update lxcfs and fix bugs

Dockerfile

@@ -1,4 +1,11 @@
-FROM alpine:latest
+FROM golang:1.18.4-alpine as yesbuilder
+ENV GO111MODULE=on \
+    CGO_ENABLED=0
+WORKDIR $GOPATH/src/github.com/lxcfs-admission-webhook
+ADD . $GOPATH/src/github.com/lxcfs-admission-webhook
+RUN go build . && \
+    mv ./lxcfs-admission-webhook /usr/local/bin/
 
-ADD lxcfs-admission-webhook /lxcfs-admission-webhook
-ENTRYPOINT ["./lxcfs-admission-webhook"]
+FROM alpine:latest
+COPY --from=yesbuilder /usr/local/bin/lxcfs-admission-webhook /usr/local/bin/lxcfs-admission-webhook
+ENTRYPOINT [ "/usr/local/bin/lxcfs-admission-webhook" ]

build

@@ -2,9 +2,5 @@
 
 DOCKER_USER=denverdino
 
-dep ensure -v
-CGO_ENABLED=0 GOOS=linux go build -a -installsuffix cgo -o lxcfs-admission-webhook
-docker build --no-cache -t registry.cn-hangzhou.aliyuncs.com/${DOCKER_USER}/lxcfs-admission-webhook:v1 .
-rm -rf lxcfs-admission-webhook
-
-docker push registry.cn-hangzhou.aliyuncs.com/${DOCKER_USER}/lxcfs-admission-webhook:v1
+docker build --no-cache -t registry.cn-hangzhou.aliyuncs.com/${DOCKER_USER}/lxcfs-admission-webhook:v2 .
+docker push registry.cn-hangzhou.aliyuncs.com/${DOCKER_USER}/lxcfs-admission-webhook:v2

build-container.sh

@@ -1,5 +1,5 @@
 #!/bin/bash
-docker build -t registry.cn-hangzhou.aliyuncs.com/denverdino/lxcfs:3.1.2 lxcfs-image
-docker push registry.cn-hangzhou.aliyuncs.com/denverdino/lxcfs:3.1.2
+docker build -t registry.cn-hangzhou.aliyuncs.com/denverdino/lxcfs:5.0.2 lxcfs-image
+docker push registry.cn-hangzhou.aliyuncs.com/denverdino/lxcfs:5.0.2
 
 ./build

deployment/install.sh

@@ -6,5 +6,6 @@ kubectl get secret lxcfs-admission-webhook-certs
 kubectl create -f deployment/deployment.yaml
 kubectl create -f deployment/service.yaml
 cat ./deployment/mutatingwebhook.yaml | ./deployment/webhook-patch-ca-bundle.sh > ./deployment/mutatingwebhook-ca-bundle.yaml
+cat ./deployment/validatingwebhook.yaml | ./deployment/webhook-patch-ca-bundle.sh > ./deployment/validatingwebhook-ca-bundle.yaml
 kubectl create -f deployment/mutatingwebhook-ca-bundle.yaml
-
+kubectl create -f deployment/validatingwebhook-ca-bundle.yaml

deployment/uninstall.sh

@@ -4,4 +4,6 @@ kubectl delete -f deployment/mutatingwebhook-ca-bundle.yaml
 kubectl delete -f deployment/service.yaml
 kubectl delete -f deployment/deployment.yaml
 kubectl delete secret lxcfs-admission-webhook-certs
-
+kubectl delete CertificateSigningRequest lxcfs-admission-webhook-svc.default
+kubectl delete MutatingWebhookConfiguration mutating-lxcfs-admission-webhook-cfg -n default
+kubectl delete ValidatingWebhookConfiguration validation-lxcfs-admission-webhook-cfg -n default

deployment/webhook-patch-ca-bundle.sh

@@ -1,13 +1,12 @@
 #!/bin/bash
 
-ROOT=$(cd $(dirname $0)/../../; pwd)
-
 set -o errexit
 set -o nounset
 set -o pipefail
 
+ROOT=$(cd $(dirname $0)/../../; pwd)
 
-export CA_BUNDLE=$(kubectl config view --raw --flatten --minify -o jsonpath='{.clusters[].cluster.certificate-authority-data}')
+export CA_BUNDLE=$(kubectl get configmap -n kube-system extension-apiserver-authentication -o=jsonpath='{.data.client-ca-file}' | base64 | tr -d '\n')
 
 if command -v envsubst >/dev/null 2>&1; then
     envsubst

go.mod

@@ -0,0 +1,33 @@
+module lxcfs-admission-webhook
+
+go 1.18
+
+require (
+	github.com/evanphx/json-patch v4.5.0+incompatible
+	github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b
+	k8s.io/api v0.0.0-20180828232432-12444147eb11
+	k8s.io/apimachinery v0.0.0-20180619225948-e386b2658ed2
+	k8s.io/kubernetes v1.11.0-alpha.0.0.20180912183811-efe960cdc41e
+)
+
+require (
+	github.com/docker/distribution v2.6.0-rc.1.0.20180313231215-34c706e75924+incompatible // indirect
+	github.com/ghodss/yaml v1.0.0 // indirect
+	github.com/gogo/protobuf v1.0.0 // indirect
+	github.com/golang/protobuf v1.5.2 // indirect
+	github.com/google/gofuzz v0.0.0-20170612174753-24818f796faf // indirect
+	github.com/json-iterator/go v0.0.0-20180612202835-f2b4162afba3 // indirect
+	github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
+	github.com/modern-go/reflect2 v0.0.0-20180228065516-1df9eeb2bb81 // indirect
+	github.com/opencontainers/go-digest v1.0.0-rc1 // indirect
+	github.com/pkg/errors v0.8.1 // indirect
+	github.com/spf13/pflag v1.0.0 // indirect
+	github.com/stretchr/testify v1.8.0 // indirect
+	golang.org/x/net v0.0.0-20180313215339-892bf7b0c6e2 // indirect
+	golang.org/x/text v0.3.0 // indirect
+	gopkg.in/inf.v0 v0.9.0 // indirect
+	gopkg.in/yaml.v2 v2.1.1 // indirect
+	k8s.io/apiextensions-apiserver v0.0.0-20180705231506-f584b16eb23b // indirect
+	k8s.io/apiserver v0.0.0-20180908143027-88d4601515c2 // indirect
+)
+

