Skip to content

PXB-3798: Register qemu-x86_64 binfmt on Graviton fleet workers#256

Open
nogueiraanderson wants to merge 1 commit into
mainfrom
pxb-3798-qemu-arm-fleet-userdata
Open

PXB-3798: Register qemu-x86_64 binfmt on Graviton fleet workers#256
nogueiraanderson wants to merge 1 commit into
mainfrom
pxb-3798-qemu-arm-fleet-userdata

Conversation

@nogueiraanderson

Copy link
Copy Markdown
Collaborator

Feature

  • aarch64 Graviton fleet workers register a qemu-x86_64 binfmt handler so x86_64 helper containers (Minio, Vault, KMIP) run under emulation on the docker-32gb-aarch64 label.

Why

  • The PXB ARM64 backup tests need those x86_64-only helper images; without emulation they fail with exec format error.
  • That label is served by the EC2 Fleet (ec2FleetCloud.groovy), whose workers boot from this shared launch-template user-data, so the qemu setup belongs here, not the classic init.groovy.d cloud.
  • The static qemu-x86_64 is extracted from a digest-pinned image in Percona's ECR Public mirror (no EPEL dependency on Amazon Linux 2); pull is authenticated and bounded, registration uses printf with canonical magic/mask and the POF flags.
  • Applies fleet-wide via the shared jenkins-arm-fleet module.

Tickets

The PXB ARM64 backup tests run x86_64 helper containers (Minio, Vault,
KMIP) on the docker-32gb-aarch64 label, served by the ec2-fleet Graviton
pool. The worker bootstrap installs and starts docker but no x86 emulation,
so those containers fail with exec format error.

- Extract the static qemu-x86_64 from a digest-pinned image in Percona's
  ECR Public mirror (no EPEL dependency on Amazon Linux 2) and register a
  binfmt_misc handler in the shared arm fleet launch-template user-data.
- Authenticated ECR Public pull (worker role grants the token); bounded
  retry so a pull failure degrades to no-emulation instead of hanging boot.
- printf (not echo) emits the binfmt magic verbatim under any shell; magic,
  mask, and POF flags match the canonical qemu-x86_64 registration; the F
  flag opens the interpreter for container mount namespaces.
- Mount/modprobe binfmt_misc before writing the register node.
- Replace find | xargs with find -exec in the awscli cleanup (shellcheck).

Applies fleet-wide via the shared jenkins-arm-fleet module. Consumer PXB-3613.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant