diff --git a/anolis-courses/cloud-native/compile_runD/end.md b/anolis-courses/cloud-native/compile_runD/end.md new file mode 100644 index 0000000000000000000000000000000000000000..33ea594e70439b55cd7de5b0a52bcd4d41ff9e41 --- /dev/null +++ b/anolis-courses/cloud-native/compile_runD/end.md @@ -0,0 +1 @@ +恭喜您完成了本场景实验 diff --git a/anolis-courses/cloud-native/compile_runD/index.yaml b/anolis-courses/cloud-native/compile_runD/index.yaml new file mode 100644 index 0000000000000000000000000000000000000000..4e903f9793ef52da604a9ccfd4247bb474f83952 --- /dev/null +++ b/anolis-courses/cloud-native/compile_runD/index.yaml @@ -0,0 +1,18 @@ +name: 编译Rust版本RunD并体验结果 +desc: 体验Rust语言，并修改runD以及查看修改结果 +image: "Centos 8.5 64位" +live_time: "30 min" +machine: x86_64-104c192g # cpu架构-机器规格，该字段为空，默认 x86_64-2c4g +max_clients: 1 # 最大并发使用数，不填则默认不限制 +details: + steps: + start: start.md + finish: finish.md + - name: 一键式部署RunD + content: step1.md + - name: 安装git与下载代码 + content: step2.md + - name: 修改runD代码 + content: step3.md + - name: 运行查看修改的结果 + content: step4.md diff --git a/anolis-courses/cloud-native/compile_runD/start.md b/anolis-courses/cloud-native/compile_runD/start.md new file mode 100644 index 0000000000000000000000000000000000000000..d3653b774039186991769ff2188d86de7b8df7d3 --- /dev/null +++ b/anolis-courses/cloud-native/compile_runD/start.md @@ -0,0 +1 @@ +本场景将提供一台配置了 CentOS 8.5 操作系统的裸金属服务器环境用于运行runD diff --git a/anolis-courses/cloud-native/compile_runD/step1.md b/anolis-courses/cloud-native/compile_runD/step1.md new file mode 100644 index 0000000000000000000000000000000000000000..3e0626358f9063ce3f9e09d515c7b02397c2ccb0 --- /dev/null +++ b/anolis-courses/cloud-native/compile_runD/step1.md @@ -0,0 +1,4 @@ +1. 物理机环境，或者神龙服务器环境，上面不需要安装docker，containerd，nerdctl，只需要一个干净环境即可 +运行下面的命令一键式安装与部署runD +[[ curl https://cloud-native.oss-cn-shanghai.aliyuncs.com/runtime/install-rund-nerdctl.sh -sSf | sh -s ]] +需要稍微等一会下载安装包与镜像，以及安装部署 diff --git a/anolis-courses/cloud-native/compile_runD/step2.md b/anolis-courses/cloud-native/compile_runD/step2.md new file mode 100644 index 0000000000000000000000000000000000000000..1ef5c91a8984b65835b544c4934825fe2858b708 --- /dev/null +++ b/anolis-courses/cloud-native/compile_runD/step2.md @@ -0,0 +1,6 @@ +1. 默认机器上没有安装git，需要先下载git工具 +[[ yum install git -y ]] + +2. 下载runD的代码 +[[ git clone https://github.com/openanolis/kata-containers.git ]] +[[ cd kata-containers && git checkout preview ]] diff --git a/anolis-courses/cloud-native/compile_runD/step3.md b/anolis-courses/cloud-native/compile_runD/step3.md new file mode 100644 index 0000000000000000000000000000000000000000..0d2e07ee4de93e2ae70a9ee1526cdc31b88b3b4c --- /dev/null +++ b/anolis-courses/cloud-native/compile_runD/step3.md @@ -0,0 +1,9 @@ +1. 可以尝试修改runD的代码，可以修改一些日志输出或者不影响功能的地方, 比如: +--- a/src/runtime-rs/crates/runtimes/virt_container/src/sandbox.rs ++++ b/src/runtime-rs/crates/runtimes/virt_container/src/sandbox.rs +@@ -135,7 +135,7 @@ impl Sandbox for VirtSandbox { + + // start vm + self.hypervisor.start_vm(10_000).await.context("start vm")?; +- info!(sl!(), "start vm"); ++ info!(sl!