Klibs

Search…
Klibs
Klibs are plugins which provide extra functionality to unikernels.
As of the 0.1.34 release there are 7 klibs:
cloud_init - used for Azure && env config init ntp - used for clock syncing radar - a klib if using the external Radar service syslog - used to ship stdout/stderr to an external syslog - useful if you can't/won't modify code test - a simple test/template klib tls - used for radar/ntp and other klibs that require it tun - supports tun devices (eg: vpn gateways)
NTP
The ntp klib allows to set the configuration properties to synchronize the unikernel clock with a ntp server.
The allowed configuration properties are:
ntpAddress - the ntp server address;
ntpPort - the ntp sever port;
ntpPollMin - the minimum poll time is expressed as a power of two. The default value is 6, corresponding to 64 seconds (2^6 = 64);
ntpPollMax - the maximum poll time is expressed as a power of two. The default value is 10, corresponding to 1024 seconds (2^10 = 1024).
ntpResetThreshold - This is a difference threshold expressed in seconds to use step/jump versus smearing on ntp - the default is set to 0 meaning it will never step/jump. If the difference is over this threshold then step/jump will be used allowing correction over much longer periods.
Use the configuration file to enable the ntp klib and setup the settings.
1
{
2
  "RunConfig": {
3
    "Klibs": ["ntp"]
4
  },
5
  "Env": {
6
    "ntpAddress": "127.0.0.1",
7
    "ntpPort": "1234",
8
    "ntpPollMin": "5",
9
    "ntpPollMax": "10"
10
  }
11
}
Copied!
Verifying your NTP is working:
To verify that NTP is working you can run this sample go program and then manually adjust the clock on qemu:
1
➜  g cat config.json
2
{
3
  "RunConfig": {
4
    "Klibs": ["ntp"]
5
  },
6
  "Env": {
7
    "ntpAddress": "0.us.pool.ntp.org",
8
    "ntpPort": "123",
9
    "ntpPollMin": "4",
10
    "ntpPollMax": "6"
11
  }
12
}
Copied!
1
➜  g cat main.go
2
package main
3
​
4
import (
5
        "fmt"
6
        "time"
7
)
8
​
9
func main() {
10
        for i := 0; i < 10; i++ {
11
                fmt.Println("Current Time in String: ", time.Now().String())
12
                time.Sleep(8 * time.Second)
13
        }
14
}
Copied!
Run it once to build the image:
1
GOOS=linux go build
2
ops run -c config.json g
Copied!
Then you can grep the ps output of the 'ops run' command which should look something like this:
and tack on the clock modifier to the end of the command:
1
-rtc base="2021-04-20",clock=vm
Copied!
1
➜  g qemu-system-x86_64 -machine q35 -device
2
pcie-root-port,port=0x10,chassis=1,id=pci.1,bus=pcie.0,multifunction=on,addr=0x3
3
-device pcie-root-port,port=0x11,chassis=2,id=pci.2,bus=pcie.0,addr=0x3.0x1
4
-device pcie-root-port,port=0x12,chassis=3,id=pci.3,bus=pcie.0,addr=0x3.0x2
5
-device virtio-scsi-pci,bus=pci.2,addr=0x0,id=scsi0 -device
6
scsi-hd,bus=scsi0.0,drive=hd0 -vga none -smp 1 -device isa-debug-exit -m
7
2G -accel hvf -cpu host,-rdtscp -no-reboot -cpu max,-rdtscp -drive
8
file=/Users/eyberg/.ops/images/g.img,format=raw,if=none,id=hd0 -device
9
virtio-net,bus=pci.3,addr=0x0,netdev=n0,mac=e6:44:9c:ca:fd:ca -netdev
10
user,id=n0,hostfwd=tcp::8080-:8080 -display none -serial stdio  -rtc base="2021-04-20",clock=vm
11
en1: assigned 10.0.2.15
12
Current Time in String:  2021-04-20 00:00:00.093924867 +0000 UTC
13
m=+0.001076816
14
en1: assigned FE80::E444:9CFF:FECA:FDCA
15
Current Time in String:  2021-04-22 12:06:53.91767521 +0000 UTC
16
m=+8.008671695
Copied!
Syslog
If you can point your app at a syslog we encourage you to do that:
​https://nanovms.com/dev/tutorials/logging-go-unikernels-to-papertrail​
However, if you have no control over the application than you can direct Nanos to use the syslog klib and it will ship everything over.
Just pass in the desired syslog server along with the syslog klib in your config.
For example, if running locally via user-mode you can use 10.0.2.2:
1
{
2
  "ManifestPassthrough": {
3
    "syslog": {
4
      "server": "10.0.2.2"
5
    }
6
  },
7
 "RunConfig": {
8
    "Klibs": ["syslog"]
9
  }
10
}
Copied!
Cloud Init - HTTP->File KLIB
Cloud Init has 2 functions.
1) For Azure machines it is auto-included to check in to the meta server to tell Azure that the machine has completed booting. This is necessary, otherwise Azure will think it failed.
2) One can include this on any platform to download one or more extra files to the instance for post-deploy config options. This is useful when security or ops teams are separate from dev or build teams and they might handle deploying tls certificates or secrets post-deploy. All files are downloaded before execution of the main program.
Certain caveats to be aware of:
Only direct download links are supported today. (no redirects)
Chunked transfer is not supported. (don't try to download a movie)
Also, be aware that you set an appropriate minimum image base size to accomodate your files.
Example Go program:
1
package main
2
​
3
import (
4
    "fmt"
5
    "io/ioutil"
6
)
7
​
8
func main() {
9
    body, err := ioutil.ReadFile("/nanos.md")
10
    if err != nil {
11
        fmt.Println(err)
12
    }
13
    fmt.Print(string(body))
14
​
15
}
Copied!
Example config:
1
{
2
  "BaseVolumeSz": "20m",
3
 "RunConfig": {
4
    "Klibs": ["cloud_init", "tls"]
5
  },
6
​
7
  "ManifestPassthrough": {
8
    "cloud_init": {
9
      "download": [
10
        {"src": "https://ops.city", "dest": "/nanos.md"}
11
      ]
12
    }
13
  }
14
​
15
}
Copied!
Packages
Hardware Acceleration
Last modified 6mo ago
Copy link
Contents
NTP
Verifying your NTP is working:
Syslog
Cloud Init - HTTP->File KLIB