Hi all,

For those who are using docker and also gave a chance to Fedora 31 testing 
template, you may know that there is a "Cgroups Exception" for Fedora 31. 
According to the official page https://docs.docker.com/engine/install/fedora/, 
they suggest to:

"""
For Fedora 31 and higher, you need to enable the backward compatibility for 
Cgroups.

        $ sudo grubby --update-kernel=ALL 
--args="systemd.unified_cgroup_hierarchy=0"

"""

That does not really fit Qubes. Globally, it's a matter of adding a kernel 
options to your VM where you run your dockers. Assming this VM is called 
'work-docker', in dom0:

1) Check your VM kernel opts:
        
        qvm-prefs work-docker kernelopts

For me, it was only 'nopat'

2) Add the docker suggested option and your already present kernelopts:

        qvm-prefs --set work-docker kernelopts 'nopat 
systemd.unified_cgroup_hierarchy=0'

That's all. You can continue to use your dockers in your Fedora 31 AppVM.

Another useful trick thanks to Qubes, is to use 'bind-dirs' 
(https://www.qubes-os.org/doc/bind-dirs/) for '/var/lib/docker'. It allows you 
to not modify default dockers location or symlink or copy paste at early boot 
or whatever.

Best,
Frédéric

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f29726a0-610b-e1c5-0d56-470737a53536%40qubes-os.org.

Reply via email to