Hi all,
For those who are using docker and also gave a chance to Fedora 31 testing
template, you may know that there is a "Cgroups Exception" for Fedora 31.
According to the official page https://docs.docker.com/engine/install/fedora/,
they suggest to:
"""
For Fedora 31 and higher, you need to enable the backward compatibility for
Cgroups.
$ sudo grubby --update-kernel=ALL
--args="systemd.unified_cgroup_hierarchy=0"
"""
That does not really fit Qubes. Globally, it's a matter of adding a kernel
options to your VM where you run your dockers. Assming this VM is called
'work-docker', in dom0:
1) Check your VM kernel opts:
qvm-prefs work-docker kernelopts
For me, it was only 'nopat'
2) Add the docker suggested option and your already present kernelopts:
qvm-prefs --set work-docker kernelopts 'nopat
systemd.unified_cgroup_hierarchy=0'
That's all. You can continue to use your dockers in your Fedora 31 AppVM.
Another useful trick thanks to Qubes, is to use 'bind-dirs'
(https://www.qubes-os.org/doc/bind-dirs/) for '/var/lib/docker'. It allows you
to not modify default dockers location or symlink or copy paste at early boot
or whatever.
Best,
Frédéric
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/f29726a0-610b-e1c5-0d56-470737a53536%40qubes-os.org.
