profile
viewpoint
Thomas Graf tgraf Isovalent & Cilium Zurich, Switzerland Cilium, eBPF, Kubernetes Co-Founder & CTO Isovalent

cilium/ebpf 906

eBPF Library for Go

tgraf/bmon 755

bandwidth monitor and rate estimator

tgraf/libnl 93

Netlink Library Suite

cilium/ebpf.io 53

ebpf.io Website

b3a-dev/ebpf-geoip-demo 11

eBPF summit demo

tgraf/net-next-vagrant 8

Vagrant + packer scripts for Linux net-next

cilium/gke 5

Guide & scripts for deploying Cilium on GKE

tgraf/libnl-1.1-stable 5

Stable branch for libnl-1.1

tgraf/iproute2 2

Linux routing utilities

tgraf/net-next 1

Linux Kernel Networking -next

push eventcilium/proxy

Jarno Rajahalme

commit sha 76f3cbc0cc348be7c51ce023f536b5bf008e76bd

Docker: Make builder multi-arch compatible Signed-off-by: Jarno Rajahalme <jarno@covalent.io>

view details

Jarno Rajahalme

commit sha 6c980c60fb96e27faae370af792217316482c2ed

Docker: Use the new multi-arch builder Signed-off-by: Jarno Rajahalme <jarno@covalent.io>

view details

push time in 5 hours

fork bbonev/bmon

bandwidth monitor and rate estimator

fork in a day

startedtgraf/bmon

started time in a day

push eventcilium/proxy

Jarno Rajahalme

commit sha 6c980c60fb96e27faae370af792217316482c2ed

Docker: Use the new multi-arch builder Signed-off-by: Jarno Rajahalme <jarno@covalent.io>

view details

push time in 4 days

push eventcilium/proxy

Jarno Rajahalme

commit sha 646429b830971c5db07dfcb46525c2705466d9bb

Docker: Use the new multi-arch builder Signed-off-by: Jarno Rajahalme <jarno@covalent.io>

view details

push time in 4 days

push eventcilium/proxy

Jarno Rajahalme

commit sha bd076b0fb860fdd7d5fc4c1877c9d0cd603c3096

Docker: Use the new multi-arch builder Signed-off-by: Jarno Rajahalme <jarno@covalent.io>

view details

push time in 4 days

pull request commentcilium/proxy

Multi platform image

After some digging, the error really looks like a bug in buildx: https://github.com/docker/buildx/issues/456

errordeveloper

comment created time in 5 days

push eventcilium/packer-ci-build

Tobias Klauser

commit sha 5d46ffc4dd8c998aebaa7307788f807ac441a351

provision: bump Go to 1.15.5 Signed-off-by: Tobias Klauser <tklauser@distanz.ch>

view details

Tobias Klauser

commit sha db5320adee29faff354947482c2c70203f829f6d

provision: pull cilium/net-test image This is used in CI since cilium/cilium#13989 Signed-off-by: Tobias Klauser <tklauser@distanz.ch>

view details

push time in 5 days

delete branch cilium/packer-ci-build

delete branch : pr/tklauser/bump-go-and-add-net-test

delete time in 5 days

push eventcilium/proxy

Jarno Rajahalme

commit sha b5722f7b65f7a85027ef27637fd7d05051517cde

envoy: Apply CVE patches Signed-off-by: Jarno Rajahalme <jarno@covalent.io>

view details

Jarno Rajahalme

commit sha e45e2eeedd1896c2ca199f6205b04aa65e015069

docker: Use new builder image Signed-off-by: Jarno Rajahalme <jarno@covalent.io>

view details

Jarno Rajahalme

commit sha 1177896bebde79915fe5f9092409bf0254084b4e

envoy: Update to release 1.14.5 Signed-off-by: Jarno Rajahalme <jarno@covalent.io>

