supermachine 0.7.108

Run any OCI/Docker image as a hardware-isolated microVM on macOS HVF (Linux KVM and Windows WHP in progress). Single library API, zero flags for the common case, sub-100 ms cold-restore from snapshot.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64

#[cfg(any(
    all(target_os = "linux", target_arch = "x86_64"),
    all(target_os = "macos", target_arch = "aarch64")
))]
mod supported {
    //! Bake-and-run from a registry image reference, end-to-end.
    //!
    //! ```sh
    //! cargo install supermachine                       # CLI + plugin
    //! cargo supermachine build --release --example oci_simple
    //! target/release/examples/oci_simple nginx:1.27-alpine
    //! ```

    use std::io::{Read, Write};
    use std::time::Instant;

    use supermachine::{Image, PullPolicy, Vm, VmConfig};

    pub(super) fn main() -> Result<(), Box<dyn std::error::Error>> {
        let image_ref = std::env::args()
            .nth(1)
            .unwrap_or_else(|| "nginx:1.27-alpine".to_owned());

        let t0 = Instant::now();
        // PullPolicy::Missing: cache-first. Pulls + bakes only if no
        // valid local snapshot exists.
        let image = Image::from_oci_with_policy(&image_ref, PullPolicy::Missing)?;
        eprintln!("image ready in {:?}", t0.elapsed());

        let t1 = Instant::now();
        let vm = Vm::start(&image, &VmConfig::new())?;
        eprintln!("vm started in {:?}", t1.elapsed());

        let mut sock = vm.connect()?;
        sock.write_all(b"GET / HTTP/1.1\r\nHost: workload\r\nConnection: close\r\n\r\n")?;
        let mut response = Vec::new();
        sock.read_to_end(&mut response)?;
        let preview = String::from_utf8_lossy(&response);
        for line in preview.lines().take(4) {
            eprintln!("  {line}");
        }

        vm.stop()?;
        eprintln!("done in {:?}", t0.elapsed());
        Ok(())
    }
}

#[cfg(any(
    all(target_os = "linux", target_arch = "x86_64"),
    all(target_os = "macos", target_arch = "aarch64")
))]
fn main() -> Result<(), Box<dyn std::error::Error>> {
    supported::main()
}

#[cfg(not(any(
    all(target_os = "linux", target_arch = "x86_64"),
    all(target_os = "macos", target_arch = "aarch64")
)))]
fn main() -> Result<(), Box<dyn std::error::Error>> {
    eprintln!("this example requires a linux-x86_64 (KVM) or macos-aarch64 (HVF) host; unsupported on this platform");
    Ok(())
}