mirror of
https://github.com/vhaudiquet/ecrou.git
synced 2026-11-12 22:22:44 +00:00
vhaudiquet
583d188474
The rootfs boots from a virtio-blk disk now, and the blk feature is what compiles the device into libkrun - without it krun_add_disk and krun_set_root_disk_remount have no symbols and every run fails at lookup. e2fsprogs joins the stage set for mkfs.ext4 (the cache image build) and debugfs (per-run provisioning and the control-file read); core26 ships 1.47.4, which knows how to build from a compressed tarball.
138 lines
4.5 KiB
YAML
138 lines
4.5 KiB
YAML
name: ecrou
|
|
base: core26
|
|
adopt-info: ecrou
|
|
title: ecrou
|
|
summary: a small microVM runtime based on libkrun
|
|
description: |
|
|
ecrou boots disposable Linux environments as one-shot microVMs on
|
|
libkrun: it resolves an image reference, boots the microVM,
|
|
runs the command, and throws the machine away.
|
|
Volume sharing `-v` and other features are available.
|
|
|
|
## Install
|
|
|
|
ecrou is strictly confined.
|
|
|
|
sudo snap install ecrou
|
|
|
|
## First run
|
|
|
|
Connect the KVM interface:
|
|
|
|
sudo snap connect ecrou:kvm
|
|
|
|
Then run a microVM:
|
|
|
|
ecrou run -it ubuntu
|
|
|
|
## Diagnostics
|
|
|
|
`ecrou probe` reports what a run would find: KVM, libkrun, the
|
|
cache directory.
|
|
|
|
## Configuration and cache
|
|
|
|
- image cache: `~/snap/ecrou/common/cache/ecrou`
|
|
|
|
license: MIT
|
|
website: https://github.com/vhaudiquet/ecrou
|
|
contact: https://github.com/vhaudiquet/ecrou/issues
|
|
issues: https://github.com/vhaudiquet/ecrou/issues
|
|
source-code: https://github.com/vhaudiquet/ecrou
|
|
grade: stable
|
|
confinement: strict
|
|
|
|
platforms:
|
|
amd64:
|
|
arm64:
|
|
riscv64:
|
|
|
|
apps:
|
|
ecrou:
|
|
command: bin/ecrou
|
|
command-chain: [command-chain/ecrou-env]
|
|
plugs:
|
|
- home
|
|
- network
|
|
- kvm
|
|
|
|
parts:
|
|
ecrou:
|
|
plugin: rust
|
|
source: .
|
|
rust-channel: "1.98.1"
|
|
rust-path: [crates/ecrou-cli]
|
|
build-packages: [cmake, perl]
|
|
# mkfs.ext4 builds the cache image and debugfs provisions it; both
|
|
# ship in e2fsprogs and run as child processes of the binary.
|
|
stage-packages: [e2fsprogs]
|
|
override-pull: |
|
|
craftctl default
|
|
# [workspace.package] version — the single `version = "..."` at
|
|
# the head of the workspace manifest. A missed match fails the
|
|
# pack loudly instead of packing a versionless snap.
|
|
craftctl set version="$(sed -n 's/^version = "\(.*\)"/\1/p' \
|
|
"$CRAFT_PART_SRC/Cargo.toml")"
|
|
override-build: |
|
|
craftctl default
|
|
# The home interface stops at dotfiles, so ~/.cache is
|
|
# unreachable under strict confinement. Point the XDG cache
|
|
# lookup (the dirs crate honors the variable) into the snap's
|
|
# durable area, shared across refreshes.
|
|
mkdir -p "$CRAFT_PART_INSTALL/command-chain"
|
|
cat > "$CRAFT_PART_INSTALL/command-chain/ecrou-env" <<'EOF'
|
|
#!/bin/sh
|
|
XDG_CACHE_HOME="$SNAP_USER_COMMON/cache"
|
|
export XDG_CACHE_HOME
|
|
mkdir -p "$XDG_CACHE_HOME"
|
|
exec "$@"
|
|
EOF
|
|
chmod 755 "$CRAFT_PART_INSTALL/command-chain/ecrou-env"
|
|
|
|
libkrun:
|
|
plugin: rust
|
|
source: https://github.com/containers/libkrun
|
|
source-type: git
|
|
source-tag: v1.19.7
|
|
source-depth: 1
|
|
rust-channel: "1.98.1"
|
|
override-build: |
|
|
# blk turns on the virtio-blk device: the rootfs crosses as a
|
|
# raw ext4 image (krun_add_disk + krun_set_root_disk_remount),
|
|
# which is what makes guest-side chown work.
|
|
cargo build --release -p libkrun --features net,blk
|
|
install -Dm755 target/release/libkrun.so \
|
|
"$CRAFT_PART_INSTALL/lib/libkrun.so.1.19.7"
|
|
ln -s libkrun.so.1.19.7 "$CRAFT_PART_INSTALL/lib/libkrun.so.1"
|
|
|
|
libkrunfw:
|
|
plugin: nil
|
|
# libkrunfw5 ships only in stonking universe today, not in any LTS
|
|
# base, so the .deb comes straight from the Ubuntu archive — one
|
|
# flavor per target arch. riscv64 lives on the ports archive
|
|
# (archive.ubuntu.com carries amd64 and arm64 binaries only). The
|
|
# library embeds its kernel and has no external symbols, so it
|
|
# runs on the base's older glibc.
|
|
build-packages: [curl]
|
|
override-pull: |
|
|
arch="$CRAFT_ARCH_BUILD_FOR"
|
|
case "$arch" in
|
|
amd64)
|
|
digest="924cd545080aaf5da66740d12a51b7a5cbd9a5c0b502d21cbef9bc82bf1c8b6b"
|
|
pool="https://archive.ubuntu.com/ubuntu/pool/universe/libk/libkrunfw" ;;
|
|
arm64)
|
|
digest="9570e82feac79fd41a6a9674cc02a9b2f09948ac30ad480d05fc73a957843e56"
|
|
pool="https://archive.ubuntu.com/ubuntu/pool/universe/libk/libkrunfw" ;;
|
|
riscv64)
|
|
digest="1f8b52a00eafdf52d2295eeab7dd527736788ce4d3aa97aecc18e3f4b66f413f"
|
|
pool="https://ports.ubuntu.com/ubuntu-ports/pool/universe/libk/libkrunfw" ;;
|
|
*) echo "no libkrunfw5 .deb mapped for $arch" >&2; exit 1 ;;
|
|
esac
|
|
curl -fL -o libkrunfw5.deb "$pool/libkrunfw5_5.5.0+ds-1_${arch}.deb"
|
|
echo "$digest libkrunfw5.deb" | sha256sum -c
|
|
override-build: |
|
|
dpkg -x libkrunfw5.deb unpack
|
|
install -Dm755 "unpack/usr/lib/${CRAFT_ARCH_TRIPLET_BUILD_FOR}/libkrunfw.so.5.5.0" \
|
|
"$CRAFT_PART_INSTALL/lib/libkrunfw.so.5.5.0"
|
|
ln -s libkrunfw.so.5.5.0 "$CRAFT_PART_INSTALL/lib/libkrunfw.so.5"
|