view details

Aditi Ghag

commit sha 155a0c4199827a6ce35606bf29aea154dfd20700

readme: Update git clone url

view details

Jarno Rajahalme

commit sha e14017215d3263a4be1643113e2733ea38521e59

envoy: Add lightstep tracer patch for arm64 Backport lightstep commit a5705f2f9358888f009aa7e85b64dbcef1c1ead4 for a build fix for arm64 as a patch. Signed-off-by: Jarno Rajahalme <jarno@covalent.io>

view details

Jarno Rajahalme

commit sha 24d029a184781be5aef597357a5285152ec097d0

bazel: Remove deprecated --local_resources option from Dockerfile. Signed-off-by: Jarno Rajahalme <jarno@covalent.io>

view details

Jarno Rajahalme

commit sha 8b54499ef1f3324473f70c152b4f3400ec496de1

bazel: Update to 3.7.1 Signed-off-by: Jarno Rajahalme <jarno@covalent.io>

view details

Jarno Rajahalme

commit sha a100ce509e5899363147eeda2d081de55bda3e17

tests: Disable TLS half closed integration tests for ARM64 Envoy connection half closed semantics seems broken for ARM64. Upstream did not ever test half closed semantics for TLS for any architecture. Disable these integration tests for ARM64, but still keep them for x86_64. Signed-off-by: Jarno Rajahalme <jarno@covalent.io>

view details

Jarno Rajahalme

commit sha 3201eb18dbb6a0b80902d76a569a9d8bb04bbcd7

tests: Increase bazel test timeout to 2000 seconds Increase bazel test timeout to 2000 seconds from the default 300 to allow for slow execution of slow machines. Signed-off-by: Jarno Rajahalme <jarno@covalent.io>

view details

Jarno Rajahalme

commit sha 4933021aa806f817cb31a6d76ffad36b752d08ad

builder: Support arm64 in bazel download Pull bazel version for the running arch. Pull the binary instead of an installer. Signed-off-by: Jarno Rajahalme <jarno@covalent.io>

view details

Jarno Rajahalme

commit sha 71e83eaae2cdfb1c2b5d6ea17285e00fa83f24f4

Makefile: More Bazel ARM64 support Version linkstamp path is architecture specific. Unify tools/install_bazel.sh now that Bazel releases are available for ARM64. Signed-off-by: Jarno Rajahalme <jarno@covalent.io>

view details

Jarno Rajahalme

commit sha d1b26cc3564100edcc25e3d3029be4876468e6a1

Docker: Use the new builder Signed-off-by: Jarno Rajahalme <jarno@covalent.io>

view details

Ilya Dmitrichenko

commit sha 7352f75b914d8a33e2fbc28f6e50cd382f7dd435

Add multi-platform cilium-envoy image

view details

Ilya Dmitrichenko

commit sha b552b51b4cd7477df81e6a5434e310a0207b7ddc

Import image build scripts from cilium/cilium@4004c33dceaa10390e09047ebaec4f3d25bec75b

view details

Ilya Dmitrichenko

commit sha f1e044ab4fcd56d448d18c5a607ac0fa9490a46e

Build cilium-envoy image in GitHub Actions - Use defaults for jobs, RAM, and all CPUs - Use latest Bazel version - Remove `--record_rule_instantiation_callstack` - Reclaim disk space (/dev/sda1 Total: 84G Used: 7.0G/9% Free: 77G) - Add 10G swap to save cross linker from getting OOM-killed - Print disk usage and kernel messages on failure - Try to make linker use less memory, albeit that could make it slow too - Enable optional remote cache, disable sandboxing - Set local cache paths correctly, use buildkit cache mounts

view details

push time in 5 days

pull request commentcilium/proxy

Multi platform image

Wow, swap hack actually worked! 🎉

But I'm in for a battle here, getting this random new error on push now:

