Add Nexus proxy procedure for ONAP deployments - LF Nexus3 is timing out periodically

Description

Provide a template for bringing up a local nexus repo so we can avoid the usually 30 min pull of the 90 containers stretching to 2+ hours
There are 3+ repos
nexus3
dockerhub for oomk8s and aai

:plus: 20181218

implementing as per

https://wiki.onap.org/display/DW/Cloud+Native+Deployment#CloudNativeDeployment-NexusProxy

https://lists.onap.org/g/onap-discuss/topic/onap_helpdesk_65794_nexus3/28794221?p=,,,20,0,0,0::recentpostdate%2Fsticky,,,20,2,0,28794221 

buntu@ip-172-31-10-98:~$ sudo ps -ef | grep docker root      4022     1  0 16:53 ?        00:00:25 /usr/bin/dockerd -H fd:// root      4030  4022  0 16:53 ?        00:00:03 docker-containerd -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc root      4363  4022  0 17:05 ?        00:00:06 /usr/bin/docker-proxy -proto tcp -host-ip 0.0.0.0 -host-port 5000 -container-ip 172.17.0.2 -container-port 5000 root      4367  4030  0 17:05 ?        00:00:00 docker-containerd-shim 7f9b0e97eb7f484b75629238e2b4ba01acecdaed70ac3c1e7e58f37d0061ff3c /var/run/docker/libcontainerd/7f9b0e97eb7f484b75629238e2b4ba01acecdaed70ac3c1e7e58f37d0061ff3c docker-runc root      4384  4367  0 17:05 ?        00:00:28 registry serve /etc/docker/registry/config.yml root      4602  1434  0 18:18 pts/0    00:00:00 sudo nohup ./docker_prepull.sh root      4603  4602  0 18:18 pts/0    00:00:00 /bin/bash ./docker_prepull.sh root      4633  4603  0 18:18 pts/0    00:00:00 sudo docker pull nexus3.onap.info:5000/onap/aaf/aaf_agent:2.1.8 root      4634  4633  0 18:18 pts/0    00:00:00 docker pull nexus3.onap.info:5000/onap/aaf/aaf_agent:2.1.8 ubuntu    4670  1434  0 18:18 pts/0    00:00:00 grep --color=auto docker

Attachments

1
  • 22 Mar 2018, 09:03 PM

Activity

Show:

Former user December 18, 2018 at 6:36 PM
Edited

Stats today on nexus3.onap.org - small images work fine but 1G images like ccsdk are taking 10+ min on the last 2 layers

ubuntu@ip-172-31-10-98:~$ sudo docker pull nexus3.onap.org:10001/onap/aaf/sms:3.0.1 3.0.1: Pulling from onap/aaf/sms c67f3896b22c: Pull complete 134fac3103be: Pull complete c7fdcaf7f439: Pull complete 590a963725eb: Pull complete 4df2c296b645: Pull complete 15dd1c6ebaf1: Pull complete 76eeb922b789: Pull complete Digest: sha256:d5b64947edb93848acacaa9820234aa29e58217db9f878886b7bafae00fdb436 Status: Downloaded newer image for nexus3.onap.org:10001/onap/aaf/sms:3.0.1 ubuntu@ip-172-31-10-98:~$ sudo docker pull nexus3.onap.org:10001/onap/ccsdk-dgbuilder-image:0.3.2 0.3.2: Pulling from onap/ccsdk-dgbuilder-image 18d680d61657: Already exists 0addb6fece63: Already exists 78e58219b215: Already exists eb6959a66df2: Already exists 4eeb11d61ff9: Downloading [>                                                  ] 5.266 MB/345.8 MB 0f81686fe963: Downloading [===>                                               ] 5.266 MB/71.15 MB 4 min later ubuntu@ip-172-31-10-98:~$ sudo docker pull nexus3.onap.org:10001/onap/ccsdk-dgbuilder-image:0.3.2 0.3.2: Pulling from onap/ccsdk-dgbuilder-image 18d680d61657: Already exists 0addb6fece63: Already exists 78e58219b215: Already exists eb6959a66df2: Already exists 4eeb11d61ff9: Downloading [=>                                                 ] 10.54 MB/345.8 MB 0f81686fe963: Downloading [=======>                                           ] 10.54 MB/71.15 MB

