Skip to content

Commit 3d8cce4

Browse files
James O. D. HuntSamuel Ortiz
James O. D. Hunt
authored and
Samuel Ortiz
committed
config: Add VM-based container configuration section
This adds a section to describe VM based container configurations to be used by OCI runtimes using hardware virtualization to provide another layer of isolation. As part of this section we define 3 entries: - A virtual machine root image opbject. This is the guest image that contains the virtual machine root filesystem. The container image will be mounted on top of that filesystem. - A virtual machine kernel object. This is the kernel that will boot inside the virtual machine. The object describes the host kernel image path, additional parameters and an optional guest initrd for the kernel to use. - A virtual machine hypervisor object. This is the hypervisor that will manage the container virtual machine from the host. The object describe a hypervisor binary path and some additional parameters. Signed-off-by: James O. D. Hunt <james.o.hunt@intel.com> Signed-off-by: Samuel Ortiz <sameo@linux.intel.com>
1 parent 520c634 commit 3d8cce4

6 files changed

Lines changed: 153 additions & 0 deletions

File tree

‎config-vm.md‎

Lines changed: 54 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,54 @@
1+
# <a name="VirtualMachineSpecificContainerConfiguration" /> Virtual-machine-specific Container Configuration
2+
3+
This section describes the schema for the [virtual-machine-specific section](config.md#platform-specific-configuration) of the [container configuration](config.md).
4+
The virtual-machine container specification provides additional configuration for the hypervisor, kernel, and image.
5+
6+
## <a name="HypervisorObject" /> Hypervisor Object
7+
8+
**`hypervisor`** (object, OPTIONAL) specifies details of the hypervisor that manages the container virtual machine.
9+
* **`path`** (string, REQUIRED) path to the hypervisor binary that manages the container virtual machine.
10+
This value MUST be an absolute path in the [runtime mount namespace](glossary.md#runtime-namespace).
11+
* **`parameters`** (array of strings, OPTIONAL) specifies an array of parameters to pass to the hypervisor.
12+
13+
### Example
14+
15+
```json
16+
"hypervisor": {
17+
"path": "/path/to/vmm",
18+
"parameters": ["opts1=foo", "opts2=bar"]
19+
}
20+
```
21+
22+
## <a name="KernelObject" /> Kernel Object
23+
24+
**`kernel`** (object, REQUIRED) specifies details of the kernel to boot the container virtual machine with.
25+
* **`path`** (string, REQUIRED) path to the kernel used to boot the container virtual machine.
26+
This value MUST be an absolute path in the [runtime mount namespace](glossary.md#runtime-namespace).
27+
* **`parameters`** (array of strings, OPTIONAL) specifies an array of parameters to pass to the kernel.
28+
* **`initrd`** (string, OPTIONAL) path to an initial ramdisk to be used by the container virtual machine.
29+
This value MUST be an absolute path in the [runtime mount namespace](glossary.md#runtime-namespace).
30+
31+
### Example
32+
33+
```json
34+
"kernel": {
35+
"path": "/path/to/vmlinuz",
36+
"parameters": ["foo=bar", "hello world"],
37+
"initrd": "/path/to/initrd.img"
38+
}
39+
```
40+
41+
## <a name="ImageObject" /> Image Object
42+
43+
**`image`** (object, OPTIONAL) specifies details of the image that contains the root filesystem for the container virtual machine.
44+
* **`path`** (string, REQUIRED) path to the container virtual machine root image.
45+
This image contains the root filesystem that the virtual machine **`kernel`** will boot into, not to be confused with the container root filesystem itself. The latter, as specified by **`path`** from the [Root Configuration](config.md#Root-Configuration) section, will be mounted inside the virtual machine at a location chosen by the virtual-machine-based runtime.
46+
This value MUST be an absolute path in the [runtime mount namespace](glossary.md#runtime-namespace).
47+
48+
### Example
49+
50+
```json
51+
"image": {
52+
"path": "/path/to/vm/rootfs.img",
53+
}
54+
```

‎config.md‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -349,6 +349,8 @@ For Windows based systems the user structure has the following fields:
349349
This MUST be set if the target platform of this spec is `windows`.
350350
* **`solaris`** (object, OPTIONAL) [Solaris-specific configuration](config-solaris.md).
351351
This MAY be set if the target platform of this spec is `solaris`.
352+
* **`vm`** (object, OPTIONAL) [Virtual-machine-specific configuration](config-vm.md).
353+
This MAY be set if the target platform and CPU of this spec support hardware virtualization.
352354

353355
### Example (Linux)
354356

‎schema/config-schema.json‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -163,6 +163,9 @@
163163
},
164164
"windows": {
165165
"$ref": "config-windows.json#/windows"
166+
},
167+
"vm": {
168+
"$ref": "config-vm.json#/vm"
166169
}
167170
},
168171
"required": [

‎schema/config-vm.json‎

Lines changed: 56 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
{
2+
"vm": {
3+
"description": "configuration for virtual-machine-based containers",
4+
"type": "object",
5+
"required": [
6+
"kernel"
7+
],
8+
"properties": {
9+
"hypervisor": {
10+
"description": "hypervisor config used by VM-based containers",
11+
"type": "object",
12+
"required": [
13+
"path"
14+
],
15+
"properties": {
16+
"path": {
17+
"$ref": "defs.json#/definitions/FilePath"
18+
},
19+
"parameters": {
20+
"$ref": "defs.json#/definitions/ArrayOfStrings"
21+
}
22+
}
23+
},
24+
"kernel": {
25+
"description": "kernel config used by VM-based containers",
26+
"type": "object",
27+
"required": [
28+
"path"
29+
],
30+
"properties": {
31+
"path": {
32+
"$ref": "defs.json#/definitions/FilePath"
33+
},
34+
"parameters": {
35+
"$ref": "defs.json#/definitions/ArrayOfStrings"
36+
},
37+
"initrd": {
38+
"$ref": "defs.json#/definitions/FilePath"
39+
}
40+
}
41+
},
42+
"image": {
43+
"description": "root image config used by VM-based containers",
44+
"type": "object",
45+
"required": [
46+
"path"
47+
],
48+
"properties": {
49+
"path": {
50+
"$ref": "defs.json#/definitions/FilePath"
51+
}
52+
}
53+
}
54+
}
55+
}
56+
}

‎spec.md‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -16,6 +16,7 @@ Platforms defined by this specification are:
1616
* `linux`: [runtime.md](runtime.md), [config.md](config.md), [config-linux.md](config-linux.md), and [runtime-linux.md](runtime-linux.md).
1717
* `solaris`: [runtime.md](runtime.md), [config.md](config.md), and [config-solaris.md](config-solaris.md).
1818
* `windows`: [runtime.md](runtime.md), [config.md](config.md), and [config-windows.md](config-windows.md).
19+
* `vm`: [runtime.md](runtime.md), [config.md](config.md), and [config-vm.md](config-vm.md).
1920

2021
# <a name="ociRuntimeSpecTOC" />Table of Contents
2122

@@ -29,6 +30,7 @@ Platforms defined by this specification are:
2930
- [Linux-specific Configuration](config-linux.md)
3031
- [Solaris-specific Configuration](config-solaris.md)
3132
- [Windows-specific Configuration](config-windows.md)
33+
- [Virtual-Machine-specific Configuration](config-vm.md)
3234
- [Glossary](glossary.md)
3335

3436
# <a name="ociRuntimeSpecNotationalConventions" />Notational Conventions

‎specs-go/config.go‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -25,6 +25,8 @@ type Spec struct {
2525
Solaris *Solaris `json:"solaris,omitempty" platform:"solaris"`
2626
// Windows is platform-specific configuration for Windows based containers.
2727
Windows *Windows `json:"windows,omitempty" platform:"windows"`
28+
// VM specifies configuration for virtual-machine-based containers.
29+
VM *VM `json:"vm,omitempty" platform:"vm"`
2830
}
2931

3032
// Process contains information to start a specific application inside the container.
@@ -487,6 +489,40 @@ type WindowsHyperV struct {
487489
UtilityVMPath string `json:"utilityVMPath,omitempty"`
488490
}
489491

492+
// VM contains information for virtual-machine-based containers.
493+
type VM struct {
494+
// Hypervisor specifies hypervisor-related configuration for virtual-machine-based containers.
495+
Hypervisor VMHypervisor `json:"hypervisor,omitempty"`
496+
// Kernel specifies kernel-related configuration for virtual-machine-based containers.
497+
Kernel VMKernel `json:"kernel"`
498+
// Image specifies guest image related configuration for virtual-machine-based containers.
499+
Image VMImage `json:"image,omitempty"`
500+
}
501+
502+
// VMHypervisor contains information about the hypervisor to use for a virtual machine.
503+
type VMHypervisor struct {
504+
// Path is the host path to the hypervisor used to manage the virtual machine.
505+
Path string `json:"path"`
506+
// Parameters specifies parameters to pass to the hypervisor.
507+
Parameters string `json:"parameters,omitempty"`
508+
}
509+
510+
// VMKernel contains information about the kernel to use for a virtual machine.
511+
type VMKernel struct {
512+
// Path is the host path to the kernel used to boot the virtual machine.
513+
Path string `json:"path"`
514+
// Parameters specifies parameters to pass to the kernel.
515+
Parameters string `json:"parameters,omitempty"`
516+
// InitRD is the host path to an initial ramdisk to be used by the kernel.
517+
InitRD string `json:"initrd,omitempty"`
518+
}
519+
520+
// VMImage contains information about the virtual machine root image.
521+
type VMImage struct {
522+
// Path is the host path to the root image that the VM kernel would boot into.
523+
Path string `json:"path"`
524+
}
525+
490526
// LinuxSeccomp represents syscall restrictions
491527
type LinuxSeccomp struct {
492528
DefaultAction LinuxSeccompAction `json:"defaultAction"`

0 commit comments

Comments
 (0)