adb7b29354
chore: release ( #341 )
...
Co-authored-by: edera-cultivation[bot] <165992271+edera-cultivation[bot]@users.noreply.github.com>
2024-08-22 23:43:03 +00:00
bd448ee8d9
fix(network): allocate host ip from allocation pool ( #353 )
2024-08-22 22:52:38 +00:00
1647a07226
fix(daemon): turn off trace logging ( #352 )
2024-08-21 22:04:15 +00:00
151b43eeec
feature(zone): kernel command line control on launch ( #351 )
2024-08-21 20:51:09 +00:00
6a6b5b6e0b
feature(xen-preflight): test for hypervisor presence explicitly and error if missing ( #347 )
...
Fixes #309
2024-08-20 00:22:28 +00:00
2ab2cda937
Add support for reading hypervisor console ( #344 )
...
* feature(xencall): add hypervisor SYSCTL_readconsole definitions
* feature(hypervisor-dmesg): xencall: add read_console_ring_raw hypercall wrapper
* feature(hypervisor-dmesg): protobuf: add ReadHypervisorConsoleRing RPC
* feature(hypervisor-dmesg): runtime: add read_hypervisor_console wrapper
* feature(hypervisor-dmesg): daemon: add ReadHypervisorConsoleRing rpc implementation
* feature(hypervisor-dmesg): ctl: add host hypervisor-messages command to get hypervisor messages
* feature(hypervisor-dmesg): cli: rename hypervisor-messages command to hv-console
* feature(hypervisor-dmesg): proto: change ReadHypervisorConsoleRing to ReadHypervisorConsole
* feature(hypervisor-dmesg): fix up kratactl protobuf calls
2024-08-19 23:49:02 +00:00
6093627bdd
cleanup(ctl): move logic for branching ctl run steps into ControlCommands ( #342 )
2024-08-16 02:32:30 +00:00
1d75dfb88a
chore: release ( #334 )
...
Co-authored-by: edera-cultivation[bot] <165992271+edera-cultivation[bot]@users.noreply.github.com>
2024-08-15 19:06:56 +00:00
18bf370f74
feature(krata): first pass on cpu hotplug support ( #340 )
...
* fix(runtime): adjust memory resources inside a transaction
* feature(krata): first pass on cpu hotplug support
2024-08-15 08:06:04 +00:00
bf3b73bf24
feature(exec): implement tty support ( fixes #335 ) ( #336 )
2024-08-14 19:45:59 +00:00
87530edf70
feature(krata): dynamic resource allocation ( closes #298 ) ( #333 )
2024-08-14 08:14:49 +00:00
1dca770091
chore: release ( #306 )
...
Co-authored-by: edera-cultivation[bot] <165992271+edera-cultivation[bot]@users.noreply.github.com>
2024-08-14 06:37:52 +00:00
01a94ad23e
feature(krata): prepare for workload rework ( #276 )
...
* chore(code): simple code cleanup
* chore(code): additional code cleanup
* feature(krata): rework api and make ip assignment persistent to database
* rework and cleanup
* fix daemon config references
2024-08-14 06:17:47 +00:00
5ec3d9d5c1
xencall: use correct op for setting cpufreq governor ( #327 )
2024-08-14 03:11:08 +00:00
1cf03a460e
fix(idm): reimplement packet processing algorithm ( #330 )
...
* chore(xen): rewrite event channel code
* fix(idm): repair idm bugs on the file backend
2024-08-13 23:18:27 +00:00
0358c9c775
fix(power-trap-eacces): gracefully handle hypercall errors in power management ( #325 )
...
* daemon: reenable built-in power management policy
* xenruntime: gracefully handle power management errors
2024-08-13 08:22:05 +00:00
6bf3741ec9
chore(o11y): add more debug logs to daemon & runtime ( #318 )
...
This change adds debug log lines to make it easier to tell where issues
are occuring during startup.
2024-08-08 19:11:51 +00:00
53059e8cca
fix(xenbus): avoid fd close race by forgetting copy of handle ( #314 )
...
This change addresses a race condition where the read-copy of a raw FD
is closed while the write-copy is still in use. Now the read-copy is not
closed, by utilizing mem::forget.
Co-authored-by: Alex Zenla <alex@edera.dev >
2024-08-07 23:55:04 +00:00
d469da4d9b
chore: release ( #303 )
...
Co-authored-by: edera-cultivation[bot] <165992271+edera-cultivation[bot]@users.noreply.github.com>
2024-08-06 01:57:25 +00:00
99091df3cf
fix(zone): waitpid should be limited when no child processes exist ( fixes #304 ) ( #305 )
2024-08-05 18:48:30 -07:00
08b30c2eaa
chore: release ( #279 )
...