go.sum

@@ -0,0 +1,66 @@
+github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
+github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/docker/distribution v2.6.0-rc.1.0.20180313231215-34c706e75924+incompatible h1:gtbwnH3FQBXGdbq7N0+YMSQmth8laneDAejmkLCa7/o=
+github.com/docker/distribution v2.6.0-rc.1.0.20180313231215-34c706e75924+incompatible/go.mod h1:J2gT2udsDAN96Uj4KfcMRqY0/ypR+oyYUYmja8H+y+w=
+github.com/evanphx/json-patch v4.5.0+incompatible h1:ouOWdg56aJriqS0huScTkVXPC5IcNrDCXZ6OoTAWu7M=
+github.com/evanphx/json-patch v4.5.0+incompatible/go.mod h1:50XU6AFN0ol/bzJsmQLiYLvXMP4fmwYFNcr97nuDLSk=
+github.com/ghodss/yaml v1.0.0 h1:wQHKEahhL6wmXdzwWG11gIVCkOv05bNOh+Rxn0yngAk=
+github.com/ghodss/yaml v1.0.0/go.mod h1:4dBDuWmgqj2HViK6kFavaiC9ZROes6MMH2rRYeMEF04=
+github.com/gogo/protobuf v1.0.0 h1:2jyBKDKU/8v3v2xVR2PtiWQviFUyiaGk2rpfyFT8rTM=
+github.com/gogo/protobuf v1.0.0/go.mod h1:r8qH/GZQm5c6nD/R0oafs1akxWv10x8SbQlK7atdtwQ=
+github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b h1:VKtxabqXZkF25pY9ekfRL6a582T4P37/31XEstQ5p58=
+github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b/go.mod h1:SBH7ygxi8pfUlaOkMMuAQtPIUF8ecWP5IEl/CR7VP2Q=
+github.com/golang/protobuf v1.5.0/go.mod h1:FsONVRAS9T7sI+LIUmWTfcYkHO4aIWwzhcaSAoJOfIk=
+github.com/golang/protobuf v1.5.2 h1:ROPKBNFfQgOUMifHyP+KYbvpjbdoFNs+aK7DXlji0Tw=
+github.com/golang/protobuf v1.5.2/go.mod h1:XVQd3VNwM+JqD3oG2Ue2ip4fOMUkwXdXDdiuN0vRsmY=
+github.com/google/go-cmp v0.5.5/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
+github.com/google/gofuzz v0.0.0-20170612174753-24818f796faf h1:+RRA9JqSOZFfKrOeqr2z77+8R2RKyh8PG66dcu1V0ck=
+github.com/google/gofuzz v0.0.0-20170612174753-24818f796faf/go.mod h1:HP5RmnzzSNb993RKQDq4+1A4ia9nllfqcQFTQJedwGI=
+github.com/json-iterator/go v0.0.0-20180612202835-f2b4162afba3 h1:/UewZcckqhvnnS0C6r3Sher2hSEbVmM6Ogpcjen08+Y=
+github.com/json-iterator/go v0.0.0-20180612202835-f2b4162afba3/go.mod h1:+SdeFBvtyEkXs7REEP0seUULqWtbJapLOCVDaaPEHmU=
+github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd h1:TRLaZ9cD/w8PVh93nsPXa1VrQ6jlwL5oN8l14QlcNfg=
+github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
+github.com/modern-go/reflect2 v0.0.0-20180228065516-1df9eeb2bb81 h1:ImOHKpmdLPXWX5KSYquUWXKaopEPuY7TPPUo18u9aOI=
+github.com/modern-go/reflect2 v0.0.0-20180228065516-1df9eeb2bb81/go.mod h1:bx2lNnkwVCuqBIxFjflWJWanXIb3RllmbCylyMrvgv0=
+github.com/opencontainers/go-digest v1.0.0-rc1 h1:WzifXhOVOEOuFYOJAW6aQqW0TooG2iki3E3Ii+WN7gQ=
+github.com/opencontainers/go-digest v1.0.0-rc1/go.mod h1:cMLVZDEM3+U2I4VmLI6N8jQYUd2OVphdqWwCJHrFt2s=
+github.com/pkg/errors v0.8.1 h1:iURUrRGxPUNPdy5/HRSm+Yj6okJ6UtLINN0Q9M4+h3I=
+github.com/pkg/errors v0.8.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
+github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
+github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/spf13/pflag v1.0.0 h1:oaPbdDe/x0UncahuwiPxW1GYJyilRAdsPnq3e1yaPcI=
+github.com/spf13/pflag v1.0.0/go.mod h1:DYY7MBk1bdzusC3SYhjObp+wFpr4gzcvqqNjLnInEg4=
+github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
+github.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw=
+github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+github.com/stretchr/testify v1.8.0 h1:pSgiaMZlXftHpm5L7V1+rVB+AZJydKsMxsQBIJw4PKk=
+github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU=
+golang.org/x/net v0.0.0-20180313215339-892bf7b0c6e2 h1:TJaR9VOP3LgFdYGWBHWcHthl7B/d/dAQRK4LD8QHkPA=
+golang.org/x/net v0.0.0-20180313215339-892bf7b0c6e2/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
+golang.org/x/text v0.3.0 h1:g61tztE5qeGQ89tm6NTjjM9VPIm088od1l6aSorWRWg=
+golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
+golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
+google.golang.org/protobuf v1.26.0-rc.1/go.mod h1:jlhhOSvTdKEhbULTjvd4ARK9grFBp09yW+WbY/TyQbw=
+google.golang.org/protobuf v1.26.0 h1:bxAC2xTBsZGibn2RTntX0oH50xLsqy1OxA9tTL3p/lk=
+google.golang.org/protobuf v1.26.0/go.mod h1:9q0QmTI4eRPtz6boOQmLYwt+qCgq0jsYwAQnmE0givc=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/inf.v0 v0.9.0 h1:3zYtXIO92bvsdS3ggAdA8Gb4Azj0YU+TVY1uGYNFA8o=
+gopkg.in/inf.v0 v0.9.0/go.mod h1:cWUDdTG/fYaXco+Dcufb5Vnc6Gp2YChqWtbxRZE0mXw=
+gopkg.in/yaml.v2 v2.1.1 h1:fxK3tv8mQPVEgxu/S2LJ040LyqiajHt+syP0CdDS/Sc=
+gopkg.in/yaml.v2 v2.1.1/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
+gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
+gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
+gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
+k8s.io/api v0.0.0-20180828232432-12444147eb11 h1:aqrPN6pTxewBPHq/Z9myS4rmJ9lty8OwRBOI5/OXLmM=
+k8s.io/api v0.0.0-20180828232432-12444147eb11/go.mod h1:iuAfoD4hCxJ8Onx9kaTIt30j7jUFS00AXQi6QMi99vA=
+k8s.io/apiextensions-apiserver v0.0.0-20180705231506-f584b16eb23b h1:tfbI/gUiIpJ/JfgHqdILHduAbgl9Bxn0I4LWFGQkayo=
+k8s.io/apiextensions-apiserver v0.0.0-20180705231506-f584b16eb23b/go.mod h1:IxkesAMoaCRoLrPJdZNZUQp9NfZnzqaVzLhb2VEQzXE=
+k8s.io/apimachinery v0.0.0-20180619225948-e386b2658ed2 h1:NJEj7o7SKxpURej3uJ1QZJZCeRlRj21EatnCK65nrB4=
+k8s.io/apimachinery v0.0.0-20180619225948-e386b2658ed2/go.mod h1:ccL7Eh7zubPUSh9A3USN90/OzHNSVN6zxzde07TDCL0=
+k8s.io/apiserver v0.0.0-20180908143027-88d4601515c2 h1:S8ON/sPAArB4KB5BSq+HiiHkuYFyC+I7O4T3rIwPbiY=
+k8s.io/apiserver v0.0.0-20180908143027-88d4601515c2/go.mod h1:6bqaTSOSJavUIXUtfaR9Os9JtTCm8ZqH2SUl2S60C4w=
+k8s.io/kubernetes v1.11.0-alpha.0.0.20180912183811-efe960cdc41e h1:Ddn9BwC4rSg9vXOrRBwkMxwdJ2ntrJmSWA8lI987Czg=
+k8s.io/kubernetes v1.11.0-alpha.0.0.20180912183811-efe960cdc41e/go.mod h1:ocZa8+6APFNC2tX1DZASIbocyYT5jHzqFVsY5aoB7Jk=
+

