quick-keyboard-83126
03/22/2023, 6:13 PMdocker pull <http://gcr.io/|gcr.io/>...
or nerdctl pull <http://gcr.io/|gcr.io/>...
is slow when their daemon is Rancher Desktop on macOS.
We've been able to isolate it to a curl
w/ credentials from gsutil
inside rdctl shell
... I'm wondering if someone would be up for trying a command out for me...fast-garage-66093
03/22/2023, 10:06 PMquick-keyboard-83126
03/22/2023, 10:07 PMbun
changefast-garage-66093
03/22/2023, 10:07 PMquick-keyboard-83126
03/22/2023, 10:11 PMrdctl shell
where ~/gcloud/google-cloud-sdk
is an installation of gcloud
and you've done apk add py3-openssl
or similar, and you've created a json
file at $service_account_key
which is a google cloud service account (w/ enough permissions to identify and make cloud storage read operations I suppose....)
curl "$(~/gcloud/google-cloud-sdk/bin/gsutil signurl -r us -d 20m $service_account_key <gs://artifacts.gcr-public-test-12345.appspot.com/containers/images/sha256:7f65636102fd1f499092cb075baa95784488c0bbc3e0abf>
f2a6d853109e4a948| tail -n 1 |awk '{print $5}')" -D - -o /dev/null
curl "$(~/gcloud/google-cloud-sdk/bin/gsutil signurl -r us -d 20m $service_account_key <gs://artifacts.gcr-public-test-12345.appspot.com/containers/images/sha256:7f65636102fd1f499092cb075baa95784488c0bbc3e0abff2a6d853109e4a948%7C> tail -n 1 |awk '{print $5}')" -D - -o /dev/null
curl "$(~/gcloud/google-cloud-sdk/bin/gsutil signurl -r us -d 20m $service_account_key <gs://artifacts.gcr-public-test-12345.appspot.com/containers/images/sha256:7f65636102fd1f499092>
cb075baa95784488c0bbc3e0abff2a6d853109e4a948 | tail -n 1 |awk '{print $5}')" -D - -o /dev/null
lima-rancher-desktop:/Users/jsoref$ curl --http1.1 -4 "$(~/gcloud/google-cloud-sdk/bin/gsutil signurl -r us -d 20m $service_account_key <gs://artifacts.gcr-public-test-12345.appspot.com/containers/images/sha256:7f65636102fd1f499092cb075baa95784488c0bbc3e0abff2a6d853109e4a948> | tail -n 1 |awk '{print $5}')" -D - -o /dev/null
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0HTTP/1.1 200 OK
X-GUploader-UploadID: ADPycdvrNdaWfDDMITCajmstn98LaD4n43bMnn3VPmf4-AIVxmbmr_y-h7MY_KNTngpIRmv_qkJLyk8N6Sh0gNyvwyNAvg
Expires: Wed, 22 Mar 2023 23:14:37 GMT
Date: Wed, 22 Mar 2023 22:14:37 GMT
Cache-Control: public, max-age=3600
Last-Modified: Mon, 06 Mar 2023 23:41:48 GMT
ETag: "e453dccae0def69a0d0c2552647d58a7"
x-goog-generation: 1678146108297435
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 9599350
Content-Type: application/octet-stream
x-goog-hash: crc32c=gnP47A==
x-goog-hash: md5=5FPcyuDe9poNDCVSZH1Ypw==
x-goog-storage-class: STANDARD
Accept-Ranges: bytes
Content-Length: 9599350
Server: UploadServer
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
16 9374k 16 1552k 0 0 23989 0 0:06:40 0:01:06 0:05:34 5607
Note that it more or less never finishes...
