Code: Select all

General setup  --->
    BPF subsystem  --->
        [*] Enable bpf() system call

Now you should be able to enable:

Code: Select all

General setup  --->
    -*- Control Group support  --->
        [*]   Support for eBPF programs attached to cgroups

-> solved it for me,