Co-authored-by: edera-cultivation[bot] <165992271+edera-cultivation[bot]@users.noreply.github.com>
2024-08-06 00:48:44 +00:00
224fdbe227
fix(idm): process all idm messages in the same frame and use childwait exit notification for exec ( fixes #290 ) ( #302 )
2024-08-06 00:29:09 +00:00
8216ab3602
feature(oci): use local index as resolution cache when appropriate, fixes #289 ( #294 )
2024-07-31 23:05:15 +00:00
8806a79161
zone: init: mount /proc with hidepid=1 ( #277 )
...
Mounting procfs with hidepid=1 denies access to procfs directories
for processes not accessible by the current user credentials.
Signed-off-by: Ariadne Conill <ariadne@ariadne.space >
2024-07-22 06:11:36 +00:00
398e555bd3
chore: release ( #249 )
...
Co-authored-by: edera-cultivation[bot] <165992271+edera-cultivation[bot]@users.noreply.github.com>
2024-07-19 06:34:46 +00:00
75901233b1
feature(kratactl): rework cli to use subcommands ( #268 )
2024-07-19 06:13:29 +00:00
5ee1035896
feature(krata): rename guest to zone ( #266 )
2024-07-19 03:47:18 +00:00
b57d95c610
chore(deps): upgrade dependencies, fix hyper io traits issue ( #252 )
2024-07-16 21:15:07 +00:00
07cceed0c8
chore: release ( #202 )
...
Co-authored-by: edera-cultivation[bot] <165992271+edera-cultivation[bot]@users.noreply.github.com>
2024-07-12 23:28:49 +00:00
04401c1d07
fix(runtime): use iommu only if devices are needed ( #243 )
2024-07-10 04:02:53 +00:00
b2dd4af09b
chore(powermgmt): disable for now as a hackfix ( #242 )
...
Signed-off-by: Ariadne Conill <ariadne@dereferenced.org >
2024-07-10 03:47:02 +00:00
fe8e1d5521
feature(oci): add configuration value for oci seed file ( #220 )
2024-07-01 19:36:21 +00:00
71301ee689
fix(daemon): decrease rate of runtime reconcile ( #224 )
2024-07-01 09:09:50 +00:00
0e64d4ea79
feature(power-management-defaults): set an initial power management policy ( #219 )
...
The default policy enables performance mode and SMT.
Signed-off-by: Ariadne Conill <ariadne@ariadne.space >
2024-07-01 03:37:17 +00:00
35d585e3b1
fix(power): ensure that xeon cpus with cpu gaps are not detected as p/e compatible ( #218 )
2024-06-30 05:25:15 +00:00
a79320b4fc
Power management core functionality ( #217 )
...
* feat(power-management-core): add core power management control messages for kratad
Signed-off-by: Ariadne Conill <ariadne@ariadne.space >
* feat(power-management-core): expose xen hypercall client publicly
Signed-off-by: Ariadne Conill <ariadne@ariadne.space >
* feat(power-management-core): add indexmap to kratart crate dependencies
Signed-off-by: Ariadne Conill <ariadne@ariadne.space >
* feat(power-management-core): implement power management core in kratart
Signed-off-by: Ariadne Conill <ariadne@ariadne.space >
* feat(power-management-core): bubble up runtime context in daemon/control service
Signed-off-by: Ariadne Conill <ariadne@ariadne.space >
* feat(power-management-core): expose performance/efficiency core data in protobuf
Signed-off-by: Ariadne Conill <ariadne@ariadne.space >
* feat(power-management-core): fix up some protobuf message names
Signed-off-by: Ariadne Conill <ariadne@ariadne.space >
* feat(power-management-core): fix up performance core heuristic
Signed-off-by: Ariadne Conill <ariadne@ariadne.space >
* feat(power-management-core): implement GetHostCpuTopology RPC
Signed-off-by: Ariadne Conill <ariadne@ariadne.space >
* feat(power-management-core): hackfix to get sysctls working with tokio
Signed-off-by: Ariadne Conill <ariadne@ariadne.space >
* feat(power-management-core): borrow the PowerManagementContext when calling functions belonging to it
Signed-off-by: Ariadne Conill <ariadne@ariadne.space >
* feat(power-management-core): remove GetHostPowerManagementPolicy RPC for now
Signed-off-by: Ariadne Conill <ariadne@ariadne.space >
* feat(power-management-core): implement SetHostPowerManagementPolicy RPC
Signed-off-by: Ariadne Conill <ariadne@ariadne.space >
* feat(power-management-core): add cpu-topology command
Signed-off-by: Ariadne Conill <ariadne@ariadne.space >
* feat(power-management-core): appease format checking
Signed-off-by: Ariadne Conill <ariadne@ariadne.space >
* fix(runtime): cpu topology corrections
---------
Signed-off-by: Ariadne Conill <ariadne@ariadne.space >
Co-authored-by: Alex Zenla <alex@edera.dev >
2024-06-29 15:43:08 -07:00
b42b730b77
feature(xen): implement power management operations ( #215 )
2024-06-28 22:13:57 +00:00
6f50167798
Use native loopdev implementation instead of loopdev-3 ( #209 )
...