The same equivalent command is fine when not run in the rancher lima vmfast-garage-66093
03/22/2023, 10:24 PMquick-keyboard-83126
03/22/2023, 10:25 PM20 9374k 20 1930k 0 0 3099 0 0:51:37 0🔟37 0:41:00 272
fast-garage-66093
03/22/2023, 10:25 PMcurl
command, so if this is a client-side problem, it should be reproducible with a curl to some other endpointquick-keyboard-83126
03/22/2023, 10:25 PMfast-garage-66093
03/22/2023, 10:26 PMquick-keyboard-83126
03/22/2023, 10:26 PM-4
or --http1.1
, i'm not sure what else i can do to get interesting bits outfast-garage-66093
03/22/2023, 10:29 PMquick-keyboard-83126
03/22/2023, 10:29 PMdocker run
to run an alpine/ubuntu in the rancher managed thing? or to find the standalone lima and try that?fast-garage-66093
03/22/2023, 10:30 PMbrew install lima
. Then limactl start --tty=false
to create a Ubuntu VM, and limactl start --tty=false <template://alpine>
to create an Alpine onequick-keyboard-83126
03/22/2023, 10:31 PMError: lima HEAD-cce3561 is already installed
To install 0.15.0, first run:
brew unlink lima
fast-garage-66093
03/22/2023, 10:31 PMquick-keyboard-83126
03/22/2023, 10:32 PMfast-garage-66093
03/22/2023, 10:32 PMquick-keyboard-83126
03/22/2023, 10:32 PMfast-garage-66093
03/22/2023, 10:32 PMlima
to run a shell in the Ubuntu VM, and limactl shell alpine
to run one in the Alpine one$HOME
from inside the VM. If you do, then you need to edit the lima.yaml
before start (don't use --tty=false
) because the templates will mount it readonlyquick-keyboard-83126
03/22/2023, 10:35 PM==> Pouring qt--6.4.3.arm64_ventura.bottle.tar.gz
fast-garage-66093
03/22/2023, 10:35 PM/tmp/lima
mounted writablequick-keyboard-83126
03/22/2023, 10:36 PMfast-garage-66093
03/22/2023, 10:36 PMquick-keyboard-83126
03/22/2023, 10:36 PM% lima --version
limactl version 0.15.0
fast-garage-66093
03/22/2023, 10:37 PMqt
as well...quick-keyboard-83126
03/22/2023, 10:37 PMINFO[0019] [hostagent] Waiting for the essential requirement 3 of 5: "sshfs binary to be installed"
INFO[0025] READY. Runto open the shell.limactl shell alpine
gcloud
w/ apk
fast-garage-66093
03/22/2023, 10:38 PMquick-keyboard-83126
03/22/2023, 10:40 PMfast-garage-66093
03/22/2023, 10:41 PMquick-keyboard-83126
03/22/2023, 10:43 PMlima-alpine:/tmp/google-cloud-sdk$ curl "$(./bin/gsutil signurl -r us -d 20m $service_account_key <gs://artifacts.gcr-public-test-12345.appspot.com/containers/images/sha256:7f65636102fd1f499092cb075baa95784488c0bbc3e0abff2a6d853109e4a948%7C> ta
il -n 1 |awk '{print $5}')" -D - -o /dev/null
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- 0:00:01 --:--:-- 0HTTP/2 200
x-guploader-uploadid: ADPycdvTI4bzssRZPSewhhm1teYh9Cb7NziZPUyVDKe2j6ui2vIBI0JbDrKC6FxUlSYehdbsl22xsXQmoxpzoNl11jumVw
expires: Wed, 22 Mar 2023 23:42:49 GMT
date: Wed, 22 Mar 2023 22:42:49 GMT
cache-control: public, max-age=3600
last-modified: Mon, 06 Mar 2023 23:41:48 GMT
etag: "e453dccae0def69a0d0c2552647d58a7"
x-goog-generation: 1678146108297435
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 9599350
content-type: application/octet-stream
x-goog-hash: crc32c=gnP47A==