lxcfs-image/Dockerfile

@@ -1,19 +1,24 @@
-FROM centos:7 as build
+FROM centos:7 as yesbuilder
 RUN yum -y update
-RUN yum -y install fuse-devel pam-devel wget install gcc automake autoconf libtool make
-ENV LXCFS_VERSION 3.1.2
+RUN yum -y install fuse-devel pam-devel wget install gcc automake autoconf libtool make cmake help2man && \
+    yum install --assumeyes python3-pip && \
+    pip3 install scikit-build && \
+    pip3 install jinja2 meson Ninja 
+ENV LXCFS_VERSION 5.0.2
 RUN wget https://linuxcontainers.org/downloads/lxcfs/lxcfs-$LXCFS_VERSION.tar.gz && \
-	mkdir /lxcfs && tar xzvf lxcfs-$LXCFS_VERSION.tar.gz -C /lxcfs  --strip-components=1 && \
-	cd /lxcfs && ./configure && make
+    mkdir /lxcfs && \
+    tar xzf lxcfs-$LXCFS_VERSION.tar.gz -C / && \
+    cd /lxcfs-5.0.2/ && \
+    meson setup -Dinit-script=systemd --prefix=/usr /lxcfs && \
+    meson compile -C /lxcfs
 
 FROM centos:7
 STOPSIGNAL SIGINT
-COPY --from=build /lxcfs/lxcfs /usr/local/bin/lxcfs
-COPY --from=build /lxcfs/.libs/liblxcfs.so /usr/local/lib/lxcfs/liblxcfs.so
-COPY --from=build /lxcfs/lxcfs /lxcfs/lxcfs
-COPY --from=build /lxcfs/.libs/liblxcfs.so /lxcfs/liblxcfs.so
-COPY --from=build /usr/lib64/libfuse.so.2.9.2 /lxcfs/libfuse.so.2.9.2
-COPY --from=build /usr/lib64/libulockmgr.so.1.0.1 /lxcfs/libulockmgr.so.1.0.1
+COPY --from=yesbuilder /lxcfs/lxcfs                    /lxcfs/lxcfs
+COPY --from=yesbuilder /lxcfs/liblxcfs.so              /lxcfs/liblxcfs.so
+COPY --from=yesbuilder /usr/lib64/libfuse.so.2.9.2     /lxcfs/libfuse.so.2.9.2
+COPY --from=yesbuilder /usr/lib64/libulockmgr.so.1.0.1 /lxcfs/libulockmgr.so.1.0.1
 
 COPY start.sh /
 CMD ["/start.sh"]
+

lxcfs-image/start.sh

@@ -9,17 +9,21 @@ nsenter -m/proc/1/ns/mnt [ -L /etc/mtab ] || \
 rm -rf /var/lib/lxcfs/*
 
