pure script

Author: CMGS

os-image/start.sh

@@ -1,6 +1,18 @@
 #!/bin/bash
 set -e
 
+# UUID v5 (RFC 4122, SHA-1 based): deterministic UUID from NAMESPACE_URL + name.
+# Pure bash + sha1sum — no Python required.
+uuid_v5() {
+    local hash
+    hash=$( { printf '\x6b\xa7\xb8\x10\x9d\xad\x11\xd1\x80\xb4\x00\xc0\x4f\xd4\x30\xc8'
+              printf '%s' "$1"; } | sha1sum | cut -c1-32 )
+    local vb; vb=$(printf '%02x' "$(( (16#${hash:16:2} & 0x3f) | 0x80 ))")
+    printf '%s-%s-5%s-%s%s-%s\n' \
+        "${hash:0:8}" "${hash:8:4}" "${hash:13:3}" \
+        "$vb" "${hash:18:2}" "${hash:20:12}"
+}
+
 echo "=== Cocoon MicroVM Engine: Bootstrapping (Multi-Layer OCI) ==="
 
 # 0. Check KVM
@@ -10,7 +22,18 @@ if [ ! -w "/dev/kvm" ]; then
 fi
 ARCH=$(uname -m)
 
-# 1. Download Cloud Hypervisor
+# 1. Install dependencies
+_MISSING=""
+command -v jq          >/dev/null 2>&1 || _MISSING="$_MISSING jq"
+command -v mkfs.erofs  >/dev/null 2>&1 || _MISSING="$_MISSING erofs-utils"
+command -v mkfs.ext4   >/dev/null 2>&1 || _MISSING="$_MISSING e2fsprogs"
+command -v wget        >/dev/null 2>&1 || _MISSING="$_MISSING wget"
+if [ -n "$_MISSING" ]; then
+    echo "[1/7] Installing missing dependencies:$_MISSING"
+    sudo apt-get install -y -qq $_MISSING
+fi
+
+# 2. Download Cloud Hypervisor
 CH_VERSION="v51.0"
 CH_BIN="./cloud-hypervisor"
 if [ ! -x "$CH_BIN" ]; then
@@ -20,9 +43,9 @@ if [ ! -x "$CH_BIN" ]; then
 fi
 sudo setcap cap_net_admin+ep "$CH_BIN"
 
-# 2. Extract Layers via Crane
+# 4. Extract Layers via Crane
 if [ -n "$IMAGE_NAME" ]; then
-    echo "[2/5] Extracting layers for '$IMAGE_NAME'..."
+    echo "[4/7] Extracting layers for '$IMAGE_NAME'..."
     rm -f layer*.erofs boot/vmlinuz* boot/initrd.img*
 
     # Download Crane
@@ -36,16 +59,16 @@ if [ -n "$IMAGE_NAME" ]; then
     tar -xf image.tar -C image_temp
 
     # Process layers (Bottom up)
-    LAYERS=$(python3 -c 'import json; print("\n".join(json.load(open("image_temp/manifest.json"))[0]["Layers"]))')
+    LAYERS=$(jq -r '.[0].Layers[]' image_temp/manifest.json)
 
     IDX=0
     for L in $LAYERS; do
         echo "      Layer $IDX -> layer${IDX}.erofs"
         tar -xf "image_temp/$L" boot/ 2>/dev/null || true
         # Compress layer to EROFS
-        # UUID v5: deterministically derived from the layer path, which encodes the
-        # content digest (e.g. "blobs/sha256/abc123.../"). Same OCI layer -> same UUID.
-        LAYER_UUID=$(python3 -c "import uuid,sys; print(uuid.uuid5(uuid.NAMESPACE_URL, sys.argv[1]))" "$L")
+        # UUID v5: deterministically derived from the layer path (which encodes the
+        # content digest). Same OCI layer -> same UUID. Pure bash + sha1sum, no Python.
+        LAYER_UUID=$(uuid_v5 "$L")
         if gzip -t "image_temp/$L" 2>/dev/null; then
             gzip -dc "image_temp/$L" | mkfs.erofs --tar=f -zlz4hc -C16384 -T0 -U "$LAYER_UUID" "layer${IDX}.erofs"
         else
@@ -56,13 +79,13 @@ if [ -n "$IMAGE_NAME" ]; then
     rm -rf image_temp image.tar
 fi
 
-# 3. Prepare COW (Optimized for performance and sparse efficiency)
+# 5. Prepare COW (Optimized for performance and sparse efficiency)
 # lazy_itable_init=1 speeds up formatting on large sparse files
-echo "[3/5] Preparing optimized sparse COW disk..."
+echo "[5/7] Preparing optimized sparse COW disk..."
 truncate -s 10G cow.raw
 mkfs.ext4 -F -m 0 -q -E lazy_itable_init=1,lazy_journal_init=1,discard cow.raw
 