x-goog-hash: md5=5FPcyuDe9poNDCVSZH1Ypw==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 9599350
server: UploadServer
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
6 9374k 6 575k 0 0 32581 0 0:04:54 0:00:18 0:04:36 24920
INFO[0419] [hostagent] Waiting for the essential requirement 3 of 5: "sshfs binary to be installed"ubuntu is still twiddling its thumbs
INFO[0579] [hostagent] Waiting for the essential requirement 3 of 5: "sshfs binary to be installed"
FATA[0600] did not receive an event with the "running" status
jsoref@lima-default:/Users/jsoref$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 21.10
Release: 21.10
Codename: impish
fast-garage-66093
03/22/2023, 10:53 PMquick-keyboard-83126
03/22/2023, 10:53 PMfast-garage-66093
03/22/2023, 10:54 PMsshfs
was not yet installed. Do you see the files from your home directory? I would expect that to be missing as well thenquick-keyboard-83126
03/22/2023, 10:55 PMfast-garage-66093
03/22/2023, 10:55 PMlimactl stop; limactl start
to see if it fixes itself?quick-keyboard-83126
03/22/2023, 10:55 PMjsoref@lima-default:/tmp$ ./google-cloud-sdk/bin/gsutil signurl x <gs://foo>
Keystore password:
fast-garage-66093
03/22/2023, 10:56 PMgsutil
, no?quick-keyboard-83126
03/22/2023, 10:56 PMfast-garage-66093
03/22/2023, 10:56 PMquick-keyboard-83126
03/22/2023, 10:58 PMx
was an empty filejsoref@lima-default:/tmp$ curl "$(google-cloud-sdk/bin/gsutil signurl -r us -d 20m $service_account_key <gs://artifacts.gcr-public-test-12345.appspot.com/containers/images/sha256:7f65636102fd1f499092cb075baa95784488c0bbc3e0abff2a6d853109e4a948%7C> tail -n 1 | awk '{print $5}')" -D - -o /dev/null
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- 0:00:01 --:--:-- 0HTTP/2 200
x-guploader-uploadid: ADPycdvXfd5Ls6eGM-shkeomb6v7Jl1wM-SLroVEfTj5fe2UoDjG3n-FvhDq8nXeoNZA-L4ECU6yxpvsocpdF_RoxlWe0A
expires: Wed, 22 Mar 2023 23:59:39 GMT
date: Wed, 22 Mar 2023 22:59:39 GMT
cache-control: public, max-age=3600
last-modified: Mon, 06 Mar 2023 23:41:48 GMT
etag: "e453dccae0def69a0d0c2552647d58a7"
x-goog-generation: 1678146108297435
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 9599350
content-type: application/octet-stream
x-goog-hash: crc32c=gnP47A==
x-goog-hash: md5=5FPcyuDe9poNDCVSZH1Ypw==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 9599350
server: UploadServer
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
7 9374k 7 668k 0 0 48877 0 0:03:16 0:00:14 0:03:02 65298
fast-garage-66093
03/22/2023, 11:00 PMquick-keyboard-83126
03/22/2023, 11:01 PMUTM
...fast-garage-66093
03/22/2023, 11:01 PMquick-keyboard-83126
03/22/2023, 11:01 PMfast-garage-66093
03/22/2023, 11:02 PMquick-keyboard-83126
03/22/2023, 11:03 PMfast-garage-66093
03/22/2023, 11:08 PMquick-keyboard-83126
03/22/2023, 11:08 PMfast-garage-66093
03/22/2023, 11:08 PMifconfig eth0 mtu 1000
and see if that changes anything?quick-keyboard-83126
03/22/2023, 11:08 PMjsoref@lima-default:/tmp$ sudo ifconfig eth0 mtu 1000
sudo: ifconfig: command not found
🙂fast-garage-66093
03/22/2023, 11:09 PMquick-keyboard-83126
03/22/2023, 11:10 PMlima-alpine:/Users/jsoref$ ip link
