cgroup permission error attempting to run pod as non-root user

Relvant log line from microk8s.kubectl describe pod:

  Warning  Failed          8s (x2 over 21s)       kubelet, ubuntu    Error: failed to create containerd task: OCI runtime create failed: container_linux.go:345: starting container process caused "process_linux.go:424: container init caused \"process_linux.go:390: setting cgroup config for procHooks process caused \\\"failed to write 100000 to cpu.cfs_period_us: open /sys/fs/cgroup/cpu,cpuacct/kubepods/besteffort/podd3732880-bc19-46f6-877a-671add179658/kiosk-manager/cpu.cfs_period_us: permission denied\\\"\"": unknown

microk8s.inspect tarball: inspection-report-20190923_152339.tar.gz

I’m attempting to run microk8s on a Raspberry Pi 4B with 4GB RAM on Ubuntu 18.04 using a custom arm64 kernel. I’ve made a few modifications to the image since installation to get microk8s to run; however attempting to run a pod as a non-root user results in the permission error above.

Is there a workaround for this, or is this a kernel issue? If it’s a kernel issue, what flag should be set to allow non-root users permission to write to cgroupfs?

[benton]

I resolved this issue by recompiling Berryboot with the following extra kernel parameter:

CONFIG_CFS_BANDWIDTH=y

[stale[bot]]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.