198 Commits
Author SHA1 Message Date
Jing ChenandgVisor bot 02f5a55b40 Test gVisor with containerd 1.7.25.
PiperOrigin-RevId: 723309152
2025-02-04 18:49:28 -08:00
Andrei Vagin f010ae01ac Fix a few typos 2025-01-29 21:16:51 -08:00
Ayush RanjanandgVisor bot 658e5a795d Disable ffmpeg_test on COS.
This test mysteriously fails on Buildkite. Attempts to repro this failure in
similar environments failed. This test is still running on Ubuntu and works
fine on COS when manually tested.

PiperOrigin-RevId: 720726080
2025-01-28 15:24:56 -08:00
Etienne PerotandgVisor bot 3f0c7ccf85 PGO: Add make target to refresh profiles for PGO.
This runs all benchmarks tagged as PGO-enabled, of which there is
currently just one for simplicity (the ffmpeg benchmark). All other
benchmarks are initially tagged out of PGO. I will send a different
change to enroll other benchmarks in PGO.

The make target runs each such benchmark and gathers profiles for each
benchmark. Multiple profile files for multiple runs of the same benchmark
are merged into one, then compared against the existing checked-in profile
used for PGO builds (which right now doesn't exist). If such a profile
doesn't exist or differs widely from the freshly-collected profile, then
this new profile is copied into the repository.

Such profiles are not used at all in builds yet, this is just the glue
that keeps them fresh in the repo.

PiperOrigin-RevId: 714311978
2025-01-10 19:44:15 -08:00
2022tgoel fdcf86fa40 Fix failure on gpu-all-tests. ffmpeg_test was failing because the video capability was missing in the runtime 2025-01-10 18:17:02 +00:00
Etienne PerotandgVisor bot 501618dbe2 Modify make rules to allow using a fully-local build cache.
This includes the ability to force using local images only (do not check
for updated manifests), and to explicitly mount and specify external caches
for Go repositories via `rules_go`'s `GO_REPOSITORY_USE_HOST_MODCACHE`.

PiperOrigin-RevId: 713473497
2025-01-09 12:23:53 -08:00
Etienne PerotandgVisor bot 5e6589e0b7 Update CUDA test compatibility to keep up with added gVisor support.
These CUDA tests were initially broken in gVisor but now appear to pass.

The test now also verifies that all capabilities are enabled when running.

PiperOrigin-RevId: 713094806
2025-01-07 17:28:00 -08:00
Nayana BidariandgVisor bot df9ba5fb67 Restore listening connections when netstack s/r is enabled.
This CL restores the listening connections when netstack s/r is enabled.
The changes include:
- New method as a workaround to replace the new routes and nics to the loaded
stack after restore.
- New Restore() for transport layer protocols to restore the protocol level
background workers.
- Adds afterLoad() method for fdbased processors.
- Adds a test to verify listening connection is restored after checkpointing
with netstack s/r enabled.
- Few other changes to save restore fields to enable netstack s/r.

PiperOrigin-RevId: 698453124
2024-11-20 11:13:57 -08:00
Etienne PerotandgVisor bot 380b660c3a Add RUNTIME_BIN as dependency of cuda-tests target.
The runtime binary is needed in order to use it as a Docker runtime.

PiperOrigin-RevId: 691527431
2024-10-30 13:13:33 -07:00
Etienne PerotandgVisor bot 0c4a709bc1 Run CUDA tests as part of GPU tests.
Attempt #2.

This runs in continuous mode only.

PiperOrigin-RevId: 691516066
2024-10-30 12:39:30 -07:00
Etienne PerotandgVisor bot 285612acb7 Run vLLM test as part of GPU test suite.
PiperOrigin-RevId: 688741446
2024-10-22 17:11:16 -07:00
Etienne PerotandgVisor bot e13cf36ad7 Update all GPU tests to use the ioctl sniffer.
Fixes issue #10885.