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
link/ether 52:55:55:af:99:94 brd ff:ff:ff:ff:ff:ff
lima-alpine:/Users/jsoref$ sudo ip link set dev eth0 mtu 1000
lima-alpine:/Users/jsoref$ ip link list
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1000 qdisc pfifo_fast state UP qlen 1000
link/ether 52:55:55:af:99:94 brd ff:ff:ff:ff:ff:ff
fast-garage-66093
03/22/2023, 11:10 PMcurl
againquick-keyboard-83126
03/22/2023, 11:11 PMlima-alpine:/Users/jsoref$ curl "$(./bin/gsutil signurl -r us -d 20m $service_account_key <gs://artifacts.gcr-public-test-12345.appspot.com/containers/images/sha256:7f65636102fd1f499092cb075baa95784488c0bbc3e0abff2a6d853109e4a948%7C> tail -n 1
|awk '{print $5}')" -D - -o /dev/null
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- 0:00:01 --:--:-- 0HTTP/2 200
x-guploader-uploadid: ADPycdtCZKWf_CGfTS9UMNFWe7Ust2QIL5dLccfCBGpim5F3FJoRqUExQqJ6XeG5LqbBhtm79So8RhOBk8XiaSYNyTwQntpvJUR8
expires: Thu, 23 Mar 2023 00:11:00 GMT
date: Wed, 22 Mar 2023 23:11:00 GMT
cache-control: public, max-age=3600
last-modified: Mon, 06 Mar 2023 23:41:48 GMT
etag: "e453dccae0def69a0d0c2552647d58a7"
x-goog-generation: 1678146108297435
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 9599350
content-type: application/octet-stream
x-goog-hash: crc32c=gnP47A==
x-goog-hash: md5=5FPcyuDe9poNDCVSZH1Ypw==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 9599350
server: UploadServer
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
5 9374k 5 520k 0 0 36373 0 0:04:23 0:00:14 0:04:09 32221
fast-garage-66093
03/22/2023, 11:11 PMquick-keyboard-83126
03/22/2023, 11:11 PMfast-garage-66093
03/22/2023, 11:12 PMquick-keyboard-83126
03/22/2023, 11:12 PMfast-garage-66093
03/22/2023, 11:13 PMquick-keyboard-83126
03/22/2023, 11:48 PMubuntu@ubuntu-utm:~$ uname -a
Linux ubuntu-utm 5.15.0-67-generic #74-Ubuntu SMP Wed Feb 22 14:14:39 UTC 2023 aarch64 aarch64 aarch64 GNU/Linux
ubuntu@ubuntu-utm:~$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 22.04.1 LTS
Release: 22.04
Codename: jammy
ubuntu@ubuntu-utm:~$ curl -4 "$(./google-cloud-sdk/bin/gsutil signurl -r us -d 20m $service_account_key <gs://artifacts.gcr-public-test-12345.appspot.com/containers/images/sha256:7f65636102fd1f499092cb075baa95784488c0bbc3e0abff2a6d853109e4a948%7C> tail -n 1 | awk '{print $5}')" -D - -o /dev/null
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0HTTP/2 200
x-guploader-uploadid: ADPycdsXGbECQZIzMFeiBbbaPUgYeKArc7h0bCakwfQPW4LnVDnoxKPs73dr5pmfQMKlcwMuT5JyhK_wofUz61lvVd9e1eoPdXRD
expires: Thu, 23 Mar 2023 00:45:10 GMT
date: Wed, 22 Mar 2023 23:45:10 GMT
cache-control: public, max-age=3600
last-modified: Mon, 06 Mar 2023 23:41:48 GMT
etag: "e453dccae0def69a0d0c2552647d58a7"
x-goog-generation: 1678146108297435
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 9599350
content-type: application/octet-stream
x-goog-hash: crc32c=gnP47A==
x-goog-hash: md5=5FPcyuDe9poNDCVSZH1Ypw==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 9599350
server: UploadServer
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
15 9374k 15 1470k 0 0 14641 0 0:10:55 0:01:42 0:09:13 817
