1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
| | #!/bin/execlineb -W
# SPDX-License-Identifier: EUPL-1.2+
# SPDX-FileCopyrightText: 2024-2025 Alyssa Ross <hi@alyssa.is>
backtick id {
backtick -E dir { mktemp -d /run/vm/by-id/XXXXXX }
basename -- $dir
}
if {
importas -Siu id
if { useradd -P /run -Urd / -s /bin/nologin gpu-${id} }
if { useradd -P /run -Urd / -s /bin/nologin -G tty,vmm vmm-${id} }
if { useradd -P /run -Urd / -s /bin/nologin xdp-spectrum-${id} }
if { mkdir /run/vsock/${id} }
if { chown vmm-${id} /run/vm/by-id/${id} /run/vsock/${id} }
if { install -do fs /run/configs/${id}/fs }
if {
ln -s /usr/lib/spectrum/img/appvm/blk /usr/lib/spectrum/img/appvm/vmlinux
/run/configs/${id}
}
if { ln -s /run/configs/${id} /run/vm/by-id/${id}/config }
if { create-vm-dependencies $id }
}
backtick diskdir {
if -tn {
redirfd -w 2 /dev/null
multisubstitute {
importas -Siu 1
importas -Siu 4
}
printf "%s/Spectrum/data/spectrum/storage/persist.%s\n" $1 $4
}
s6-setuidgid fs
importas -Siu 1
if { mkdir -p -- ${1}/Spectrum/data/spectrum/storage }
mktemp -d -- ${1}/Spectrum/data/spectrum/storage/tmp.XXXXXX
}
if {
s6-envuidgid fs
s6-applyuidgid -Uzu 0
multisubstitute {
importas -Siu id
importas -Siu diskdir
importas -Siu 1
importas -Siu 2
importas -Siu 3
}
nsenter --preserve-credentials -S0
--mount=/run/vm/by-id/${id}/ns/mnt
--user=/run/vm/by-id/${id}/ns/user
cd /run/fs/${id}/config
if { redirfd -w 1 type echo flatpak }
if { mount-flatpak $1 $2 $3 }
mount --bind -- $diskdir /run/fs/${id}/disk
}
multisubstitute {
importas -Siu diskdir
importas -Siu id
}
if {
piperw 4 3
background {
fdclose 3
fdmove 0 4
# Wait for the VMM to be up, then start the VM.
if { redirfd -w 1 /dev/null head -1 }
vm-start $id
}
fdclose 4
foreground { run-vmm $id }
# Even if s6-instance-delete fails, cgroup-purge is enough
# to ensure that the VMM and all per-VM services are killed.
foreground { s6-instance-delete /run/service/vm-services $id }
cgroup-purge /vm-services.slice/vm-${id}.slice
}
if { umount -R /run/vm/by-id/${id}/ns }
rm -r -- $diskdir /run/vm/by-id/${id} /run/configs/${id}
|