enarx-archive / enarx-wasmldr Goto Github PK

This was part of enarx/enarx#802, but this rebased into enarx-wasmldr.

Is there an existing issue for this?

• I have searched the existing issues

Code of Conduct

• I agree to follow this project's Code of Conduct

Description

wasmldr now lives within github.com/enarx/enarx
This repository is unused - archive it

Link from main wiki.
Allow links out to design docs.

This is similar to #2, but more generic in terms of configurability: the tenant shall express which FD the application is connecting to or listening on in the deployment config.

The goal of this issue is make it possible to write a socket-activatable service as in systemd's ListenStream=. To allow that:

• the config file needs to be extended to have a new enum value in Stdio, say Listen, to indicate the use of this feature
• enarx-wasmldr needs to have a capability of listening on a socket and activate (run) the workload when a new connection comes

Although we already have a configuration that is applied at deployment time, applications typically express their requirements and hints determined at build time (something analogous to flatpak manifest).

Such configuration may include pre-opened file descriptors, bundled resources, minimal memory expectation, etc.

As described in the wiki, we are going to split our configuration file into two parts: build time and deployment time. Currently we have a single configuration file that is bundled in the Wasm binary itself, though an OCI-based package format has been proposed for similar purposes:

• https://www.solo.io/blog/announcing-the-webassembly-wasm-oci-image-spec/
• https://radu-matei.com/blog/wasm-to-oci/

This issue is to check whether the OCI package format meets our needs. #22 probably depends on this.

Needed for attestation workload under some architectures.

enarx-wasmldr will be most often used in conjunction with enarx-keepldr. That is, enarx-wasmldr must be compiled as a static PIE binary for musl.

I believe the most recent Rust toolchain we depend on is version 1.46.0 (2020-08-27). That release enabled static PIE binaries for musl.