(I tried using UTM w/ Apple's emulator and the networking driver oopsed during the install ...)fast-garage-66093
03/22/2023, 11:50 PMquick-keyboard-83126
03/22/2023, 11:50 PMjsoref@jsoref-mbp ~ % time curl "$(CLOUDSDK_PYTHON=~/.pyenv/versions/3.10.1/bin/python ./bin/gsutil signurl -r us -d 20m $service_account_key <gs://artifacts.gcr-public-test-12345.appspot.com/containers/images/sha256:7f65636102fd1f499092cb075baa95784488c0bbc3e0abff2a6d853109e4a948%7C> tail -n 1 |awk '{print $5}')" -D - -o /dev/null
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0HTTP/2 200
x-guploader-uploadid: ADPycdsX26G5uYvSflNNM0FxgC4zhVvq1TsFagqZFQoE38QGV3C3vY7U2YUVeVBbKE9lEd-ofDENOMipnUkvW9K0aXqnrw
expires: Thu, 23 Mar 2023 00:46:40 GMT
date: Wed, 22 Mar 2023 23:46:40 GMT
cache-control: public, max-age=3600
last-modified: Mon, 06 Mar 2023 23:41:48 GMT
etag: "e453dccae0def69a0d0c2552647d58a7"
x-goog-generation: 1678146108297435
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 9599350
content-type: application/octet-stream
x-goog-hash: crc32c=gnP47A==
x-goog-hash: md5=5FPcyuDe9poNDCVSZH1Ypw==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 9599350
server: UploadServer
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
100 9374k 100 9374k 0 0 7167k 0 0:00:01 0:00:01 --:--:-- 7194k
curl -D - -o /dev/null 0.07s user 0.04s system 8% cpu 1.321 total
fast-garage-66093
03/22/2023, 11:54 PMquick-keyboard-83126
03/22/2023, 11:56 PM17 9374k 17 1658k 0 0 2738 0 0:58:25 0🔟20 0:48:05 0
curl: (56) OpenSSL SSL_read: Connection reset by peer, errno 104
fast-garage-66093
03/22/2023, 11:57 PMquick-keyboard-83126
03/22/2023, 11:58 PMfast-garage-66093
03/23/2023, 12:00 AMquick-keyboard-83126
03/23/2023, 12:00 AMfast-garage-66093
03/23/2023, 12:00 AMquick-keyboard-83126
03/23/2023, 12:01 AMfast-garage-66093
03/23/2023, 12:01 AMquick-keyboard-83126
03/23/2023, 12:01 AMfast-garage-66093
03/23/2023, 12:02 AMquick-keyboard-83126
03/23/2023, 12:03 AMfast-garage-66093
03/23/2023, 12:06 AMquick-keyboard-83126
03/23/2023, 12:07 AMfast-garage-66093
03/23/2023, 12:09 AM<http://appspot.com|appspot.com>
a Google service? Because that is the site creating the issue (I think)quick-keyboard-83126
03/23/2023, 12:10 AMfast-garage-66093
03/23/2023, 12:11 AMquick-keyboard-83126
03/23/2023, 12:13 AMThe first image push to a hostname adds the registry host and its storage bucket to a project. For example, the first push toadds the<http://gcr.io/my-project|gcr.io/my-project>
registry host to the project with the project ID<http://gcr.io|gcr.io>
and creates a storage bucket for the registry. The bucket name has one of the following formats:my-project
•for images stored on the host<http://artifacts.PROJECT-ID.appspot.com|artifacts.PROJECT-ID.appspot.com>
<http://gcr.io|gcr.io>
•for images stored on other registry hosts<http://STORAGE-REGION.artifacts.PROJECT-ID.appspot.com|STORAGE-REGION.artifacts.PROJECT-ID.appspot.com>
fast-garage-66093
03/23/2023, 12:14 AMquick-keyboard-83126
03/23/2023, 12:14 AMwide-mechanic-33041
03/23/2023, 11:28 AMfast-garage-66093
03/23/2023, 6:52 PM1000
was too low; I read somewhere that the minimum value for Google Cloud is 1300