-# 4. Build Arguments
+# 6. Build Arguments
 KERNEL=$(ls boot/vmlinuz-* | head -1)
 INITRD=$(ls boot/initrd.img-* | head -1)
 LAYER_FILES=$(ls -1 layer*.erofs | sort -V)
@@ -82,13 +105,13 @@ done
 # num_queues=2 (Match boot CPUs), queue_size=256 (Deep queue for better throughput)
 DISK_CONFIGS+=("path=cow.raw,readonly=off,direct=on,sparse=on,image_type=raw,num_queues=2,queue_size=256,serial=cocoon-cow")
 
-# 5. Ignite (Added RNG and Ballooning for production stability)
-echo "[5/5] Igniting Cloud Hypervisor..."
+# 7. Ignite
+echo "[7/7] Igniting Cloud Hypervisor..."
 "$CH_BIN" --kernel "$KERNEL" --initramfs "$INITRD" \
     --disk "${DISK_CONFIGS[@]}" \
     --cmdline "console=ttyS0 loglevel=3 boot=cocoon cocoon.layers=${COCOON_LAYERS} cocoon.cow=cocoon-cow clocksource=kvm-clock rw" \
     --cpus "boot=2,max=8" \
-    --memory "size=1024M,hugepages=on" \
+    --memory "size=1024M$([ "$(cat /proc/sys/vm/nr_hugepages 2>/dev/null)" -gt 0 ] && echo ',hugepages=on')" \
     --rng "src=/dev/urandom" \
     --watchdog \
     --balloon "size=512M,deflate_on_oom=on,free_page_reporting=on" \

os-image/ubuntu/22.04/Dockerfile

@@ -26,7 +26,7 @@ RUN --mount=type=secret,id=cocoon_script \
     # [Shift-Left System Hacks]
     truncate -s 0 /etc/fstab && \
     systemctl mask systemd-fsck-root.service systemd-remount-fs.service systemd-fsck@.service && \
-    systemctl enable systemd-networkd systemd-timesyncd && \
+    systemctl enable systemd-networkd systemd-resolved systemd-timesyncd && \
     mkdir -p /etc/systemd/network && \
     printf "[Match]\nName=e* v*\n[Network]\nDHCP=yes\n" > /etc/systemd/network/20-wired.network && \
     # [Final Touches]

os-image/ubuntu/hack.sh

@@ -8,9 +8,6 @@ resolve_disk() {
     local serial="$1" timeout="${COCOON_TIMEOUT:-10}" i=0
     case "$timeout" in ''|*[!0-9]*) timeout=10 ;; esac
 
-    # Trigger udev to ensure device nodes are created before polling
-    udevadm settle 2>/dev/null || true
-
     while [ $i -lt $timeout ]; do
         for sysdev in /sys/block/vd*; do
             [ -d "$sysdev" ] || continue
@@ -51,6 +48,9 @@ mountroot() {
     [ -z "$LAYERS" ] && panic "cocoon.layers= not set"
     [ -z "$COW" ]    && panic "cocoon.cow= not set"
 
+    # Wait for udev to finish processing all pending events once, before any disk lookups.
+    udevadm settle 2>/dev/null || true
+
     COCOON_INTERNAL="/.cocoon"
     mkdir -p "$COCOON_INTERNAL"
 

storage/storage.go

@@ -11,5 +11,5 @@ type Storage interface {
 	List(context.Context) ([]*types.Storage, error)
 	Delete(context.Context, string) error
 
-	Config(context.Context, *types.VMConfig) (*types.StorageConfig, error)
+	Config(context.Context, []*types.VMConfig) ([][]*types.StorageConfig, error)
 }

types/storage.go

@@ -3,9 +3,9 @@ package types
 import "time"
 
 type Storage struct {
+	ID        string    `json:"id"`
 	Name      string    `json:"name"`
 	Type      string    `json:"type"`
-	Hex       string    `json:"hex"`
 	Size      int64     `json:"size"`
 	CreatedAt time.Time `json:"created_at"`
 }

types/vm.go

@@ -3,6 +3,6 @@ package types
 type VMConfig struct {
 	Name    string `json:"name"`
 	CPU     int    `json:"cpu"`
-	Memory  int    `json:"memory"`
-	Storage int    `json:"storage"`
+	Memory  int64  `json:"memory"`
+	Storage int64  `json:"storage"`
 }