Ask questionsFlake: `iptables: create-instance-chains: iptables: Memory allocation problem.`

Flake Report

Occasionally it seems like Garden fails here when Concourse is trying to create a task container.


  • PCI team in the Toronto office saw this in their Concourse ( 4.2.1 ) environment as well


  • The worker metrics don't show any abnormalities in terms of memory utilization

Additional Context

@kcmannem has a stack dump from PCI's issue

Version Info

  • Concourse version: 4.2.1 & 5.0.0
  • Deployment type (BOSH/Docker/binary): BOSH
  • Infrastructure/IaaS: GCP
  • Did this used to work? 🤷‍♂️

Answer questions danail-branekov

Hi Concourse friends,

While investigating probably unrelated thing in Garden we managed to reproduce consistently that issue and maybe you would be interested in the scenario.

We created an AWS concourse deployment (if version matters, we used v.4.2.2) with one worker on a t3.nano VM (0.5G of memory) - we really wanted to put memory pressure on that worker. Then we created the following dummy task:

  type: docker-image
    repository: cfgarden/garden-ci
    tag: '2.0.11'

platform: linux

  path: /bin/echo

Then we ran 8 parallel infinite loops running the same task over and over again.

for i in `seq 0 200` ; do echo Attempt $i && fly --target slab-ci e -p -c "<the task yml>"; done

Note that our endless loop runs fine when run in 4 instances

Github User Rank List