. So maybe the lower value is ignored in MSS negotiations.wide-mechanic-33041
03/23/2023, 7:24 PMquick-keyboard-83126
03/23/2023, 7:55 PMcalm-sugar-3169
03/23/2023, 7:56 PM--mtu
option to discover the MTU between your network and the destination, please note that --mtu
is not always available on all traceroute utilities. Furthermore, I would also play around with the payload size and would capture that packet to see any signs of fragmentation of the packets or even you could look for ICMP message-too-big
error messages or ICMPv6 packet-too-big
errors (depending on your protocol)VXLAN
there will be an additional 50 bytes added to the overall size (+ IP header, etc), there usually will be some kind if ICMP
messages sent back to the origin to indicated if the packets needs to be resized, etc.wide-mechanic-33041
03/23/2023, 8:15 PMquick-keyboard-83126
03/23/2023, 8:16 PMwide-mechanic-33041
03/23/2023, 8:16 PMfast-garage-66093
03/23/2023, 8:17 PMwide-mechanic-33041
03/23/2023, 8:17 PMquick-keyboard-83126
03/23/2023, 8:18 PMwide-mechanic-33041
03/23/2023, 8:18 PMfast-garage-66093
03/23/2023, 8:19 PMquick-keyboard-83126
03/23/2023, 8:19 PMlima-rancher-desktop:/Users/jsoref$ ip link set dev eth0 mtu 1250
ip: ioctl 0x8922 failed: Operation not permitted
lima-rancher-desktop:/Users/jsoref$ sudo ip link set dev eth0 mtu 1250
lima-rancher-desktop:/Users/jsoref$
fast-garage-66093
03/23/2023, 8:19 PMsudo
?wide-mechanic-33041
03/23/2023, 8:19 PMquick-keyboard-83126
03/23/2023, 8:19 PMwide-mechanic-33041
03/23/2023, 8:20 PMquick-keyboard-83126
03/23/2023, 8:20 PMrdctl shell
gives me non root by defaultsudo apk add
package gets me a traceroute
you'll like?wide-mechanic-33041
03/23/2023, 8:21 PMquick-keyboard-83126
03/23/2023, 8:21 PMwide-mechanic-33041
03/23/2023, 8:22 PMfast-garage-66093
03/23/2023, 8:23 PMsudo apk add traceroute
?lima-rancher-desktop:~# traceroute 2>&1 | grep mtu
--mtu Discover MTU along the path being traced. Implies
quick-keyboard-83126
03/23/2023, 8:25 PMlima-rancher-desktop:/Users/jsoref$ traceroute 2>&1 | grep mtu
lima-rancher-desktop:/Users/jsoref$
lima-rancher-desktop:/Users/jsoref$ traceroute 2>&1 | grep mtu
--mtu Discover MTU along the path being traced. Implies
lima-rancher-desktop:/Users/jsoref$ traceroute --mtu artifacts.gcr-public-test-1
<http://2345.appspot.com|2345.appspot.com>
traceroute to <http://artifacts.gcr-public-test-12345.appspot.com|artifacts.gcr-public-test-12345.appspot.com> <tel:(142.251.32.84|(142.251.32.84>), 30 hops max, 65000 byte packets
1 host.lima.internal (192.168.5.2) 0.678 ms F=1250 0.459 ms 0.362 ms
2 * * *
3 * * *
calm-sugar-3169
03/23/2023, 8:29 PMquick-keyboard-83126
03/23/2023, 8:29 PMlima-rancher-desktop:/Users/jsoref$ traceroute --mtu artifacts.gcr-public-test-1
<http://2345.appspot.com|2345.appspot.com>
traceroute to <http://artifacts.gcr-public-test-12345.appspot.com|artifacts.gcr-public-test-12345.appspot.com> <tel:(142.251.32.84|(142.251.32.84>), 30 hops max, 65000 byte packets
1 host.lima.internal (192.168.5.2) 0.678 ms F=1250 0.459 ms 0.362 ms
2 * * *
3 * * *
4 * * *
5 * * *