#25 exporting to image
#25 exporting layers
#25 exporting layers 2.5s done
#25 exporting manifest sha256:a3d9263f81acabe6a5712338200aa96cbb75f6725edc0187324ce35402924bf3 done
#25 exporting config sha256:9bdacc885bb42b79351394cb6abf32799f3f36f53aeeba57d2a6f3a8e10b8be7
#25 exporting config sha256:9bdacc885bb42b79351394cb6abf32799f3f36f53aeeba57d2a6f3a8e10b8be7 done
#25 exporting manifest sha256:9266d7abb42049920a69fa0bf76ac6e7617f4108e3d8e4f4218956807b196aa2 done
#25 exporting config sha256:ed6f4688b7faef8529e66c3c2e882102cd53396c645545354d695d4c0cbe27ad done
#25 exporting manifest list sha256:9fdec970f44a9dddf81d8280390fee131e4147e86859c24279ebf28f62676416 0.0s done
#25 ERROR: no active session for w3cmawb3l426ws0bpqjy24wt5: context deadline exceeded
------
 > exporting to image:
------
failed to solve: rpc error: code = Unknown desc = no active session for w3cmawb3l426ws0bpqjy24wt5: context deadline exceeded
errordeveloper

comment created time in 5 days

pull request commentcilium/packer-ci-build

Bump Go version and add net-perf image

build-next-please

tklauser

comment created time in 6 days

pull request commentcilium/packer-ci-build

Bump Go version and add net-perf image

build-me-please

tklauser

comment created time in 6 days

push eventcilium/packer-ci-build

Tobias Klauser

commit sha 4ad285103d2a3f1da2be006f970aa57fe04650f0

provision: pull cilium/net-test image This is used in CI since cilium/cilium#13989 Signed-off-by: Tobias Klauser <tklauser@distanz.ch>

view details

push time in 6 days

pull request commentcilium/packer-ci-build

Bump Go version and add net-perf image

build-next-please

tklauser

comment created time in 6 days

pull request commentcilium/packer-ci-build

Bump Go version and add net-perf image

build-me-please

tklauser

comment created time in 6 days

PR opened cilium/packer-ci-build

Bump Go version and add net-perf image

See commits for details.

+2 -1

0 comment

2 changed files

pr created time in 6 days

create barnchcilium/packer-ci-build

branch : pr/tklauser/bump-go-and-add-net-test

created branch time in 6 days

push eventcilium/proxy

Jarno Rajahalme

commit sha 76f3cbc0cc348be7c51ce023f536b5bf008e76bd

Docker: Make builder multi-arch compatible Signed-off-by: Jarno Rajahalme <jarno@covalent.io>

view details

push time in 6 days

create barnchcilium/proxy

branch : pr/jrajahalme/multiarch-builder

created branch time in 6 days

PR closed cilium/proxy

Reviewers
envoy: Add lightstep tracer patch for arm64

Backport lightstep commit a5705f2f9358888f009aa7e85b64dbcef1c1ead4 for a build fix for arm64 as a patch (Ref https://github.com/lightstep/lightstep-tracer-cpp/pull/249/commits/9718e6b11a7dd8e41ebc47209b209be353a71db5).

Signed-off-by: Jarno Rajahalme jarno@covalent.io

+135 -30

1 comment

8 changed files

jrajahalme

pr closed time in 6 days

pull request commentcilium/proxy

envoy: Add lightstep tracer patch for arm64

pushed branch to master. The builder SHA is now a bit off as master had changed in the meanwhile.

jrajahalme

comment created time in 6 days

push eventcilium/proxy

Jarno Rajahalme

commit sha e14017215d3263a4be1643113e2733ea38521e59

envoy: Add lightstep tracer patch for arm64 Backport lightstep commit a5705f2f9358888f009aa7e85b64dbcef1c1ead4 for a build fix for arm64 as a patch. Signed-off-by: Jarno Rajahalme <jarno@covalent.io>

view details

Jarno Rajahalme

commit sha 24d029a184781be5aef597357a5285152ec097d0

bazel: Remove deprecated --local_resources option from Dockerfile. Signed-off-by: Jarno Rajahalme <jarno@covalent.io>

