@htekdev/actions-debugger 1.0.58 → 1.0.59
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/errors/runner-environment/runner-environment-119.yml +98 -0
- package/errors/runner-environment/runner-environment-120.yml +118 -0
- package/errors/runner-environment/runner-environment-121.yml +113 -0
- package/errors/runner-environment/runner-environment-122.yml +134 -0
- package/package.json +1 -1
|
@@ -0,0 +1,98 @@
|
|
|
1
|
+
id: runner-environment-119
|
|
2
|
+
title: "ubuntu-24.04 GCC 13 treats implicit function declarations as hard errors in C"
|
|
3
|
+
category: runner-environment
|
|
4
|
+
severity: error
|
|
5
|
+
tags:
|
|
6
|
+
- ubuntu-24
|
|
7
|
+
- gcc-13
|
|
8
|
+
- c-compilation
|
|
9
|
+
- implicit-declaration
|
|
10
|
+
- breaking-change
|
|
11
|
+
- ubuntu-latest
|
|
12
|
+
patterns:
|
|
13
|
+
- regex: 'error: implicit declaration of function'
|
|
14
|
+
flags: 'i'
|
|
15
|
+
- regex: '\[-Wimplicit-function-declaration\]'
|
|
16
|
+
flags: 'i'
|
|
17
|
+
- regex: 'implicit declaration of function .* is invalid in C99'
|
|
18
|
+
flags: 'i'
|
|
19
|
+
- regex: 'cc1: some warnings being treated as errors'
|
|
20
|
+
flags: 'i'
|
|
21
|
+
error_messages:
|
|
22
|
+
- "error: implicit declaration of function 'foo' [-Wimplicit-function-declaration]"
|
|
23
|
+
- "implicit declaration of function 'getline' is invalid in C99 [-Wimplicit-function-declaration]"
|
|
24
|
+
- "cc1: some warnings being treated as errors"
|
|
25
|
+
- "error: 'strdup' undeclared (first use in this function)"
|
|
26
|
+
root_cause: |
|
|
27
|
+
ubuntu-24.04 runners ship with GCC 13.2.0, replacing GCC 11.4.0 on ubuntu-22.04.
|
|
28
|
+
GCC 13 promotes several previously-warning-level diagnostics to hard errors in C
|
|
29
|
+
compilation. The most commonly triggered change is -Wimplicit-function-declaration:
|
|
30
|
+
calling a function without a prior declaration or prototype is now an error, not
|
|
31
|
+
a warning. This matches the requirement in the C99, C11, and C23 standards, but
|
|
32
|
+
was only enforced as a warning in earlier GCC versions.
|
|
33
|
+
|
|
34
|
+
Workflows that compiled successfully on ubuntu-22.04 (GCC 11) now fail on
|
|
35
|
+
ubuntu-24.04 (GCC 13) with "error: implicit declaration of function" even when
|
|
36
|
+
the source code has not changed. Common triggers:
|
|
37
|
+
- Missing #include directives for standard library functions (getline, strtok_r,
|
|
38
|
+
strdup, getaddrinfo, etc.)
|
|
39
|
+
- Using POSIX-only functions without _GNU_SOURCE or _POSIX_C_SOURCE feature macros
|
|
40
|
+
- Legacy C code or vendored dependencies not maintained for C99 compliance
|
|
41
|
+
|
|
42
|
+
Additional GCC 13 diagnostics upgraded from warnings to errors:
|
|
43
|
+
- -Wint-conversion: assigning int where pointer is expected (and vice versa)
|
|
44
|
+
- -Wincompatible-pointer-types: passing incompatible pointer type to a function
|
|
45
|
+
|
|
46
|
+
The ubuntu-latest label resolves to ubuntu-24.04 as of 2025. Workflows that
|
|
47
|
+
previously used ubuntu-latest and relied on GCC 11 behavior are now affected
|
|
48
|
+
even without changing their runner label.
|
|
49
|
+
fix: |
|
|
50
|
+
Preferred fix: correct the source code by adding missing #include directives
|
|
51
|
+
or explicit function prototypes. This is the standards-compliant approach and
|
|
52
|
+
permanently resolves the issue.