Former user December 18, 2018 at 6:20 PM

implementing as per

https://wiki.onap.org/display/DW/Cloud+Native+Deployment#CloudNativeDeployment-NexusProxy

https://lists.onap.org/g/onap-discuss/topic/onap_helpdesk_65794_nexus3/28794221?p=,,,20,0,0,0::recentpostdate%2Fsticky,,,20,2,0,28794221 

buntu@ip-172-31-10-98:~$ sudo ps -ef | grep docker root      4022     1  0 16:53 ?        00:00:25 /usr/bin/dockerd -H fd:// root      4030  4022  0 16:53 ?        00:00:03 docker-containerd -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc root      4363  4022  0 17:05 ?        00:00:06 /usr/bin/docker-proxy -proto tcp -host-ip 0.0.0.0 -host-port 5000 -container-ip 172.17.0.2 -container-port 5000 root      4367  4030  0 17:05 ?        00:00:00 docker-containerd-shim 7f9b0e97eb7f484b75629238e2b4ba01acecdaed70ac3c1e7e58f37d0061ff3c /var/run/docker/libcontainerd/7f9b0e97eb7f484b75629238e2b4ba01acecdaed70ac3c1e7e58f37d0061ff3c docker-runc root      4384  4367  0 17:05 ?        00:00:28 registry serve /etc/docker/registry/config.yml root      4602  1434  0 18:18 pts/0    00:00:00 sudo nohup ./docker_prepull.sh root      4603  4602  0 18:18 pts/0    00:00:00 /bin/bash ./docker_prepull.sh root      4633  4603  0 18:18 pts/0    00:00:00 sudo docker pull nexus3.onap.info:5000/onap/aaf/aaf_agent:2.1.8 root      4634  4633  0 18:18 pts/0    00:00:00 docker pull nexus3.onap.info:5000/onap/aaf/aaf_agent:2.1.8 ubuntu    4670  1434  0 18:18 pts/0    00:00:00 grep --color=auto docker

Former user August 16, 2018 at 11:04 PM

Just use the registry in docker - as Gary has posted
https://lists.onap.org/g/onap-discuss/topic/setting_up_local_repository/24568685?p=,,,20,0,0,0::recentpostdate%2Fsticky,,,20,2,0,24568685

apt-get install docker.io
docker run -d -p 5000:5000 --restart=unless-stopped --name registry -e REGISTRY_PROXY_REMOTEURL=https://nexus3.onap.org:10001 registry:2

Former user April 13, 2018 at 8:31 PM

No, but as of yesterday - it directly affects OOM healthcheck - as both cd systems had 0/33 healthcheck during the latest nexus3 slowdown - the TSC is questioning the stability of the deploy.
Ran a pullPolicy: Never to get a better baseline
we need to drive the best practice for this issue

Nexus3.onap.org has been experiencing a slowdown since 10am yesterday.
There are 2 ways around this – use the prepull script and set pullPolicy: to Never (I am currently testing IfNotPresent) – in all values.yaml in amsterdam or the root oom/kubernetes/onap/values.yaml in master/Beijing.
The other way is to swap out the nexus3 repo with a local nexus proxy

Former user March 28, 2018 at 3:07 PM

is this an OOM issue?

Done

Details

Assignee

Reporter

Labels

Sprint

Fix versions

Priority

Created March 22, 2018 at 9:02 PM
Updated August 12, 2023 at 3:45 AM
Resolved May 20, 2019 at 3:36 PM

Flag notifications