<HTML><BODY><div><div>Michal,<br><br>> What exact problem do you see?<br>I see the kubelet crash with error: «Failed to start ContainerManager failed to initialize top level QOS containers: root container [kubepods] doesn't exist»<br>details: <a href="https://github.com/kubernetes/kubernetes/issues/95488">https://github.com/kubernetes/kubernetes/issues/95488</a><br><br><br>> What was 'self'?<br>‘self’ was a kubelet process running on bare metal node as systemd service.<br>I can see same two mounts of named systemd hierarchy from shell on the same node, simply by `$ cat /proc/self/mountinfo`<br>I think kubelet is running in the «main» mount namespace which has weird named systemd mount.<br> </div><div>> bind mount of cgroup subtree into a container done by a container runtime<br>does it mean, there was a container which somehow had access to main mount namespace and decided to mount named systemd hierarchy inside itself? (probably it was running systemd inside it)<br><br>I would like to reproduce such weird mount to understand the full situation and make sure I can avoid it in future.</div><br><blockquote style="border-left:1px solid #0857A6; margin:10px; padding:0 0 0 10px;">Friday, November 13, 2020 2:34 PM +03:00 from Michal Koutný <mkoutny@suse.com>:<br> <div id=""><div class="js-helper js-readmsg-msg"><div><div id="style_16052672521816918230_BODY">Hello.<br><br>On Thu, Nov 12, 2020 at 08:05:34PM +0300, Andrei Enshin <<a href="/compose?To=b1os@bk.ru">b1os@bk.ru</a>> wrote:<br>> There are few nodes after k8s update started to have (maybe it was<br>> before) a problem with the following mount:<br>What exact problem do you see?<br><br>> It was taken from /proc/self/mountinfo<br>What was 'self'?<br><br>> May I ask, does systemd mount on a fly some hierarchies like this and<br>> if yes what logic behind it? <br>systemd mounts the cgroup hierarchies at boot. What you see is likely a<br>bind mount of cgroup subtree into a container done by a container<br>runtime.<br><br>Michal</div></div></div></div></blockquote> <div> </div><div data-signature-widget="container"><div data-signature-widget="content"><p>---</p><p>Best Regards,<br>Andrei Enshin</p></div></div><div> </div></div></BODY></HTML>