|
|
53
|
+
|
|
54
|
+
Temporary suppression: add -Wno-implicit-function-declaration (and optionally
|
|
55
|
+
-Wno-int-conversion, -Wno-incompatible-pointer-types) to CFLAGS in the build
|
|
56
|
+
step. This restores GCC 11 behavior for vendored or unmaintained C code but
|
|
57
|
+
should be treated as a short-term workaround only.
|
|
58
|
+
|
|
59
|
+
Short-term runner pin: use runs-on: ubuntu-22.04 while fixing the source.
|
|
60
|
+
ubuntu-22.04 will eventually be retired from GitHub-hosted runners.
|
|
61
|
+
fix_code:
|
|
62
|
+
- language: yaml
|
|
63
|
+
label: "Add suppression flags to CFLAGS for legacy C code"
|
|
64
|
+
code: |
|
|
65
|
+
jobs:
|
|
66
|
+
build:
|
|
67
|
+
runs-on: ubuntu-24.04
|
|
68
|
+
steps:
|
|
69
|
+
- uses: actions/checkout@v4
|
|
70
|
+
|
|
71
|
+
- name: Build with legacy C compatibility flags
|
|
72
|
+
run: |
|
|
73
|
+
make CFLAGS="-O2 -Wno-implicit-function-declaration \
|
|
74
|
+
-Wno-int-conversion \
|
|
75
|
+
-Wno-incompatible-pointer-types"
|
|
76
|
+
- language: yaml
|
|
77
|
+
label: "Pin to ubuntu-22.04 temporarily while fixing source"
|
|
78
|
+
code: |
|
|
79
|
+
jobs:
|
|
80
|
+
build:
|
|
81
|
+
# TODO: fix implicit declarations then migrate back to ubuntu-24.04
|
|
82
|
+
runs-on: ubuntu-22.04
|
|
83
|
+
steps:
|
|
84
|
+
- uses: actions/checkout@v4
|
|
85
|
+
- run: make
|
|
86
|
+
prevention:
|
|
87
|
+
- "Run builds on ubuntu-24.04 in a matrix alongside ubuntu-22.04 to detect GCC 13 errors before fully migrating"
|
|
88
|
+
- "Add all required #include headers — GCC 13 enforces what the C standard has required since C99"
|
|
89
|
+
- "Use -Wno-error=implicit-function-declaration as a transitional flag rather than disabling the warning entirely"
|
|
90
|
+
- "Audit vendored C libraries for GCC 13 compatibility before upgrading runner images"
|
|
91
|
+
- "Enable -Wall in CI early to surface implicit declaration warnings before they become hard errors"
|
|
92
|
+
docs:
|
|
93
|
+
- url: "https://gcc.gnu.org/gcc-13/porting_to.html"
|
|
94
|
+
label: "GCC 13 porting guide — new errors and behavioral changes"
|
|
95
|
+
- url: "https://github.com/actions/runner-images/blob/main/images/ubuntu/Ubuntu2404-Readme.md"
|
|
96
|
+
label: "ubuntu-24.04 runner image — installed software (GCC 13.2.0)"
|
|
97
|
+
- url: "https://gcc.gnu.org/onlinedocs/gcc/Warning-Options.html"
|
|
98
|
+
label: "GCC warning options — -Wimplicit-function-declaration"
|
|
@@ -0,0 +1,118 @@
|
|
|
1
|
+
id: runner-environment-120
|
|
2
|
+
title: "snap install fails on GitHub-hosted runners — snapd daemon not available"
|
|
3
|
+
category: runner-environment
|
|
4
|
+
severity: error
|
|
5
|
+
tags:
|
|
6
|
+
- snap
|
|
7
|
+
- snapd
|
|
8
|
+
- ubuntu
|
|
9
|
+
- package-manager
|
|
10
|
+
- runner-limitation
|
|
11
|
+
- apt-alternative
|
|
12
|
+
patterns:
|
|
13
|
+
- regex: 'snap.*command not found|command not found.*snap'
|
|
14
|
+
flags: 'i'
|
|
15
|
+
- regex: 'cannot communicate with server.*snapd\.sock'
|
|
16
|
+
flags: 'i'
|
|
17
|
+
- regex: 'dial unix /run/snapd\.sock.*no such file or directory'
|
|
18
|
+
flags: 'i'
|
|
19
|
+
- regex: 'error: cannot connect to the snap daemon'
|
|
20
|
+
flags: 'i'
|
|
21
|
+
error_messages:
|
|
22
|
+
- "sudo: snap: command not found"
|
|
23
|
+
- "error: cannot communicate with server: Post \"http://localhost/v2/snaps/...\": dial unix /run/snapd.sock: connect: no such file or directory"
|
|
24
|
+
- "error: cannot connect to the snap daemon"
|
|
25
|
+
- "/bin/sh: 1: snap: not found"
|
|
26
|
+
root_cause: |
|
|
27
|
+
GitHub-hosted runner images (ubuntu-22.04, ubuntu-24.04, and ubuntu-latest) do
|
|
28
|
+
not include the snapd daemon and do not support the snap package manager.