6 * * *
7 * * *
8 * * *
9 * * *
10 * * *
11 * * *
12 * * *
13 * * *
14 * * *
15 * *
calm-sugar-3169
03/23/2023, 8:29 PMfast-garage-66093
03/23/2023, 8:29 PMcalm-sugar-3169
03/23/2023, 8:30 PMquick-keyboard-83126
03/23/2023, 8:31 PMcalm-sugar-3169
03/23/2023, 8:31 PMquick-keyboard-83126
03/23/2023, 8:34 PMwide-mechanic-33041
03/23/2023, 8:40 PMquick-keyboard-83126
03/23/2023, 8:41 PM29 * * *
30 * * *
lima-rancher-desktop:/Users/jsoref$ curl --http1.1 -4 "$(~/gcloud/google-cloud-s
dk/bin/gsutil signurl -r us -d 20m $service_account_key <gs://artifacts.gcr-publi>
<http://c-test-12345.appspot.com/containers/images/sha256:7f65636102fd1f499092cb075baa95|c-test-12345.appspot.com/containers/images/sha256:7f65636102fd1f499092cb075baa95>
784488c0bbc3e0abff2a6d853109e4a948| tail -n 1 |awk '{print $5}')" -D - -o /dev/n
ull
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- 0:00:01 --:--:-- 0HTTP/1.1 200 OK
X-GUploader-UploadID: ADPycdsf8PjzNktWQt3o6jaexZkbRD_ofKSEYUSdLTmx4xyxu_TXz387MTzS7DLPOdk-sD9euV_K5StA51LY2ICDq8oKag
Expires: Thu, 23 Mar 2023 21:41:06 GMT
Date: Thu, 23 Mar 2023 20:41:06 GMT
Cache-Control: public, max-age=3600
Last-Modified: Mon, 06 Mar 2023 23:41:48 GMT
ETag: "e453dccae0def69a0d0c2552647d58a7"
x-goog-generation: 1678146108297435
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 9599350
Content-Type: application/octet-stream
x-goog-hash: crc32c=gnP47A==
x-goog-hash: md5=5FPcyuDe9poNDCVSZH1Ypw==
x-goog-storage-class: STANDARD
Accept-Ranges: bytes
Content-Length: 9599350
Server: UploadServer
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
9 9374k 9 856k 0 0 45934 0 0:03:28 0:00:19 0:03:09 72842
wide-mechanic-33041
03/23/2023, 8:41 PMquick-keyboard-83126
03/23/2023, 8:42 PMlima-rancher-desktop:/Users/jsoref$ sudo apk add tcpdump
OK: 470 MiB in 174 packages
wide-mechanic-33041
03/23/2023, 8:43 PMquick-keyboard-83126
03/23/2023, 8:43 PMlima-rancher-desktop:/Users/jsoref$ tcpdump -w gcp.pcap -i eth0
tcpdump: eth0: You don't have permission to capture on that device
(socket: Operation not permitted)
lima-rancher-desktop:/Users/jsoref$ sudo tcpdump -w gcp.pcap -i eth0
tcpdump: listening on eth0, link-type EN10MB (Ethernet), snapshot length 262144 bytes
wide-mechanic-33041
03/23/2023, 8:43 PMquick-keyboard-83126
03/23/2023, 8:44 PMwide-mechanic-33041
03/23/2023, 8:44 PMquick-keyboard-83126
03/23/2023, 8:44 PMlima-rancher-desktop:/Users/jsoref$ sudo tcpdump -w gcp.pcap -i eth0
tcpdump: listening on eth0, link-type EN10MB (Ethernet), snapshot length 262144 bytes
^C498 packets captured
503 packets received by filter
0 packets dropped by kernel
wide-mechanic-33041
03/23/2023, 8:46 PMquick-keyboard-83126
03/23/2023, 8:46 PM~
into the shellwide-mechanic-33041
03/23/2023, 8:47 PMquick-keyboard-83126
03/23/2023, 8:48 PMwide-mechanic-33041
03/23/2023, 8:48 PMquick-keyboard-83126
03/23/2023, 8:49 PMwide-mechanic-33041
03/23/2023, 8:49 PMquick-keyboard-83126
03/23/2023, 8:49 PMwide-mechanic-33041
03/23/2023, 8:49 PMquick-keyboard-83126
03/23/2023, 8:49 PMdocker pull
from docker hub doesn't have this behaviorgsutil perfdiag
