monocore 0.2.1

`monocore` is a secure MicroVM provisioning system for running untrusted code in isolated environments.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80

use anyhow::Result;
use monocore::{
    config::{Group, GroupEnv, GroupVolume, Monocore, Service, VolumeMount},
    orchestration::Orchestrator,
    utils,
};

#[tokio::main]
async fn main() -> Result<()> {
    // Initialize tracing
    tracing_subscriber::fmt()
        .with_max_level(tracing::Level::DEBUG)
        .init();

    // Set up directories
    let build_dir = format!("{}/build", env!("CARGO_MANIFEST_DIR"));
    let oci_dir = format!("{}/oci", build_dir);
    let rootfs_dir = format!("{}/rootfs", build_dir);

    // Parse image reference
    let image_ref = "library/alpine:latest";
    let (_, _, rootfs_name) = utils::parse_image_ref(image_ref).unwrap();
    let rootfs_dir = format!("{}/reference/{}", rootfs_dir, rootfs_name);

    // Pull and merge Alpine image
    utils::pull_docker_image(&oci_dir, image_ref).await?;
    utils::merge_image_layers(&oci_dir, &rootfs_dir, image_ref).await?;

    // Create a group configuration using builder
    let group = Group::builder()
        .name("grouped")
        .local_only(true)
        .volumes(vec![GroupVolume::builder()
            .name("ref_vols")
            .path("/Users/steveakinyemi/Desktop/Personal/test2")
            .build()])
        .envs(vec![GroupEnv::builder()
            .name("ref_envs")
            .envs(vec!["REFERENCE=steve".parse()?])
            .build()])
        .build();

    // Create a service configuration using builder
    let service = Service::builder()
        .name("example")
        .base("library/alpine:latest")
        .group("grouped")
        .command("/bin/sh")
        .args(vec![
            "-c".into(),
            "printenv; ls -la /test; ls -la /test2; ls -la /test3".into(),
        ])
        .cpus(1)
        .ram(256)
        .volumes(vec![
            "/Users/steveakinyemi/Desktop/Personal/test:/test".parse()?
        ])
        .envs(vec!["OWNED=steve".parse()?])
        .group_volumes(vec![VolumeMount::builder()
            .name("ref_vols")
            .mount("/Users/steveakinyemi/Desktop/Personal/test2:/test2".parse()?)
            .build()])
        .group_envs(vec!["ref_envs".into()])
        .build();

    // Create Monocore configuration
    let config = Monocore::builder()
        .services(vec![service])
        .groups(vec![group])
        .build()?;

    // Create and initialize the orchestrator
    let supervisor_path = "../target/release/monokrun";
    let mut orchestrator = Orchestrator::new(&build_dir, supervisor_path).await?;

    // Run the configuration
    orchestrator.up(config).await?;

    Ok(())
}