[ws-daemon] Support rootfs quota

[csweichel]

Description

This PR adds XFS-based quota support to the rootfs of containers.
Ephemeral storage in Kubernetes does not encompass this.

How to test

• Run on a cluster with XFS on the container root FS
• Set the containerRootfsQuota to a value other than zero in the config
• Start a workspace and look for errors from ws-daemon
• Check the df -h output in the workspace

Release Notes

NONE

[roboquat]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
To complete the pull request process, please ask for approval from csweichel after the PR has been reviewed.

No associated issue. Update pull-request body to add a reference to an issue, or get approval with /approve no-issue

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

• components/ws-daemon/OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[codecov]

Codecov Report

Merging #7260 (08feef9) into main (38c3d8e) will decrease coverage by 2.75%.
The diff coverage is n/a.

@@            Coverage Diff             @@
##             main    #7260      +/-   ##
==========================================
- Coverage   19.04%   16.29%   -2.76%     
==========================================
  Files           2       26      +24     
  Lines         168     3320    +3152     
==========================================
+ Hits           32      541     +509     
- Misses        134     2717    +2583     
- Partials        2       62      +60     

Flag	Coverage Δ
components-local-app-app-linux-amd64	?
components-local-app-app-linux-arm64	?
components-local-app-app-windows-386	?
components-local-app-app-windows-amd64	?
components-local-app-app-windows-arm64	?
components-ws-daemon-app	21.96% <ø> (?)
components-ws-daemon-lib	21.96% <ø> (?)
installer-raw-app	5.76% <ø> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

Impacted Files	Coverage Δ
components/local-app/pkg/auth/auth.go
components/local-app/pkg/auth/pkce.go
installer/pkg/components/ws-manager/role.go	0.00% <0.00%> (ø)
installer/pkg/components/ws-manager/configmap.go	29.71% <0.00%> (ø)
installer/pkg/common/ca.go	0.00% <0.00%> (ø)
components/ws-daemon/pkg/quota/xfs.go	45.05% <0.00%> (ø)
components/ws-daemon/pkg/content/config.go	33.33% <0.00%> (ø)
components/ws-daemon/pkg/content/service.go	0.00% <0.00%> (ø)
installer/pkg/common/render.go	0.00% <0.00%> (ø)
installer/pkg/common/objects.go	0.00% <0.00%> (ø)
... and 18 more

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

[stale]

This pull request has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[csweichel]

/werft run with-vm

👍 started the job as gitpod-build-cw-rootfs-quota.5

[csweichel]

/werft run with-vm=true

👍 started the job as gitpod-build-cw-rootfs-quota.6

[stale]

This pull request has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[kylos101]

Hey @csweichel , do we still need this PR? I've temporarily removed it from the Workspace Team project to begin shrinking the Scheduled column.

If yes, I'd like to find a home (in the form of an epic). Does it fit nicely into an existing one? I skimmed the list, and nothing jumped out at me.

Also, checkout this epic home:

[csweichel]

Yep, we still want this PR - we just need to find time to see it through.
I don't think it warrants an epic on its own, but would fit in a general "improved resource isolation" story.

[utam0k]

@csweichel @kylos101 I think we have already implemented this feature, right?