Skip to content

Add podman support with use_podman flag and cgroupv2 tuning#268

Open
uruemu wants to merge 2 commits intoCircleCI-Public:mainfrom
uruemu:uruemu/EXEC-6342
Open

Add podman support with use_podman flag and cgroupv2 tuning#268
uruemu wants to merge 2 commits intoCircleCI-Public:mainfrom
uruemu:uruemu/EXEC-6342

Conversation

@uruemu
Copy link

@uruemu uruemu commented Mar 10, 2026

  • Add use_podman variable (default false) to nomad-aws and nomad-gcp
  • Select podman-compatible AMI (CircleCIServerPodmanNomad*) when enabled
  • Conditionally install podman with cgroupv2 systemd configuration instead of Docker with cgroupv1 in both AWS and GCP startup scripts
  • Skip Docker-specific setup when podman is selected

⚙️ Issue

Fix

Tests

  • Passed reality check

uruemu added 2 commits March 5, 2026 15:50
Expand the retry-with-SSH ingress ports from 64535-65535 to 32768-65535 to cover both Docker (64535-65535) and podman (32768-60999) ephemeral port ranges during the blue-green migration period.
…figuring

- Add use_podman variable (default false) to nomad-aws and nomad-gcp
- Select podman-compatible AMI (CircleCIServerPodmanNomad*) when enabled
- Conditionally install podman with cgroupv2 systemd configuration instead of Docker with cgroupv1 in both AWS and GCP startup scripts
- Skip Docker-specific setup when podman is selected
mkdir -p /etc/systemd/system/circleci.slice.d
cat <<EOT > /etc/systemd/system/circleci.slice.d/cgroup.conf
[Slice]
CPUQuota=3400%
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This number might not make sense in server. It is specific to the nodes we use in cloud and how much CPU we reserve for system vs tasks

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That makes sense. It sounds like we could remove this entirely? Or do you think there's value in making it configurable?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Maybe check with onprem i think

@uruemu uruemu changed the title [DO NOT MERGE]: Add podman support with use_podman flag and cgroupv2 tuning Add podman support with use_podman flag and cgroupv2 tuning Mar 20, 2026
@uruemu uruemu marked this pull request as ready for review March 20, 2026 14:49
@uruemu uruemu requested a review from a team as a code owner March 20, 2026 14:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants