Check integration of urunc with podman

[cmainas]

We have identified that podman passes image annotations to the container runtime. Moreover, podman has an interesting design without a daemon running. Therefore, we would like to explore if we can spawn unikernels with urunc using podman.

[gntouts]

In a clean Ubuntu 22.04 VM, I used to following to set up a testing environment:

sudo apt-get update
sudo apt-get install podman -y
sudo apt-get install qemu-kvm -y

git clone -b docker_support https://github.com/nubificus/urunc.git
sudo podman run --rm -ti -v $PWD/urunc:/urunc -w /urunc docker.io/library/golang:latest bash -c "git config --global --add safe.directory /urunc && make"

sudo tee /etc/containers/containers.conf >/dev/null <<EOT
[engine]
runtime = "/usr/local/bin/urunc"
EOT

sudo podman run --rm -ti harbor.nbfc.io/nubificus/urunc/nginx-qemu-unikraft:latest unikernel

This results in this error:

gntouts@pdm00:~$ sudo podman run --rm -ti harbor.nbfc.io/nubificus/urunc/nginx-qemu-unikraft:latest unikernel
INFO[0000] urunc INVOKED                                 args="[/usr/local/bin/urunc delete --force db9fd19c2dbdf48edfb79eaa65f1d8d39a8fc1ab0f26615680aca2ec420eba66]"
ERRO[0000] vmm not found                                 subsystem=hypervisors
ERRO[0000] vmm not found                                
ERRO[0000] Error removing container db9fd19c2dbdf48edfb79eaa65f1d8d39a8fc1ab0f26615680aca2ec420eba66 from runtime after creation failed 
Error: container create failed (no logs from conmon): EOF

The QEMU VMM is installed and available in the PATH:

gntouts@pdm00:~$ which qemu-system-x86_64
/usr/bin/qemu-system-x86_64

The logs found in /var/log/syslog are the following:

Oct 22 19:17:58 pdm00 /usr/local/bin/urunc[8516]: time="2024-10-22T19:17:58+03:00" level=info msg="urunc INVOKED" args="[/usr/local/bin/urunc --systemd-cgroup create --bundle /var/lib/containers/storage/overlay-containers/67968804df519a94e9ac0b7428fa183f52caf63e2c8a4eaa1d710df740d20b4b/userdata --pid-file /run/containers/storage/overlay-containers/67968804df519a94e9ac0b7428fa183f52caf63e2c8a4eaa1d710df740d20b4b/userdata/pidfile --console-socket /tmp/conmon-term.H5BSV2 67968804df519a94e9ac0b7428fa183f52caf63e2c8a4eaa1d710df740d20b4b]"
Oct 22 19:17:58 pdm00 /usr/local/bin/urunc[8516]: time="2024-10-22T19:17:58+03:00" level=info msg="urunc annotations" blkMntPoint= block= hypervisor= initrd= subsystem=unikontainers unikernelBinary= unikernelCmd= unikernelType= unikernelVersion= useDMBlock=
Oct 22 19:17:58 pdm00 /usr/local/bin/urunc[8516]: time="2024-10-22T19:17:58+03:00" level=info msg="urunc.json annotations" blkMntPoint= block= hypervisor="cWVtdQ==" initrd="L3VuaWtlcm5lbC9pbml0cmQ=" subsystem=unikontainers unikernelBinary="L3VuaWtlcm5lbC9hcHAtbmdpbnhfa3ZtLXg4Nl82NA==" unikernelCmd="bmdpbnggLWMgL25naW54L2NvbmYvbmdpbnguY29uZg==" unikernelType="dW5pa3JhZnQ=" unikernelVersion="djAuMTYuMA==" useDMBlock=
Oct 22 19:17:58 pdm00 /usr/local/bin/urunc[8522]: nubificus/roadmap#33[36mINFO#033[0m[0000] urunc INVOKED                                 nubificus/roadmap#33[36margs#033[0m="[/usr/local/bin/urunc --systemd-cgroup create --bundle /var/lib/containers/storage/overlay-containers/67968804df519a94e9ac0b7428fa183f52caf63e2c8a4eaa1d710df740d20b4b/userdata --pid-file /run/containers/storage/overlay-containers/67968804df519a94e9ac0b7428fa183f52caf63e2c8a4eaa1d710df740d20b4b/userdata/pidfile --console-socket /tmp/conmon-term.H5BSV2 67968804df519a94e9ac0b7428fa183f52caf63e2c8a4eaa1d710df740d20b4b --reexec]"
Oct 22 19:17:58 pdm00 /usr/local/bin/urunc[8516]: time="2024-10-22T19:17:58+03:00" level=error hooks=CreateRuntime subsystem=unikontainers
Oct 22 19:17:58 pdm00 /usr/local/bin/urunc[8516]: time="2024-10-22T19:17:58+03:00" level=error hooks=CreateContainer subsystem=unikontainers
Oct 22 19:17:58 pdm00 /usr/local/bin/urunc[8528]: nubificus/roadmap#33[36mINFO#033[0m[0000] urunc INVOKED                                 nubificus/roadmap#33[36margs#033[0m="[/usr/local/bin/urunc delete --force 67968804df519a94e9ac0b7428fa183f52caf63e2c8a4eaa1d710df740d20b4b]"
Oct 22 19:17:58 pdm00 /usr/local/bin/urunc[8528]: nubificus/roadmap#33[31mERRO#033[0m[0000] vmm not found                                 nubificus/roadmap#33[31msubsystem#033[0m=hypervisors
Oct 22 19:17:58 pdm00 /usr/local/bin/urunc[8528]: nubificus/roadmap#33[31mERRO#033[0m[0000] vmm not found                                
Oct 22 19:17:58 pdm00 systemd-networkd[561]: veth9aa9c374: Link DOWN
Oct 22 19:17:58 pdm00 systemd-networkd[561]: veth9aa9c374: Lost carrier
Oct 22 19:17:58 pdm00 kernel: [ 2052.442133] cni-podman0: port 1(veth9aa9c374) entered disabled state
Oct 22 19:17:58 pdm00 kernel: [ 2052.442462] device veth9aa9c374 left promiscuous mode
Oct 22 19:17:58 pdm00 kernel: [ 2052.442465] cni-podman0: port 1(veth9aa9c374) entered disabled state
Oct 22 19:17:58 pdm00 systemd[1]: run-netns-cni\x2dbf7264c2\x2d4245\x2d9cb4\x2de11a\x2dc490127483be.mount: Deactivated successfully.
Oct 22 19:17:58 pdm00 systemd[1]: var-lib-containers-storage-overlay\x2dcontainers-67968804df519a94e9ac0b7428fa183f52caf63e2c8a4eaa1d710df740d20b4b-userdata-shm.mount: Deactivated successfully.
Oct 22 19:17:58 pdm00 podman[8426]: 2024-10-22 19:17:58.852692719 +0300 EEST m=+0.560483377 container remove 67968804df519a94e9ac0b7428fa183f52caf63e2c8a4eaa1d710df740d20b4b (image=harbor.nbfc.io/nubificus/urunc/nginx-qemu-unikraft:latest, name=happy_ishizaka)