natnat-mc / container

Simple containerization script using systemd-nspawn

Codinget

A smol README.md for my profile

whoami

A random dev who enjoys {programm,sysadmin,netamdin}ing a bit too much.
Grew up on Mandriva Linux, switched to Debian, and now using Alpine more and more.
Mains Lua/MoonScript, JavaScript/Typescript and Rust, but can write fairly good Python, Java and C.

ls ~/projects

• container, a simple containerization script based on systemd-nspawn
• rprompt, a small prompt for fish, zsh and bash, written in rust and moonscript
• moonbuild, a small build system written in and using moonscript
• brightnessctl, a simple suid binary to set the screen brightness
• Snek, a "simple" Snake, done for my final JS class project
• rmarcher, a small cpu-rendered raymarcher in Rust capable to load Lua scenes
• mon, a simple system monitoring tool
• and basically everything here, on my GitLab and GitDab

ls ~/upcoming-projects

• dashboard, a small web dashboard for my server, using lapis
• limglib, an image organization tool
• lcontainer no repo yet, a lighter container system, not relying on systemd

ls ~/old-projects

• prompt, a small prompt, mainly designed for fish, the old counterpart of rprompt
• bot-info, a discord bot for the programming school I went to, to be replaced by Administrator by a newer student now that I left
• toolbox, a small toolbox of CLI tools based on lua, mostly replaced by lua-command-tools

TODO

• make the README
• work on the project themselves

container's Issues

write actual command-line parser

The one we got only specifies the name of positional arguments. We need named arguments and flags too

add `container rename <old> <new>`

add `container mergeall <source> <name>`

container mergall <source> <name> would merge all the layers in the source machine and export the result as a new layer and machine

automatically raise network interfaces and handle SNAT / MASQUERADE

Add `-i`, `+i` and `-p` flags

• -i and +i would forcibly enable or disable interactive in the boot and run subcommands
• -p would run in pipe mode, only for the run subcommand

implement lockfiles in C instead of Lua

add `container create <name>`

Should create a container with the bare minimum config options and an empty directory layer

Write actual help pages for the subcommands

Only an auto-generated usage and description is present for the commands as of now. Full help would be a plus. A subcommand could also automatically create markdown (or maybe even man) documentation.

Document all commands in README

Currently missing: run, help, clone, checkcfg, edit

get rid of this depencency on systemd-nspawn

containers aren't properly shutdown at shutdown

replace `io.popen` and protected `os.execute` with C code

add `container network-create`

Should create a new network in the global config

Document `config.ini` format

config.ini is already shown in two examples, but neither of them use all of the available functionality. Proper documentation should be written.

add support for start-scripts and start-network in containers

Add `container start <name>`, `container attach <name>` `container status <name>` and `container stop [-f] <name>`

start should start a container detached, using some way of reattaching it (like screen or tmux), attach should handle this attaching part, status should show whether or not the container is running and stop should stop it if it is running, optionally forcibly.

add `container here <name>` which starts if required and then attaches

`container clone` creates a machine when it shouldn't

Add `container checkcfg [-e] <name>`

container checkcfg [-e] <name> would check the config file of a container. The -e flag would expand the default values to the config file

replace `ls` and such with C code

add `container delete <name>`

add `container global-edit`

Should open the global config in the default editor

add `container unfreeze <layer>`

container unfreeze <layer> would unpack a layer from squashfs to a directory, and update its correspoding accordingly, if applicable

add `container create-alpine <name> <arch> [version]`

Should create an alpine container with the given name, architecture and version. If no version is given, it should be autodetected from http://dl-cdn.alpinelinux.org/alpine/latest-stable/releases/<arch>/latest-releases.yaml

replace `isdir`, `isfile` and such with C code

Add support for older `systemd-nspawn`

Some versions of systemd-nspawn (like the one included in raspbian buster) don't support --console. There should be a global config file that tracks supported features (and maybe other things)

add `container run <machine> [command [args...]]`

container run <machine> [command [args...]] would run the specified command (or default command in config.ini, or default shell in /etc/passwd, or /bin/sh) in the container without booting the container fully

auto-generate markdown docs for all commands with help

add `container merge <upper> <lower>`

container merge <upper> <lower> would merge the lower layer into the upper layer (for a directory layer) and update the corresponding machine accordingly.

Cleanup on error

As of now, the script leaves its directories and mounts as is when it crashes, and the user must find them and remove them manually. Ideally, it would happen automatically

use `tmux` if available, as it doesn't fuck up the terminal

Cronjob doesn't actually restart containers

Probably for the same reason service had a problem tho

add `container stop-all`

should basically stop all running containers, which could be useful with the systemd service to cleanly exit containers at shutdown

add `container create-debian <name> <arch> [version] [variant] [args...]`

Should create a Debian container with the given name and architecture, of the given version (defaulting to the one specified in http://ftp.debian.org/debian/dists/stable/Release), using the given variant (defaulting to minbase), with debootstrap

explode the tool into multiple modules and generate a binary

Support for multiple virtual network cards / card ownership transfer

split the code into a daemon and an helper

auto-generate man docs for all commands with help