|
|
29
|
+
|
|
30
|
+
Snapd requires a persistent background daemon (snapd.service) and specific kernel
|
|
31
|
+
configuration for confinement (AppArmor profiles, seccomp filters) that is not
|
|
32
|
+
available or not configured in the ephemeral VM environment GitHub uses for
|
|
33
|
+
hosted runners. Even if the snap binary were present, the daemon is not running,
|
|
34
|
+
causing all snap commands to fail at the IPC socket connection step.
|
|
35
|
+
|
|
36
|
+
This limitation surprises developers who routinely use snap packages on local
|
|
37
|
+
Ubuntu workstations and attempt to replicate those install commands in CI.
|
|
38
|
+
Common affected workflows:
|
|
39
|
+
- Installing tools distributed primarily or exclusively via snap (certain IoT,
|
|
40
|
+
embedded, or cross-compile toolchains; some cloud CLI tools)
|
|
41
|
+
- Reproducing local Ubuntu developer setup scripts in CI verbatim
|
|
42
|
+
- CI pipelines for snap packages themselves (snap build requires LXD or snapcraft)
|
|
43
|
+
|
|
44
|
+
The error "cannot communicate with server: dial unix /run/snapd.sock: no such
|
|
45
|
+
file or directory" is deterministic — it fails on every run, not intermittently.
|
|
46
|
+
fix: |
|
|
47
|
+
Replace snap install commands with an equivalent alternative:
|
|
48
|
+
|
|
49
|
+
1. APT: Most tools available as snaps also have apt packages. Check
|
|
50
|
+
packages.ubuntu.com for the apt equivalent (the version may be older).
|
|
51
|
+
|
|
52
|
+
2. Direct binary / official releases: Many developer tools (kubectl, helm,
|
|
53
|
+
terraform, go, etc.) publish standalone binaries on GitHub Releases or
|
|
54
|
+
their official download pages.
|
|
55
|
+
|
|
56
|
+
3. Official setup-* actions: GitHub and tool vendors maintain actions/setup-go,
|
|
57
|
+
azure/setup-kubectl, hashicorp/setup-terraform, etc. that install tools
|
|
58
|
+
cleanly without snap.
|
|
59
|
+
|
|
60
|
+
4. Docker: Run the snap-packaged tool inside a Docker container if no other
|
|
61
|
+
distribution method exists (the snap itself cannot run inside Docker, but
|
|
62
|
+
the underlying tool usually has a Docker image).
|
|
63
|
+
|
|
64
|
+
For snap package development and testing (e.g., snapcraft builds), use a
|
|
65
|
+
self-hosted runner with LXD configured, or the snapcore/action-build action
|
|
66
|
+
which handles the LXD setup automatically.
