firecracker
firecracker copied to clipboard
Secure and fast microVMs for serverless computing.
When executing the jailer like so ```bash sudo jailer --id my-test-id --uid 123 --gid 100 --exec-file /usr/local/bin/jailer --node 0 --chroot-base-dir ./jails --seccomp-level 0 ``` will return ```bash error: Found argument...
Design doc and more details here: github.com/andreeaflorescu/metrics-proposal. This is particularly important for devices, so that we can break the dependency on the Firecracker specific `logger` implementation. This can be achieved...
According to the [documentation](https://www.kernel.org/doc/Documentation/virtual/kvm/api.txt): ``` KVM_KVMCLOCK_CTRL This signals to the host kernel that the specified guest is being paused by userspace. The host will set a flag in the pvclock...
This has a slight overlap with https://github.com/firecracker-microvm/firecracker/issues/1544. Created as a separate issue as it is needed when consuming devices from rust-vmm. We should use the trait instead of the mmap...
# Feature Request I'm trying to bind a XDP program to eth0 in firecracker vm. like this: `ip -force link set dev eth0 xdpdrv obj bpf_xdp.o sec from-netdev` But it...
We currently use one structure for both the API and the VMM. The structures are defined in [vmm_config](). The problem associated with this design is that we have multiple configuration...
# Feature Request We want to be able to add memory to an already booted VM. Tests with QEMU shows it's possible.Cursory look at cloud-hypervisor show it's supported by them...
In the integration tests there are multiple functions that execute a command on the guest and then compare the output with some expected values. Like [this one](https://github.com/firecracker-microvm/firecracker/blob/b8550cc749227565ad1e13ae4b99821c98239e94/tests/integration_tests/functional/test_cpu_features.py#L37) Create one `utils`...
We should add an integration test to cover similar use cases as those mentioned in #1089. We can use [this](https://github.com/aghecenco/firecracker/commits/jailer_mounts) branch as a starting point, after harmonizing it with the...
When IO rate limiting is in effect, requests don't get serviced for a while (by design). This translates to the FD(s) in epoll not being *drained* for a while. During...