PiperOrigin-RevId: 688728104
2024-10-22 16:21:47 -07:00
Etienne PerotandgVisor bot 62eaadcf3a Build and package the runsc metric-server binary in the gVisor release.
PiperOrigin-RevId: 683844740
2024-10-08 19:16:16 -07:00
Etienne PerotandgVisor bot 1ea84d6db0 Add test that runs runsc do inside a non-gVisor container.
This is used in contexts such as Dangerzone:
https://gvisor.dev/blog/2024/09/23/safe-ride-into-the-dangerzone/

Updates issue #10944.

PiperOrigin-RevId: 682454284
2024-10-04 14:40:07 -07:00
Etienne PerotandgVisor bot b89f53b2ce Add ffmpeg GPU test with h264_nvenc video codec (which uses NVENC).
This test does NOT work yet in gVisor.

Updates #9452

PiperOrigin-RevId: 682127429
2024-10-03 19:33:50 -07:00
Andrei Vagin ec18cb188f buildkite: run intergration tests with the network plugin 2024-09-25 21:35:17 -07:00
Andrei Vagin 975bf85ffd buildkite: start testing the network plugin 2024-09-25 19:23:06 -07:00
gVisor bot 079c1a937b Merge pull request #9551 from amysaq2023:support-external-stack
PiperOrigin-RevId: 677933413
2024-09-23 14:12:32 -07:00
Etienne PerotandgVisor bot 1e97c039bf Automated rollback of changelist 673541771
PiperOrigin-RevId: 673651019
2024-09-11 20:42:21 -07:00
Etienne PerotandgVisor bot 64de876102 Do not embed the run_sniffer binary in the dockerutil library.
This is causing nogo test failures. Use a `data` dependency instead.

Updates #10885

PiperOrigin-RevId: 673541771
2024-09-11 14:42:34 -07:00
Etienne PerotandgVisor bot a689c11a76 Integrate GPU ioctl sniffer in GPU tests.
This wraps all GPU tests' command line with the nvproxy ioctl sniffer.

This has multiple functions:

- Verifying that the application does not call ioctls unsupported by
  nvproxy. This is controlled by a `AllowIncompatibleIoctl` option, which
  is initially set to `true` in all tests to mirror current behavior, but
  should be flipped as we verify that they do not call unsupported ioctls.
- Verifying that the sniffer itself works transparently for a wide range
  of applications.
- Later down the line, enforcing that the application only calls ioctls
  that are part of GPU capabilities that it has a need for. This is
  controlled by a capability string which is currently only used to set
  the `NVIDIA_DRIVER_CAPABILITIES` environment variable.

Updates issue #10856

PiperOrigin-RevId: 672714520
2024-09-09 16:34:19 -07:00
Etienne PerotandgVisor bot 043ce9c5d2 Fix sniffer_test by embedding the run_sniffer binary in it.
This works around file path resolution issues.

PiperOrigin-RevId: 663985469
2024-08-16 20:56:29 -07:00
Anthony CuiandgVisor bot 6199fc8395 Fix sniffer_test to work.
Previously, run_sniffer was not correctly reporting when unsupported ioctls
were found with the compatibility flag set. At the same time, the sniffer test
was not correctly testing a supported CUDA program, since it was using
run_sample which is currently broken with the sniffer.

This also adds the sniffer test to the list of gpu tests.

PiperOrigin-RevId: 663911778
2024-08-16 16:34:11 -07:00
Etienne PerotandgVisor bot 9a4feec24f Add a Syzkaller smoke test to the gVisor release process.
This test verifies that gVisor can run as a fuzzable kernel in Syzkaller.

Depends on https://github.com/google/syzkaller/pull/5037

PiperOrigin-RevId: 663522395
2024-08-15 18:00:14 -07:00
Jing ChenandgVisor bot 6a506950b3 Start dockerd with the default bridge network in gVisor.
PiperOrigin-RevId: 653309522
2024-07-17 11:48:16 -07:00