|
|
67
|
+
fix_code:
|
|
68
|
+
- language: yaml
|
|
69
|
+
label: "Replace snap install with apt or official action"
|
|
70
|
+
code: |
|
|
71
|
+
jobs:
|
|
72
|
+
deploy:
|
|
73
|
+
runs-on: ubuntu-latest
|
|
74
|
+
steps:
|
|
75
|
+
- uses: actions/checkout@v4
|
|
76
|
+
|
|
77
|
+
# Instead of: sudo snap install kubectl --classic
|
|
78
|
+
- name: Set up kubectl (official action)
|
|
79
|
+
uses: azure/setup-kubectl@v4
|
|
80
|
+
with:
|
|
81
|
+
version: 'v1.30.0'
|
|
82
|
+
|
|
83
|
+
# Instead of: sudo snap install terraform
|
|
84
|
+
- name: Set up Terraform (official action)
|
|
85
|
+
uses: hashicorp/setup-terraform@v3
|
|
86
|
+
with:
|
|
87
|
+
terraform_version: "1.9.0"
|
|
88
|
+
|
|
89
|
+
- run: kubectl version --client
|
|
90
|
+
- language: yaml
|
|
91
|
+
label: "Build snap packages with snapcore/action-build (handles LXD)"
|
|
92
|
+
code: |
|
|
93
|
+
jobs:
|
|
94
|
+
snapcraft:
|
|
95
|
+
runs-on: ubuntu-latest
|
|
96
|
+
steps:
|
|
97
|
+
- uses: actions/checkout@v4
|
|
98
|
+
|
|
99
|
+
- name: Build snap
|
|
100
|
+
uses: snapcore/action-build@v1
|
|
101
|
+
|
|
102
|
+
- name: Upload snap artifact
|
|
103
|
+
uses: actions/upload-artifact@v4
|
|
104
|
+
with:
|
|
105
|
+
name: my-snap
|
|
106
|
+
path: '*.snap'
|
|
107
|
+
prevention:
|
|
108
|
+
- "Check the GitHub Actions Marketplace for an official setup-* action before reaching for snap"
|
|
109
|
+
- "Use direct binary downloads from tool vendors' GitHub Releases when no setup-* action exists"
|
|
110
|
+
- "Avoid copying local Ubuntu setup scripts verbatim into CI — apt/brew/direct-download are the CI-safe equivalents"
|
|
111
|
+
- "Self-hosted runners on Ubuntu can have snapd installed if snap packages are genuinely required"
|
|
112
|
+
docs:
|
|
113
|
+
- url: "https://docs.github.com/en/actions/using-github-hosted-runners/using-github-hosted-runners/about-github-hosted-runners#preinstalled-software"
|
|
114
|
+
label: "GitHub Docs — Pre-installed software on GitHub-hosted runners"
|
|
115
|
+
- url: "https://github.com/snapcore/action-build"
|
|
116
|
+
label: "snapcore/action-build — official snap build action (uses LXD)"
|
|
117
|
+
- url: "https://snapcraft.io/docs/build-on-github"
|
|
118
|
+
label: "Snapcraft Docs — Building snaps on GitHub Actions"
|
|
@@ -0,0 +1,113 @@
|
|
|
1
|
+
id: runner-environment-121
|
|
2
|
+
title: "macOS-15 and macOS-26 Apple system Ruby (/usr/bin/ruby 2.6) removed — bare ruby and gem commands fail"
|
|
3
|
+
category: runner-environment
|
|
4
|
+
severity: error
|
|
5
|
+
tags:
|
|
6
|
+
- macos-15
|
|
7
|
+
- macos-26
|
|
8
|
+
- ruby
|
|
9
|
+
- system-ruby
|
|
10
|
+
- gem
|
|
11
|
+
- cocoapods
|
|
12
|
+
- breaking-change
|
|
13
|
+
patterns:
|
|
14
|
+
- regex: '/usr/bin/ruby.*[Nn]o such file|[Nn]o such file.*/usr/bin/ruby'
|
|
15
|
+
flags: 'i'
|
|
16
|
+
- regex: 'ruby: No such file or directory'
|
|
17
|
+
flags: 'i'
|
|
18
|
+
- regex: 'rbenv: version .* is not installed'
|
|
19
|
+
flags: 'i'
|
|
20
|
+
- regex: 'Your Ruby version is .*, but your Gemfile specified'
|
|
21
|
+
flags: 'i'
|
|
22
|
+
error_messages:
|
|
23
|
+
- "/usr/bin/ruby: No such file or directory"
|
|
24
|
+
- "bash: /usr/bin/ruby: No such file or directory"
|
|
25
|
+
- "rbenv: version '2.6.10' is not installed"
|
|
26
|
+
- "Your Ruby version is 3.3.4, but your Gemfile specified ~> 2.6"
|
|
27
|
+
- "[!] CocoaPods requires your terminal to be using UTF-8 encoding. Consider adding the following to ~/.profile: export LANG=en_US.UTF-8"
|
|
28
|
+
root_cause: |
|
|
29
|
+
Apple removed the system Ruby installation (/usr/bin/ruby, version 2.6.10) from
|
|
30
|
+
macOS 15 Sequoia. This Ruby shipped as part of macOS since macOS 10.5 and was
|
|
31
|
+
installed at /usr/bin/ruby via Xcode Command Line Tools. It was used as the
|
|
32
|
+
runtime for Bundler, CocoaPods, Fastlane, and other Ruby-based iOS/macOS build
|
|
33
|
+
tools that shipped their own invocation scripts pointing to /usr/bin/ruby.