, so i'm now running that...lima-alpine:/Users/jsoref$ sudo apk add net‑tools
ERROR: unable to select packages:
net‑tools (no such package):
required by: world[net‑tools]
what am i doing wrong?wide-mechanic-33041
03/23/2023, 9:07 PMfast-garage-66093
03/23/2023, 9:08 PMquick-keyboard-83126
03/23/2023, 9:08 PMwide-mechanic-33041
03/23/2023, 9:08 PMquick-keyboard-83126
03/23/2023, 9:08 PMfast-garage-66093
03/23/2023, 9:08 PMlima-rancher-desktop:~# apk add net-tools
(1/2) Installing mii-tool (2.10-r0)
(2/2) Installing net-tools (2.10-r0)
Executing busybox-1.35.0-r17.trigger
OK: 326 MiB in 109 packages
wide-mechanic-33041
03/23/2023, 9:09 PMquick-keyboard-83126
03/23/2023, 9:09 PMwide-mechanic-33041
03/23/2023, 9:11 PMquick-keyboard-83126
03/23/2023, 9:12 PMfast-garage-66093
03/23/2023, 9:12 PMwide-mechanic-33041
03/23/2023, 9:14 PMfast-garage-66093
03/23/2023, 9:17 PMquick-keyboard-83126
03/23/2023, 9:31 PMlima-rancher-desktop:/tmp/google-cloud-sdk/bin$ curl "$(~/gcloud/google-cloud-sdk/bin/gsutil signurl -r us -d 20m $service_account_key <gs://artifacts.gcr-public-test-12345.appspot.com/containers/images/sha256:7f65636102fd1f499092cb075baa9>
5784488c0bbc3e0abff2a6d853109e4a948 | tail -n 1 |awk '{print $5}')" -D - -o /dev/null
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- 0:00:02 --:--:-- 0HTTP/2 200
x-guploader-uploadid: ADPycdvx73Fnw-tKT0XRFBXC0xG6g4trrvF8nlfTZ1pJHd8iFyjtD9Cjx37gxB9rSdCi1lJYfgs73Z7bp42Qoj2FrA4dF6AWg0bT
expires: Thu, 23 Mar 2023 22:27:20 GMT
date: Thu, 23 Mar 2023 21:27:20 GMT
cache-control: public, max-age=3600
last-modified: Mon, 06 Mar 2023 23:41:48 GMT
etag: "e453dccae0def69a0d0c2552647d58a7"
x-goog-generation: 1678146108297435
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 9599350
content-type: application/octet-stream
x-goog-hash: crc32c=gnP47A==
x-goog-hash: md5=5FPcyuDe9poNDCVSZH1Ypw==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 9599350
server: UploadServer
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
8 9374k 8 806k 0 0 4160 0 0:38:27 0:03:18 0:35:09 268
fast-garage-66093
03/23/2023, 9:32 PMquick-keyboard-83126
03/23/2023, 9:32 PMnetstat
/ net-tools
thingfast-garage-66093
03/23/2023, 9:34 PM$ rd shell sudo -i
lima-rancher-desktop:~# apk add net-tools
WARNING: Ignoring /media/vda/apks: No such file or directory
fetch <https://dl-cdn.alpinelinux.org/alpine/v3.16/main/aarch64/APKINDEX.tar.gz>
fetch <https://dl-cdn.alpinelinux.org/alpine/v3.16/community/aarch64/APKINDEX.tar.gz>
(1/2) Installing mii-tool (2.10-r0)
(2/2) Installing net-tools (2.10-r0)
Executing busybox-1.35.0-r17.trigger
OK: 286 MiB in 107 packages
lima-rancher-desktop:~#
quick-keyboard-83126
03/23/2023, 9:34 PMfast-garage-66093
03/23/2023, 9:36 PM$ l shell alpine sudo -i
lima-alpine:~# apk add net-tools
fetch <https://dl-cdn.alpinelinux.org/alpine/v3.17/main/x86_64/APKINDEX.tar.gz>
fetch <https://dl-cdn.alpinelinux.org/alpine/v3.17/community/x86_64/APKINDEX.tar.gz>
(1/2) Installing mii-tool (2.10-r0)
(2/2) Installing net-tools (2.10-r0)
Executing busybox-1.35.0-r29.trigger
OK: 43 MiB in 86 packages
lima-alpine:~#
quick-keyboard-83126
03/23/2023, 9:36 PMen-dash
instead of a -