c655a5b636
when the systemd cgroup manager is used, controllers not handled by systemd are created manually afterwards. libcontainer didn't correctly cleanup these cgroups that were leaked on cgroup v1. Closes: https://github.com/kubernetes/kubernetes/issues/92766 Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
48 lines
1003 B
Go
48 lines
1003 B
Go
package internal
|
|
|
|
import (
|
|
"bytes"
|
|
"errors"
|
|
"fmt"
|
|
"strings"
|
|
|
|
"github.com/cilium/ebpf/internal/unix"
|
|
)
|
|
|
|
// ErrorWithLog returns an error that includes logs from the
|
|
// kernel verifier.
|
|
//
|
|
// logErr should be the error returned by the syscall that generated
|
|
// the log. It is used to check for truncation of the output.
|
|
func ErrorWithLog(err error, log []byte, logErr error) error {
|
|
logStr := strings.Trim(CString(log), "\t\r\n ")
|
|
if errors.Is(logErr, unix.ENOSPC) {
|
|
logStr += " (truncated...)"
|
|
}
|
|
|
|
return &VerifierError{err, logStr}
|
|
}
|
|
|
|
// VerifierError includes information from the eBPF verifier.
|
|
type VerifierError struct {
|
|
cause error
|
|
log string
|
|
}
|
|
|
|
func (le *VerifierError) Error() string {
|
|
if le.log == "" {
|
|
return le.cause.Error()
|
|
}
|
|
|
|
return fmt.Sprintf("%s: %s", le.cause, le.log)
|
|
}
|
|
|
|
// CString turns a NUL / zero terminated byte buffer into a string.
|
|
func CString(in []byte) string {
|
|
inLen := bytes.IndexByte(in, 0)
|
|
if inLen == -1 {
|
|
return ""
|
|
}
|
|
return string(in[:inLen])
|
|
}
|