|
|
34
|
+
|
|
35
|
+
GitHub-hosted macOS-15 and macOS-26 runner images reflect this Apple change.
|
|
36
|
+
macOS-14 runners still include /usr/bin/ruby 2.6.10. GitHub pre-installs Ruby 3.3
|
|
37
|
+
via rbenv on macOS-15 and macOS-26, but:
|
|
38
|
+
|
|
39
|
+
1. Scripts or Makefiles that explicitly reference /usr/bin/ruby fail immediately
|
|
40
|
+
with "No such file or directory"
|
|
41
|
+
2. Gemfiles pinned to ruby "~> 2.6" fail — pre-installed Ruby is 3.3.x
|
|
42
|
+
3. CocoaPods legacy install scripts (including some older Fastfiles) called
|
|
43
|
+
/usr/bin/ruby directly; those fail on macOS-15 runners
|
|
44
|
+
4. rbenv configurations referencing the Apple system Ruby slot (2.6.10) fail
|
|
45
|
+
with "rbenv: version '2.6.10' is not installed"
|
|
46
|
+
5. brew install ruby may install a different version than expected, and its
|
|
47
|
+
PATH precedence may conflict with rbenv-managed Ruby
|
|
48
|
+
|
|
49
|
+
The macOS-latest label resolves to macOS-15 and eventually macOS-26 as Apple
|
|
50
|
+
releases new macOS versions. Workflows using macOS-latest are affected even
|
|
51
|
+
without changing their runner specification.
|
|
52
|
+
fix: |
|
|
53
|
+
Use the ruby/setup-ruby action to install and pin a specific Ruby version.
|
|
54
|
+
This is the recommended approach for all macOS GitHub Actions workflows and
|
|
55
|
+
works correctly on macOS-14, macOS-15, and macOS-26.
|
|
56
|
+
|
|
57
|
+
For CocoaPods: add a Gemfile with the cocoapods gem and use Bundler
|
|
58
|
+
(bundle exec pod install) instead of calling pod directly. This also gives
|
|
59
|
+
reproducible CocoaPods version pinning across all environments.
|
|
60
|
+
|
|
61
|
+
Search the repository for any hardcoded /usr/bin/ruby references before
|
|
62
|
+
migrating to macOS-15 runners.
