tree b3a4cbd0f4890dc5ee9a30eb643b2d3e9aa79fa5
parent 9f21f5396aa18bc9f2f83c867ff883f49bbf02ae
author Lorenz Brun <lorenz@monogon.tech> 1719937955 +0000
committer Lorenz Brun <lorenz@monogon.tech> 1720104622 +0000

m/node: switch to cgroupv2

This switches us from legacy cgroup (v1) to cgroup v2 aka unified
cgroup. Our versions of Kubernetes, containerd and runc/gVisor all
support this by now.

cgroup_bpf needs to be enabled in the kernel for containerd with cgroup
v2. Also enable swap as this now works with cgroup v2, this gets rid of
a warning for every pod being started.

We are not really using cgroups ourselves, but as the root cgroup in v2
is special, move our own process into a subgroup at startup.

Change-Id: I8d63b2ad672568c052c3fe1a2306182f033667fa
Reviewed-on: https://review.monogon.dev/c/monogon/+/3207
Tested-by: Jenkins CI
Reviewed-by: Jan Schär <jan@monogon.tech>