* feature(loopdev): add native loop device implementation
The previous loop device implementation required bindgen for no reason,
making cross-compilation difficult.
Signed-off-by: Ariadne Conill <ariadne@ariadne.space >
* feat(runtime): use native krata-loopdev instead of loopdev-3
Signed-off-by: Ariadne Conill <ariadne@ariadne.space >
* chore: update cargo workspace lock file
Signed-off-by: Ariadne Conill <ariadne@ariadne.space >
* chore: appease formatting linter
Signed-off-by: Ariadne Conill <ariadne@ariadne.space >
---------
Signed-off-by: Ariadne Conill <ariadne@ariadne.space >
2024-06-26 10:29:58 -07:00
88a62441b1
Initial fluentd support ( #205 )
...
* fix(hack): use sudo -E when running Rust binaries
This makes it possible to pass envvars to the Krata runtime
* feat(o11y): add fluent sink to logs
This change adds fluent logging as an opt-in feature. Setting
`KRATA_LOG_FLUENT` with an address:port will start a TCP connection,
sending logs.
A later changes will respect a URI scheme and use structured logging.
2024-06-25 19:10:57 +00:00
4175e1e3fe
chore: release ( #181 )
...
Co-authored-by: edera-cultivation[bot] <165992271+edera-cultivation[bot]@users.noreply.github.com>
2024-06-24 05:01:32 +00:00
9a45d754bf
chore(xenplatform): elf loader should async load the file ( #197 )
...
* fix(build): remove unused environment variables
* chore(xenplatform): elf loader should async load the file
2024-06-23 12:57:01 +00:00
ef068e790c
chore(xen): move device creation into transaction interface ( #196 )
...
* chore(xen): move domain creation to xenplatform
* chore(xen): move device transactions into separate interface
2024-06-21 17:38:19 +00:00
6f39f115b7
chore(xen): split platform support into separate crate ( #195 )
2024-06-21 08:10:45 +00:00
23c7302c04
docs: first pass of krata as an isolation engine
2024-06-20 19:57:18 -07:00
e219f3adf1
feature(xen): dynamic platform architecture ( #194 )
...
* wip hvm
* feat: move platform stuff all into it's own thing
* hvm work
* more hvm work
* more hvm work
* feat: rework to support multiple platforms
* hvm nonredist
* more hvm work
* more hvm work
* pvh work
* work on loading cmdline
* implement initrd loading for pvh
* partially working pvh support
* fix merge issues
* pvh works!
* swap over to pv support
* remove old kernel stuff
* fix support for pv
* pvh is gone for now
* fix(runtime): debug should be respected
* fix(xen): arm64 is currently unsupported, treat it as such at runtime
* fix(examples): use architecture cfg for boot example
* fix(x86): use IOMMU only when needed for passthrough
* chore(build): print kernel architecture during fetch
2024-06-21 02:42:45 +00:00
d46aa878af
feat(build): fetch kernels from image registry instead of building the kernel ( #156 )
...
Now that we have the kernel build infrastructure at https://github.com/edera-dev/kernels
it makes sense to drop building the kernel and download the kernel images directly.
This change introduces a ./hack/kernel/fetch.sh script which is backed by crates/build
We utilize the OCI infrastructure itself to download the kernel image. The DEV guide
has been updated to include calling the fetch script, and the OS builder now uses this
method instead. Due to the lack of need for the kernel build infra to exist here now,
it has also been removed. This should significantly speed up full builds.
This change will also enable us to turn on os build workflows for all PRs. We should
likely make the OS status checks required once this is merged.
2024-05-16 08:40:58 +00:00
fc18bc6a18
feat(runtime): concurrent ip allocation ( #151 )
...
Previously, krata runtime allowed a single permit when performing operations.
This was necessary because the only IP allocation storage was xenstore, and
the commit of xenstore data happens after allocation. This commit introduces
IpVendor, a service which vends IPv4 and IPv6 addresses to guests using a
linear address strategy within an IP network space. The IpVendor table is
initialized from xenstore, and from there on out, the in-memory table
is the source of truth. This implementation is not perfect, but it will allow
us to lift the single permit limit, allowing guests to start concurrently.
2024-05-14 18:29:12 +00:00
75011ef8cb
fix(oci): use mirror.gcr.io as a mirror to docker hub ( #141 )
2024-05-09 17:30:27 +00:00
b4f26787d4
fix(oci): remove file size limit ( #142 )
...
the addons.squashfs file often is fairly large due to the GPU modules containing a lot of code
2024-05-08 19:09:33 +00:00
51dff0361d
fix(xenclient): use a single transaction for device setup ( #130 )
2024-05-05 20:39:53 +00:00
