cilium vxlan安装时候报错 Verifier error: program tail_handle_snat_fwd_ipv4: load program: permission denied

给cilium 提过issue，他们的Contributor 说在其它发行版都能正常安装，应该是opencloudos的bug
[cilium issue 链接地址](https://github.com/cilium/cilium/issues/37478)

**opencloudos版本 ** 
Linux VM-1-133-opencloudos 5.4.119-20.0009.36 #1 SMP Mon Nov 4 13:30:25 CST 2024 x86_64 x86_64 x86_64 GNU/Linux

**cilium version ** 
1.16.0 有问题
1.15.6 是可以的

**k8s version** 
Client Version: v1.28.9
Kustomize Version: v5.0.4-0.20230601165947-6ce0bf390ce3
Server Version: v1.28.9

**安装方式**
helm install
values.yaml配置文件是
```
ipam:
  operator:
    clusterPoolIPv4PodCIDRList: ["10.254.0.0/16"]
    clusterPoolIPv4MaskSize: 24
image:
  useDigest: false
operator:
  image:
    useDigest: false
k8sServiceHost: 127.0.0.1
k8sServicePort: 8443
kubeProxyReplacement: true
bpf:
  masquerade: true
prometheus:
  metricsService: true
  enabled: true
``` 
 
 **相关报错日志** 
> Verifier error: program tail_handle_snat_fwd_ipv4: load program: permission denied: 2908: (69) r5 = *(u16 *)(r1 +36): R1 invalid mem access 'map_value_or_null' (4703 line(s) omitted)
Verifier log: load program: permission denied:
        ; int tail_handle_snat_fwd_ipv4(struct __ctx_buff *ctx)
...
 R1 invalid mem access 'map_value_or_null'
        processed 2835 insns (limit 1000000) max_states_per_insn 1 total_states 172 peak_states 172 mark_read 136

GVP OpenCloudOS/OpenCloudOS-Kernel

内容风险标识

评论 (0)

GVPOpenCloudOS/OpenCloudOS-Kernel

内容风险标识