mirror of
https://github.com/vhaudiquet/ecrou.git
synced 2026-11-12 22:22:44 +00:00
vhaudiquet
e075d52f91
The engine is libkrun.1.dylib, dlopen'd from the Homebrew kegs when the loader's own search fails (bare sonames never reach the brew prefix); the probe becomes a per-platform hypervisor probe — KVM on Linux, sysctl + a real hv_vm_create on macOS, so an entitlement denial (HV_DENIED) names the re-sign fix instead of surfacing as an opaque krun_start_enter EINVAL. Tool lookup (mke2fs, debugfs) gains the same keg fallback, and dyld_fallback_dirs() collects the kegs the bare-soname dlopens (libkrunfw, libarchive) need in DYLD_FALLBACK_LIBRARY_PATH. The machine child's parent-death contract moves to a kqueue NOTE_EXIT watcher: macOS has no PR_SET_PDEATHSIG, and SIGKILL-on-parent-exit is what keeps a killed caller from stranding a booted machine.
ecrou
a small microVM runtime based on libkrun
Try ecrou in the terminal
Installation
ecrou is available as a strictly confined snap:
sudo snap install ecrou
sudo snap connect ecrou:kvm
Usage
$ ecrou run -it ubuntu
root@ecrou-vm-m2glhl:/#
Embed ecrou into your project
ecrou is both a library and a tiny CLI frontend around it. The library is embeddable into any project, allowing to use microVMs easily.
Rust
ecrou is a Rust library, which can just be called:
use ecrou::vm::RunOptions;
use ecrou::NoProgress;
fn main() -> ecrou::Result<std::process::ExitCode> {
let code = ecrou::vm::run(
&RunOptions {
image: "ubuntu:resolute".into(),
command: vec!["uname".into(), "-a".into()],
..RunOptions::default()
},
&NoProgress,
)?;
Ok(std::process::ExitCode::from(code.clamp(0, 255) as u8))
}