Memory leak / Memory allocation failure related issue after upgrading to PF_RING 8.2.0 #1001
Description
As part of the version upgrade from 8.0.0 to 8.2.0 of the PF_RING in the QRadar, we are facing the memory leak issue which is causing the app installation failures.
For investigation of the issue an RHEL ticket was created as well, reference for the same: https://issues.redhat.com/browse/RHEL-5909
This was the latest update from the RedHat ticket:
"Looking at PF_RING git history, it looks like the problematic changeset is e11315f4ab4a7fc22d09a0c86002c5cfb10fd5a1, which is included from version 8.2
You can either use older versions, or ask the PF_RING developers to get it right, e.g. allocating the per netns data dinamically with vmalloc() in ring_net_init().
In any case this is not a kernel issue, as such closing the present tracker"
Attaching the error logs below:
[2023-09-13 13:33:56] [WARNING] Stderr for podman command [/usr/bin/podman build -t console.localdeployment:5000/qapp/1156:3.0.0-20230913133353 --build-arg APP_USER_ID=99 --build-arg APP_GROUP_ID=99 --build-arg BUILD_TIMESTAMP="2023-09-13 16:33:48 UTC" /storetmp/AppFW_1156]
[2023-09-13 13:33:56] [WARNING] error running container: from /usr/bin/runc creating container for [/bin/sh -c groupadd -o -g $APP_GROUP_ID $APP_GROUP_NAME && useradd -l -u $APP_USER_ID -g $APP_GROUP_ID $APP_USER_NAME && echo -n $BUILD_TIMESTAMP | sed 's/"//g' > $APP_ROOT/group_date]: time="2023-09-13T13:33:56-03:00" level=fatal msg="nsexec-1[682509]: failed to unshare remaining namespaces (except cgroupns): Cannot allocate memory"
time="2023-09-13T13:33:56-03:00" level=fatal msg="nsexec-0[682501]: failed to sync with stage-1: next state: Invalid argument"
time="2023-09-13T13:33:56-03:00" level=error msg="runc create failed: unable to start container process: can't get final child's PID from pipe: EOF"
: exit status 1
time="2023-09-13T13:33:56-03:00" level=error msg="did not get container create message from subprocess: EOF"
Error: building at STEP "RUN groupadd -o -g $APP_GROUP_ID $APP_GROUP_NAME && useradd -l -u $APP_USER_ID -g $APP_GROUP_ID $APP_USER_NAME && echo -n $BUILD_TIMESTAMP | sed 's/"//g' > $APP_ROOT/group_date": while running runtime: exit status 1