(), "start vm for myself!"); diff --git a/anolis-courses/cloud-native/compile_runD/step4.md b/anolis-courses/cloud-native/compile_runD/step4.md new file mode 100644 index 0000000000000000000000000000000000000000..e609ee6f77f50b68f648ce8586d5b85d416d5e26 --- /dev/null +++ b/anolis-courses/cloud-native/compile_runD/step4.md @@ -0,0 +1,16 @@ +1. 开始编译最新修改的runD代码 +[[ repo-root-dir=/root/kata-containers ]] + +[[ container-image=cloud-native-registry.cn-shanghai.cr.aliyuncs.com/runtime/rund:shim-builder-latest ]] + +[[ nerdctl run --rm -i -v "${repo-root-dir}:${repo-root-dir}" \ + -w "${repo-root-dir}/src/runtime-rs" \ + "${container-image}" \ + bash -c "git config --global --add safe.directory ${repo-root-dir} && make -j8" ]] + +2. 上面编译需要一段时间，需要等编译完,然后运行下面的命令替换最新的runD，并运行查看日志结果 +[[ cp $repo-root-dir/src/runtime-rs/target/x86_64-unknown-linux-musl/release/containerd-shim-kata-v2 /opt/kata/bin/containerd-shim-rund-v2 ]] + +[[ time nerdctl run --runtime io.containerd.rund.v2 busybox /bin/sh -c "uname -a" ]] + +[[ journalctl -t containerd -r | grep "start vm for myself" ]] diff --git a/anolis-courses/cloud-native/index.yaml b/anolis-courses/cloud-native/index.yaml new file mode 100644 index 0000000000000000000000000000000000000000..101a388bc5afd2192bfd9dc741bd3c12b4bd2598 --- /dev/null +++ b/anolis-courses/cloud-native/index.yaml @@ -0,0 +1,19 @@ +name: 体验龙蜥云原生轻量化安全容器runD +desc: 龙蜥云原生社区开源了阿里巴巴内部使用的轻量化安全容器runD，使用Rust语言编写，在安全的同时，具有启动快、内存占用资源小等优势特点, 本课程可以用多种运行容器的工具体验runD +的启动快特点；然后本课程零门槛体验修改Rust代码的runD +runD => 是龙蜥社区开源的安全容器沙箱环境，可以对接contaienrd，k8s等容器环境 +nerdctl => Docker-compatible CLI for containerd，兼容docker，并提供与docker类似的run，exec，stop，rm等容器管理的命令 +ctr => 是containerd提供的简易的命令行参数工具 +crictl => 是containerd下CRI接口的命令行参数工具，用于创建与k8s类似的POD，Container等资源 +type: course +total_time: "60 min" +level: "medium" # beginner、intermediate、advanced +chapters: + - name: "多种运行容器工具体验runD" + desc: "学习使用nerdctl,ctr,crictl工具运行runD" + content: "running_runD" + live_time: "30 min" + - name: "修改体验Rust语言runD" + desc: "熟悉Rust语言，并修改runD代码，编译并查看运行结果" + content: "compile_runD" + live_time: "30 min" diff --git a/anolis-courses/cloud-native/running_runD/end.md b/anolis-courses/cloud-native/running_runD/end.md new file mode 100644 index 0000000000000000000000000000000000000000..33ea594e70439b55cd7de5b0a52bcd4d41ff9e41 --- /dev/null +++ b/anolis-courses/cloud-native/running_runD/end.md @@ -0,0 +1 @@ +恭喜您完成了本场景实验 diff --git a/anolis-courses/cloud-native/running_runD/index.yaml b/anolis-courses/cloud-native/running_runD/index.yaml new file mode 100644 index 0000000000000000000000000000000000000000..913b2321f41cee67b296addaa6de6092852078d3 --- /dev/null +++ b/anolis-courses/cloud-native/running_runD/index.yaml @@ -0,0 +1,18 @@ +name: 多种运行容器工具体验runD +desc: 学习使用nerdctl,ctr,crictl工具运行runD +image: "Centos 8.5 64位" +live_time: "30 min" +machine: x86_64-104c192g # cpu架构-机器规格，该字段为空，默认 x86_64-2c4g +max_clients: 1 # 最大并发使用数，不填则默认不限制 +details: + steps: + start: start.md + finish: finish.md + - name: 一键式部署RunD + content: step1.md + - name: 使用nerdctl + content: step2.md + - name: 使用ctr + content: step3.md + - name: 使用crictl + content: step4.md diff --git a/anolis-courses/cloud-native/running_runD/start.md b/anolis-courses/cloud-native/running_runD/start.md new