|
|
63
|
+
fix_code:
|
|
64
|
+
- language: yaml
|
|
65
|
+
label: "Use ruby/setup-ruby to install and pin Ruby (recommended)"
|
|
66
|
+
code: |
|
|
67
|
+
jobs:
|
|
68
|
+
build:
|
|
69
|
+
runs-on: macos-15
|
|
70
|
+
steps:
|
|
71
|
+
- uses: actions/checkout@v4
|
|
72
|
+
|
|
73
|
+
- name: Set up Ruby
|
|
74
|
+
uses: ruby/setup-ruby@v1
|
|
75
|
+
with:
|
|
76
|
+
ruby-version: '3.3'
|
|
77
|
+
bundler-cache: true # runs bundle install automatically
|
|
78
|
+
|
|
79
|
+
- name: Run tests
|
|
80
|
+
run: bundle exec rspec
|
|
81
|
+
- language: yaml
|
|
82
|
+
label: "CocoaPods via Bundler — replace direct pod invocation"
|
|
83
|
+
code: |
|
|
84
|
+
jobs:
|
|
85
|
+
ios-build:
|
|
86
|
+
runs-on: macos-15
|
|
87
|
+
steps:
|
|
88
|
+
- uses: actions/checkout@v4
|
|
89
|
+
|
|
90
|
+
- uses: ruby/setup-ruby@v1
|
|
91
|
+
with:
|
|
92
|
+
ruby-version: '3.3'
|
|
93
|
+
bundler-cache: true
|
|
94
|
+
|
|
95
|
+
# Gemfile must include: gem 'cocoapods', '~> 1.15'
|
|
96
|
+
- name: Install pods via Bundler
|
|
97
|
+
run: bundle exec pod install
|
|
98
|
+
working-directory: ios/
|
|
99
|
+
prevention:
|
|
100
|
+
- "Never hardcode /usr/bin/ruby — always invoke ruby via PATH after ruby/setup-ruby"
|
|
101
|
+
- "Add ruby/setup-ruby with an explicit ruby-version to every macOS workflow that uses Ruby, Bundler, or CocoaPods"
|
|
102
|
+
- "Pin CocoaPods in a Gemfile and use bundle exec pod install — not the global pod command"
|
|
103
|
+
- "Search CI scripts and Fastfiles for /usr/bin/ruby before migrating to macOS-15 or macOS-26 runners"
|
|
104
|
+
- "Use the macos-15 label explicitly in CI for testing before it becomes the macos-latest default"
|
|
105
|
+
docs:
|
|
106
|
+
- url: "https://github.com/ruby/setup-ruby"
|
|
107
|
+
label: "ruby/setup-ruby action — official Ruby installer for GitHub Actions"
|
|
108
|
+
- url: "https://github.com/actions/runner-images/blob/main/images/macos/macos-15-Readme.md"
|
|
109
|
+
label: "GitHub Actions macOS-15 runner image — installed software"
|
|
110
|
+
- url: "https://guides.cocoapods.org/using/a-gemfile.html"
|
|
111
|
+
label: "CocoaPods — using a Gemfile (Bundler-based installation)"
|
|
112
|
+
- url: "https://www.ruby-lang.org/en/documentation/installation/"
|
|
113
|
+
label: "Ruby installation options — setup-ruby vs system Ruby"
|
|
@@ -0,0 +1,134 @@
|
|
|
1
|
+
id: runner-environment-122
|
|
2
|
+
title: "ubuntu-24.04 cgroup v2 only — Docker containers and JVMs built for cgroup v1 fail"
|
|
3
|
+
category: runner-environment
|
|
4
|
+
severity: error
|
|
5
|
+
tags:
|
|
6
|
+
- ubuntu-24
|
|
7
|
+
- cgroup-v2
|
|
8
|
+
- docker
|
|
9
|
+
- systemd-in-container
|
|
10
|
+
- java
|
|
11
|
+
- kubernetes
|
|
12
|
+
- breaking-change
|
|
13
|
+
patterns:
|
|
14
|
+
- regex: 'cgroup.*v1.*not supported|v1.*cgroup.*not available'
|
|
15
|
+
flags: 'i'
|
|
16
|
+
- regex: 'failed to create.*cgroup|cgroup.*permission denied'
|
|
17
|
+
flags: 'i'
|
|
18
|
+
- regex: 'write.*cgroup.*read-only file system|cgroup.*read.only'
|
|
19
|
+
flags: 'i'
|
|
20
|
+
- regex: 'OCI runtime create failed.*cgroup'
|
|
21
|
+
flags: 'i'
|
|
22
|
+
error_messages:
|
|
23
|
+
- "OCI runtime create failed: cgroup v1 not supported on this system"
|
|
24
|
+
- "Error response from daemon: failed to create shim task: cgroup v1 is not available"
|
|
25
|
+
- "failed to create cgroup: write /sys/fs/cgroup/memory/docker/...: read-only file system"
|
|
26
|
+
- "cannot enter cgroupv2 namespace: invalid argument"
|
|
27
|
+
root_cause: |
|
|
28
|
+
ubuntu-24.04 GitHub-hosted runners use Linux kernel 6.5+ with cgroup v2 (the
|
|
29
|
+
unified hierarchy) exclusively. cgroup v1 subsystems are not mounted and not
|
|
30
|
+
available. ubuntu-22.04 runners supported both cgroup v1 and v2 simultaneously
|
|
31
|
+
(the hybrid mode enabled in the 5.x kernel era), so containers built for v1
|
|
32
|
+
worked without modification.
|
|
33
|
+
|
|
34
|
+
This affects four main workflow categories:
|
|
35
|
+
|
|
36
|
+
1. systemd-in-container testing: Docker images using systemd as PID 1 (Ansible
|
|
37
|
+
role tests, Molecule, infrastructure integration tests) require cgroup v2
|
|
38
|
+
support in the container's systemd version. Images based on older base images
|
|
39
|
+
(Ubuntu 18.04, CentOS 7/8, RHEL 7) with systemd < 248 fail to start because
|
|
40
|
+
their systemd was compiled for the cgroup v1 hierarchy.
|
|
41
|
+
|
|
42
|
+
2. Old JVM containers: JVM releases before JDK 11u16, JDK 17u4, and JDK 19+
|
|
43
|
+
do not correctly detect container memory and CPU limits under cgroup v2.
|
|
44
|
+
These JVMs either crash with OutOfMemoryError (using the host memory limit
|
|
45
|
+
instead of the container limit) or report the wrong available processor count.
|
|
46
|
+
|
|
47
|
+
3. Kubernetes-in-Docker (kind, k3d): older versions of kind (pre-v0.17) and k3d
|
|
48
|
+
fail to initialize cluster nodes due to cgroup v2 incompatibility in the
|
|
49
|
+
bundled containerd or runc version.
|
|
50
|
+
|
|
51
|
+
4. eBPF and networking tools: eBPF programs that attach to cgroup v1 BPF program
|
|
52
|
+
type (BPF_PROG_TYPE_CGROUP_SOCK, etc.) using the v1 subsystem hierarchy fail
|
|
53
|
+
because the v1 cgroup paths (/sys/fs/cgroup/memory/, /sys/fs/cgroup/cpu/)
|
|
54
|
+
are not present.
|
|
55
|
+
|
|
56
|
+
The ubuntu-latest label resolved to ubuntu-24.04 in 2025. Workflows that relied
|
|
57
|
+
on ubuntu-latest and had cgroup v1 dependent containers are now affected.
|
|
58
|
+
fix: |
|
|
59
|
+
1. Update base images to cgroup v2 compatible versions:
|
|
60
|
+
- systemd: use Ubuntu 22.04+ or Debian Bookworm base images (systemd 249+)
|
|
61
|
+
- Java: update to JDK 11.0.16+, JDK 17.0.4+, or JDK 19+ (full cgroup v2 support)
|
|
62
|
+
- kind: use v0.17.0+ which ships containerd 1.7+ with cgroup v2 support
|
|
63
|
+
- k3d: use v5.6.0+
|
|
64
|
+
|
|
65
|
+
2. For systemd containers: mount /sys/fs/cgroup with rw access and use
|
|
66
|
+
--cgroupns=host if the container requires the host cgroup namespace
|
|
67
|
+
|
|
68
|
+
3. Pin to ubuntu-22.04 as a short-term workaround while updating container images.
|
|
69
|
+
ubuntu-22.04 will eventually be retired from GitHub-hosted runners.