view details

Jarno Rajahalme

commit sha 8b54499ef1f3324473f70c152b4f3400ec496de1

bazel: Update to 3.7.1 Signed-off-by: Jarno Rajahalme <jarno@covalent.io>

view details

Jarno Rajahalme

commit sha a100ce509e5899363147eeda2d081de55bda3e17

tests: Disable TLS half closed integration tests for ARM64 Envoy connection half closed semantics seems broken for ARM64. Upstream did not ever test half closed semantics for TLS for any architecture. Disable these integration tests for ARM64, but still keep them for x86_64. Signed-off-by: Jarno Rajahalme <jarno@covalent.io>

view details

Jarno Rajahalme

commit sha 3201eb18dbb6a0b80902d76a569a9d8bb04bbcd7

tests: Increase bazel test timeout to 2000 seconds Increase bazel test timeout to 2000 seconds from the default 300 to allow for slow execution of slow machines. Signed-off-by: Jarno Rajahalme <jarno@covalent.io>

view details

Jarno Rajahalme

commit sha 4933021aa806f817cb31a6d76ffad36b752d08ad

builder: Support arm64 in bazel download Pull bazel version for the running arch. Pull the binary instead of an installer. Signed-off-by: Jarno Rajahalme <jarno@covalent.io>

view details

Jarno Rajahalme

commit sha 71e83eaae2cdfb1c2b5d6ea17285e00fa83f24f4

Makefile: More Bazel ARM64 support Version linkstamp path is architecture specific. Unify tools/install_bazel.sh now that Bazel releases are available for ARM64. Signed-off-by: Jarno Rajahalme <jarno@covalent.io>

view details

Jarno Rajahalme

commit sha d1b26cc3564100edcc25e3d3029be4876468e6a1

Docker: Use the new builder Signed-off-by: Jarno Rajahalme <jarno@covalent.io>

view details

push time in 6 days

push eventcilium/proxy

Jarno Rajahalme

commit sha 88d7d82771a84aa7c352417283a1f5072e08762c

Docker: Use the new builder Signed-off-by: Jarno Rajahalme <jarno@covalent.io>

view details

push time in 6 days

issue commentcilium/cilium-sysdump

UnboundLocalError: local variable 'output' referenced before assignment

Fixed by https://github.com/cilium/cilium-sysdump/pull/102

pchaigno

comment created time in 6 days

issue closedcilium/cilium-sysdump

UnboundLocalError: local variable 'output' referenced before assignment

I got the following error in our Cilium Smoke test when trying to take a sysdump:

Run curl -sLO https://github.com/cilium/cilium-sysdump/releases/latest/download/cilium-sysdump.zip
DEBUG Fetching nodes to determine cluster size...
Traceback (most recent call last):
  File "/usr/lib/python2.7/runpy.py", line 174, in _run_module_as_main
    "__main__", fname, loader, pkg_name)
  File "/usr/lib/python2.7/runpy.py", line 72, in _run_code
    exec code in run_globals
  File "cilium-sysdump.zip/__main__.py", line 148, in <module>
  File "cilium-sysdump.zip/utils.py", line 236, in get_nodes
UnboundLocalError: local variable 'output' referenced before assignment
Error: Process completed with exit code 1.

AFAICS, this is caused by the following code: https://github.com/cilium/cilium-sysdump/blob/260b4828915e65d5307d247964efb34bbb4f215c/cilium-sysdump/utils.py#L281-L287 On line 287, we reference output even though that variable doesn't exist if the previous statement resulted in an exception. We seem to have this pattern in several places.

/cc @christarazi

closed time in 6 days

pchaigno

push eventcilium/proxy

Ilya Dmitrichenko

commit sha 9504a4f95ec368f3f11c226dd75b69a4d03284f8

Add 10G swap

view details

push time in 6 days

push eventcilium/cilium-sysdump

Gilberto Bertin

commit sha d96ef61638bbcd0454bc6938ed9f26607537890e

Prepare for v0.24 Signed-off-by: Gilberto Bertin <gilberto@isovalent.com>

view details

push time in 6 days

delete branch cilium/cilium-sysdump

delete branch : prepare-v0.24-release

delete time in 6 days

more