forked from wrenn/wrenn
Migrate the entire VM layer from Firecracker to Cloud Hypervisor (CH). CH provides native snapshot/restore via its HTTP API, eliminating the need for custom UFFD handling, memfile processing, and snapshot header management that Firecracker required. Key changes: - Remove fc.go, jailer.go (FC process management) - Remove internal/uffd/ package (userfaultfd lazy page loading) - Remove snapshot/header.go, mapping.go, memfile.go (FC snapshot format) - Add ch.go (CH HTTP API client over Unix socket) - Add process.go (CH process lifecycle with unshare+netns) - Add chversion.go (CH version detection) - Refactor sandbox manager: remove UFFD socket tracking, snapshot parent/diff chaining, FC-specific balloon logic; add crash watcher - Simplify snapshot/local.go to CH's native snapshot format - Update VM config: FirecrackerBin → VMMBin, new CH-specific fields - Update envdclient, devicemapper, network for CH compatibility
130 lines
3.4 KiB
Go
130 lines
3.4 KiB
Go
package vm
|
|
|
|
import "fmt"
|
|
|
|
// VMConfig holds the configuration for creating a Cloud Hypervisor microVM.
|
|
type VMConfig struct {
|
|
// SandboxID is the unique identifier for this sandbox (e.g., "cl-a1b2c3d4").
|
|
SandboxID string
|
|
|
|
// TemplateID is the template UUID string, passed to envd via PostInit.
|
|
TemplateID string
|
|
|
|
// KernelPath is the path to the uncompressed Linux kernel (vmlinux).
|
|
KernelPath string
|
|
|
|
// RootfsPath is the path to the rootfs block device for this sandbox.
|
|
// Typically a dm-snapshot device (e.g., /dev/mapper/wrenn-sb-a1b2c3d4).
|
|
RootfsPath string
|
|
|
|
// VCPUs is the number of virtual CPUs to allocate (default: 1).
|
|
VCPUs int
|
|
|
|
// MemoryMB is the amount of RAM in megabytes (default: 512).
|
|
MemoryMB int
|
|
|
|
// NetworkNamespace is the name of the network namespace to launch
|
|
// Cloud Hypervisor inside (e.g., "ns-1"). The namespace must already exist
|
|
// with a TAP device configured.
|
|
NetworkNamespace string
|
|
|
|
// TapDevice is the name of the TAP device inside the network namespace
|
|
// that Cloud Hypervisor will attach to (e.g., "tap0").
|
|
TapDevice string
|
|
|
|
// TapMAC is the MAC address for the TAP device.
|
|
TapMAC string
|
|
|
|
// GuestIP is the IP address assigned to the guest VM (e.g., "169.254.0.21").
|
|
GuestIP string
|
|
|
|
// GatewayIP is the gateway IP (the TAP device's IP, e.g., "169.254.0.22").
|
|
GatewayIP string
|
|
|
|
// NetMask is the subnet mask for the guest network (e.g., "255.255.255.252").
|
|
NetMask string
|
|
|
|
// VMMBin is the path to the cloud-hypervisor binary.
|
|
VMMBin string
|
|
|
|
// SocketPath is the path for the Cloud Hypervisor API Unix socket.
|
|
SocketPath string
|
|
|
|
// SandboxDir is the tmpfs mount point for per-sandbox files inside the
|
|
// mount namespace (e.g., "/ch-vm").
|
|
SandboxDir string
|
|
|
|
// InitPath is the path to the init process inside the guest.
|
|
// Defaults to "/sbin/init" if empty.
|
|
InitPath string
|
|
|
|
// SnapshotDir is the path to the snapshot directory for restore.
|
|
// Only set when restoring from a snapshot.
|
|
SnapshotDir string
|
|
}
|
|
|
|
func (c *VMConfig) applyDefaults() {
|
|
if c.VCPUs == 0 {
|
|
c.VCPUs = 1
|
|
}
|
|
if c.MemoryMB == 0 {
|
|
c.MemoryMB = 512
|
|
}
|
|
if c.VMMBin == "" {
|
|
c.VMMBin = "/usr/local/bin/cloud-hypervisor"
|
|
}
|
|
if c.SocketPath == "" {
|
|
c.SocketPath = fmt.Sprintf("/tmp/ch-%s.sock", c.SandboxID)
|
|
}
|
|
if c.SandboxDir == "" {
|
|
c.SandboxDir = "/tmp/ch-vm"
|
|
}
|
|
if c.TapDevice == "" {
|
|
c.TapDevice = "tap0"
|
|
}
|
|
if c.TapMAC == "" {
|
|
c.TapMAC = "02:FC:00:00:00:05"
|
|
}
|
|
if c.InitPath == "" {
|
|
c.InitPath = "/usr/local/bin/wrenn-init"
|
|
}
|
|
}
|
|
|
|
// kernelArgs builds the kernel command line for the VM.
|
|
func (c *VMConfig) kernelArgs() string {
|
|
// ip= format: <client-ip>::<gw-ip>:<netmask>:<hostname>:<iface>:<autoconf>
|
|
ipArg := fmt.Sprintf("ip=%s::%s:%s:capsule:eth0:off",
|
|
c.GuestIP, c.GatewayIP, c.NetMask,
|
|
)
|
|
|
|
return fmt.Sprintf(
|
|
"console=ttyS0 root=/dev/vda rw reboot=k panic=1 quiet loglevel=1 init_on_free=1 clocksource=kvm-clock init=%s %s",
|
|
c.InitPath, ipArg,
|
|
)
|
|
}
|
|
|
|
func (c *VMConfig) validate() error {
|
|
if c.SandboxID == "" {
|
|
return fmt.Errorf("SandboxID is required")
|
|
}
|
|
if c.KernelPath == "" {
|
|
return fmt.Errorf("KernelPath is required")
|
|
}
|
|
if c.RootfsPath == "" {
|
|
return fmt.Errorf("RootfsPath is required")
|
|
}
|
|
if c.NetworkNamespace == "" {
|
|
return fmt.Errorf("NetworkNamespace is required")
|
|
}
|
|
if c.GuestIP == "" {
|
|
return fmt.Errorf("GuestIP is required")
|
|
}
|
|
if c.GatewayIP == "" {
|
|
return fmt.Errorf("GatewayIP is required")
|
|
}
|
|
if c.NetMask == "" {
|
|
return fmt.Errorf("NetMask is required")
|
|
}
|
|
return nil
|
|
}
|