file mode 100644 index 0000000000000000000000000000000000000000..d3653b774039186991769ff2188d86de7b8df7d3 --- /dev/null +++ b/anolis-courses/cloud-native/running_runD/start.md @@ -0,0 +1 @@ +本场景将提供一台配置了 CentOS 8.5 操作系统的裸金属服务器环境用于运行runD diff --git a/anolis-courses/cloud-native/running_runD/step1.md b/anolis-courses/cloud-native/running_runD/step1.md new file mode 100644 index 0000000000000000000000000000000000000000..3e0626358f9063ce3f9e09d515c7b02397c2ccb0 --- /dev/null +++ b/anolis-courses/cloud-native/running_runD/step1.md @@ -0,0 +1,4 @@ +1. 物理机环境，或者神龙服务器环境，上面不需要安装docker，containerd，nerdctl，只需要一个干净环境即可 +运行下面的命令一键式安装与部署runD +[[ curl https://cloud-native.oss-cn-shanghai.aliyuncs.com/runtime/install-rund-nerdctl.sh -sSf | sh -s ]] +需要稍微等一会下载安装包与镜像，以及安装部署 diff --git a/anolis-courses/cloud-native/running_runD/step2.md b/anolis-courses/cloud-native/running_runD/step2.md new file mode 100644 index 0000000000000000000000000000000000000000..c578189ee0031671f453a8441e8bdb0c18cc879a --- /dev/null +++ b/anolis-courses/cloud-native/running_runD/step2.md @@ -0,0 +1,9 @@ +1. 环境已经部署上了nerdctl, 第一步是下载运行容器需要的镜像 +[[ nerdctl pull busybox ]] + +2. 直接可以使用runtime为rund来运行下载的busybox镜像，并运行一个命令，现在是uname +同时可以查看当前运行的时间 +[[ time nerdctl run --runtime io.containerd.rund.v2 busybox /bin/sh -c "uname -a" ]] + +3. 还可以运行qemu作为安全容器的vmm作为对比，可以看到rund启动时间会快很多 +[[ time nerdctl run --runtime io.containerd.kata-qemu.v2 busybox /bin/sh -c "uname -a" ]] diff --git a/anolis-courses/cloud-native/running_runD/step3.md b/anolis-courses/cloud-native/running_runD/step3.md new file mode 100644 index 0000000000000000000000000000000000000000..16572dfdaa20230689c14fdaf5a936a42220c4d2 --- /dev/null +++ b/anolis-courses/cloud-native/running_runD/step3.md @@ -0,0 +1,5 @@ +1. 使用ctr命令同样可以run起来runD，直接通过runtime指定使用rund +[[ time ctr run --runtime "io.containerd.rund.v2" -d docker.io/library/busybox:latest test-rund /bin/sh ]] + +2. 同样可以使用qemu做对比 +[[ time ctr run --runtime "io.containerd.kata-qemu.v2" -d docker.io/library/busybox:latest test-qemu2 /bin/sh ]] diff --git a/anolis-courses/cloud-native/running_runD/step4.md b/anolis-courses/cloud-native/running_runD/step4.md new file mode 100644 index 0000000000000000000000000000000000000000..899efa1747c9f54f7e7407fff2bf78c8f853ffbe --- /dev/null +++ b/anolis-courses/cloud-native/running_runD/step4.md @@ -0,0 +1,38 @@ +1. 下面使用crictl来启动rund，需要先安装crictl命令工具 +[[ wget https://cloud-native.oss-cn-shanghai.aliyuncs.com/runtime/crictl-v1.24.2-linux-amd64.tar.gz ]] + +2. 解压安装包 +[[ tar -zxvf crictl-v1.24.2-linux-amd64.tar.gz -C /usr/local/bin/ ]] + +3. 配置crictl命令 +[[ cat << EOF > /etc/crictl.yaml +runtime-endpoint: unix:///run/containerd/containerd.sock +image-endpoint: unix:///run/containerd/containerd.sock +timeout: 10 +debug: false +EOF ]] + +4. 使用crictl来pull需要启动的镜像 +[[ crictl pull busybox ]] + +5. 添加运行pod的配置文件 +[[ cat << EOF > sandbox-config.json +{ + "metadata": { + "name": "test-sandbox", + "namespace": "default", + "attempt": 1, + "uid": "95cb1cf47c4abb12d437f3" + }, + "linux": { + "security_context": { + "namespace_options": { + "network" : 2 + } + } + } +} +EOF ]] + +6. 使用rund来运行pod +[[ crictl runp -r rund sandbox-config.json ]]