|
|
70
|
+
fix_code:
|
|
71
|
+
- language: yaml
|
|
72
|
+
label: "Run systemd containers with cgroup v2 compatible mounts"
|
|
73
|
+
code: |
|
|
74
|
+
jobs:
|
|
75
|
+
ansible-test:
|
|
76
|
+
runs-on: ubuntu-24.04
|
|
77
|
+
steps:
|
|
78
|
+
- uses: actions/checkout@v4
|
|
79
|
+
|
|
80
|
+
- name: Start systemd container (cgroup v2 compatible)
|
|
81
|
+
run: |
|
|
82
|
+
docker run -d \
|
|
83
|
+
--name test-node \
|
|
84
|
+
--cgroupns=host \
|
|
85
|
+
--tmpfs /tmp \
|
|
86
|
+
--tmpfs /run \
|
|
87
|
+
-v /sys/fs/cgroup:/sys/fs/cgroup:rw \
|
|
88
|
+
ubuntu:22.04
|
|
89
|
+
|
|
90
|
+
- name: Run Ansible role test
|
|
91
|
+
run: docker exec test-node ansible-playbook site.yml
|
|
92
|
+
- language: yaml
|
|
93
|
+
label: "Use kind v0.17+ for Kubernetes-in-Docker on ubuntu-24.04"
|
|
94
|
+
code: |
|
|
95
|
+
jobs:
|
|
96
|
+
k8s-test:
|
|
97
|
+
runs-on: ubuntu-24.04
|
|
98
|
+
steps:
|
|
99
|
+
- uses: actions/checkout@v4
|
|
100
|
+
|
|
101
|
+
- name: Create kind cluster (v0.17+ required for cgroup v2)
|
|
102
|
+
uses: helm/kind-action@v1
|
|
103
|
+
with:
|
|
104
|
+
version: v0.23.0
|
|
105
|
+
cluster_name: test-cluster
|
|
106
|
+
|
|
107
|
+
- run: kubectl cluster-info
|
|
108
|
+
- language: yaml
|
|
109
|
+
label: "Pin to ubuntu-22.04 temporarily for cgroup v1 dependent workflows"
|
|
110
|
+
code: |
|
|
111
|
+
jobs:
|
|
112
|
+
integration-test:
|
|
113
|
+
# TODO: update container images to cgroup v2 compatible versions
|
|
114
|
+
runs-on: ubuntu-22.04
|
|
115
|
+
steps:
|
|
116
|
+
- uses: actions/checkout@v4
|
|
117
|
+
- run: docker compose up -d
|
|
118
|
+
prevention:
|
|
119
|
+
- "Test Docker container images on ubuntu-24.04 before migrating — check cgroup v2 compatibility with `docker run --rm ubuntu:24.04 ls /sys/fs/cgroup/`"
|
|
120
|
+
- "Use JDK 17.0.4+ or JDK 21+ in all containerized Java workloads for correct cgroup v2 memory/CPU detection"
|
|
121
|
+
- "Audit Dockerfiles for hardcoded cgroup v1 subsystem paths (/sys/fs/cgroup/memory/, /sys/fs/cgroup/cpu/)"
|
|
122
|
+
- "Use kind v0.17+ and k3d v5.6+ for Kubernetes-in-Docker CI on ubuntu-24.04"
|
|
123
|
+
- "Base images on Ubuntu 22.04+ or Debian Bookworm for any container running systemd as PID 1"
|
|
124
|
+
docs:
|
|
125
|
+
- url: "https://www.kernel.org/doc/html/latest/admin-guide/cgroup-v2.html"
|
|
126
|
+
label: "Linux kernel — cgroup v2 unified hierarchy documentation"
|
|
127
|
+
- url: "https://github.com/actions/runner-images/blob/main/images/ubuntu/Ubuntu2404-Readme.md"
|
|
128
|
+
label: "ubuntu-24.04 runner image — kernel version and installed software"
|
|
129
|
+
- url: "https://kind.sigs.k8s.io/docs/user/known-issues/#pod-errors-due-to-too-many-open-files"
|
|
130
|
+
label: "kind known issues — cgroup v2 and containerd requirements"
|
|
131
|
+
- url: "https://docs.docker.com/engine/security/userns-remap/"
|
|
132
|
+
label: "Docker — cgroup v2 compatibility and container isolation"
|
|
133
|
+
- url: "https://bugs.openjdk.org/browse/JDK-8230305"
|
|
134
|
+
label: "OpenJDK — JDK-8230305: Container Metrics: Support cgroup v2 (fixed in JDK 15, backported 11u16/17u4)"
|
package/package.json
CHANGED