 # Prepare
-mkdir -p /usr/local/lib/lxcfs /var/lib/lxcfs
+mkdir -p /usr/local/lib/lxcfs /var/lib/lxcfs /usr/lib64/lxcfs/
 
 # Update lxcfs
 cp -f /lxcfs/lxcfs /usr/local/bin/lxcfs
 cp -f /lxcfs/liblxcfs.so /usr/local/lib/lxcfs/liblxcfs.so
+cp -f /lxcfs/liblxcfs.so /usr/lib64/lxcfs/liblxcfs.so
 
-cp -f /lxcfs/libfuse.so.2.9.2 /usr/lib64/libfuse.so.2.9.2
+cp -f /lxcfs/libfuse.so.2.9.2     /usr/lib64/libfuse.so.2.9.2
 cp -f /lxcfs/libulockmgr.so.1.0.1 /usr/lib64/libulockmgr.so.1.0.1
 
-ln -s /usr/lib64/libfuse.so.2.9.2 /usr/lib64/libfuse.so.2
+rm -f /usr/lib64/libfuse.so.2 /usr/lib64/libulockmgr.so.1
+
+ln -s /usr/lib64/libfuse.so.2.9.2     /usr/lib64/libfuse.so.2
 ln -s /usr/lib64/libulockmgr.so.1.0.1 /usr/lib64/libulockmgr.so.1
 
 # Mount
 exec nsenter -m/proc/1/ns/mnt /usr/local/bin/lxcfs /var/lib/lxcfs/
+

lxcfs.go

@@ -54,21 +54,23 @@ var volumeMountsTemplate = []corev1.VolumeMount{
 		MountPath: "/proc/stat",
 		ReadOnly:  true,
 	},
-	{
-		Name:      "lxcfs-proc-swaps",
-		MountPath: "/proc/swaps",
-		ReadOnly:  true,
-	},
+    // docker-ce do not allow to mount 'swap' and 'loadavg'
+    // reference: https://github.com/docker/docker-ce/blob/master/components/engine/contrib/apparmor/template.go line 113
+	//{
+	//	Name:      "lxcfs-proc-swaps",
+	//	MountPath: "/proc/swaps",
+	//	ReadOnly:  true,
+	//},
 	{
 		Name:      "lxcfs-proc-uptime",
 		MountPath: "/proc/uptime",
 		ReadOnly:  true,
 	},
-	{
-		Name:      "lxcfs-proc-loadavg",
-		MountPath: "/proc/loadavg",
-		ReadOnly:  true,
-	},
+	//{
+	//	Name:      "lxcfs-proc-loadavg",
+	//	MountPath: "/proc/loadavg",
+	//	ReadOnly:  true,
+	//},
 	{
 		Name:      "lxcfs-sys-devices-system-cpu-online",
 		MountPath: "/sys/devices/system/cpu/online",
@@ -108,14 +110,14 @@ var volumesTemplate = []corev1.Volume{
 			},
 		},
 	},
-	{
-		Name: "lxcfs-proc-swaps",
-		VolumeSource: corev1.VolumeSource{
-			HostPath: &corev1.HostPathVolumeSource{
-				Path: "/var/lib/lxcfs/proc/swaps",
-			},
-		},
-	},
+	//{
+	//	Name: "lxcfs-proc-swaps",
+	//	VolumeSource: corev1.VolumeSource{
+	//		HostPath: &corev1.HostPathVolumeSource{
+	//			Path: "/var/lib/lxcfs/proc/swaps",
+	//		},
+	//	},
+	//},
 	{
 		Name: "lxcfs-proc-uptime",
 		VolumeSource: corev1.VolumeSource{
@@ -124,14 +126,14 @@ var volumesTemplate = []corev1.Volume{
 			},
 		},
 	},
-	{
-		Name: "lxcfs-proc-loadavg",
-		VolumeSource: corev1.VolumeSource{
-			HostPath: &corev1.HostPathVolumeSource{
-				Path: "/var/lib/lxcfs/proc/loadavg",
-			},
-		},
-	},
+	//{
+	//	Name: "lxcfs-proc-loadavg",
+	//	VolumeSource: corev1.VolumeSource{
+	//		HostPath: &corev1.HostPathVolumeSource{
+	//			Path: "/var/lib/lxcfs/proc/loadavg",
+	//		},
+	//	},
+	//},
 	{
 		Name: "lxcfs-sys-devices-system-cpu-online",
 		VolumeSource: corev1.VolumeSource{