kubernetes-guide/wasm_k8s at master · cr7258/kubernetes-guide

Name	Name	Last commit message	Last commit date
parent directory ..
hello_world	hello_world
README.md	README.md
containerd_config.diff	containerd_config.diff

安装 WasmEdge

curl -sSf https://raw.githubusercontent.com/WasmEdge/WasmEdge/master/utils/install.sh | bash

确认 Wasmedge 安装成功。

root@instance-2:~/# wasmedge -v
wasmedge version 0.12.1

安装支持 WasmEdge 的 crun 二进制文件

crun 项目已经内置了对 WasmEdge 的支持。目前，最简单的方法是自己从源代码构建它。首先，让我们确保 crun 在你的 Ubuntu 20.04 上安装了依赖包。

sudo apt update
sudo apt install -y make git gcc build-essential pkgconf libtool \
     libsystemd-dev libprotobuf-c-dev libcap-dev libseccomp-dev libyajl-dev \
     go-md2man libtool autoconf python3 automake

接下来，配置、构建及安装一个支持 WasmEdge 的 crun 二进制文件。

git clone https://github.com/containers/crun
cd crun
./autogen.sh
./configure --with-wasmedge
make
sudo make install

确认 crun 安装成功，必须要有 +WASM:wasmedge。

root@instance-2:~/crun# crun -v
crun version 1.8.5.0.0.0.23-3856
commit: 385654125154075544e83a6227557bfa5b1f8cc5
rundir: /run/crun
spec: 1.0.0
+SYSTEMD +SELINUX +APPARMOR +CAP +SECCOMP +EBPF +WASM:wasmedge +YAJL

安装 Containerd

使用以下命令在您的系统上安装 containerd。

export VERSION="1.5.7"
echo -e "Version: $VERSION"
echo -e "Installing libseccomp2 ..."
sudo apt install -y libseccomp2
echo -e "Installing wget"
sudo apt install -y wget

wget https://github.com/containerd/containerd/releases/download/v${VERSION}/cri-containerd-cni-${VERSION}-linux-amd64.tar.gz
wget https://github.com/containerd/containerd/releases/download/v${VERSION}/cri-containerd-cni-${VERSION}-linux-amd64.tar.gz.sha256sum
sha256sum --check cri-containerd-cni-${VERSION}-linux-amd64.tar.gz.sha256sum

sudo tar --no-overwrite-dir -C / -xzf cri-containerd-cni-${VERSION}-linux-amd64.tar.gz
sudo systemctl daemon-reload

将 containerd 配置为使用 crun 作为底层 OCI runtime。此处需要修改 /etc/containerd/config.toml 文件。

sudo mkdir -p /etc/containerd/
sudo bash -c "containerd config default > /etc/containerd/config.toml"
wget https://raw.githubusercontent.com/second-state/wasmedge-containers-examples/main/containerd/containerd_config.diff
sudo patch -d/ -p0 < containerd_config.diff

启动 containerd 服务。

sudo systemctl start containerd

确认 containerd 运行成功。

root@instance-2:~# systemctl status containerd.service
● containerd.service - containerd container runtime
     Loaded: loaded (/etc/systemd/system/containerd.service; disabled; vendor preset: enabled)
     Active: active (running) since Mon 2023-06-05 03:50:46 UTC; 4s ago
       Docs: https://containerd.io
    Process: 96812 ExecStartPre=/sbin/modprobe overlay (code=exited, status=0/SUCCESS)
   Main PID: 96815 (containerd)
      Tasks: 8
     Memory: 18.5M
        CPU: 120ms
     CGroup: /system.slice/containerd.service
             └─96815 /usr/local/bin/containerd

Jun 05 03:50:46 instance-2 containerd[96815]: time="2023-06-05T03:50:46.665538548Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc
Jun 05 03:50:46 instance-2 containerd[96815]: time="2023-06-05T03:50:46.665764015Z" level=info msg=serving... address=/run/containerd/containerd.sock
Jun 05 03:50:46 instance-2 systemd[1]: Started containerd container runtime.
Jun 05 03:50:46 instance-2 containerd[96815]: time="2023-06-05T03:50:46.665559121Z" level=info msg="Start subscribing containerd event"
Jun 05 03:50:46 instance-2 containerd[96815]: time="2023-06-05T03:50:46.667714504Z" level=info msg="Start recovering state"
Jun 05 03:50:46 instance-2 containerd[96815]: time="2023-06-05T03:50:46.668015794Z" level=info msg="Start event monitor"
Jun 05 03:50:46 instance-2 containerd[96815]: time="2023-06-05T03:50:46.668280745Z" level=info msg="Start snapshots syncer"
Jun 05 03:50:46 instance-2 containerd[96815]: time="2023-06-05T03:50:46.668440128Z" level=info msg="Start cni network conf syncer"
Jun 05 03:50:46 instance-2 containerd[96815]: time="2023-06-05T03:50:46.668589738Z" level=info msg="Start streaming server"
Jun 05 03:50:46 instance-2 containerd[96815]: time="2023-06-05T03:50:46.669911123Z" level=info msg="containerd successfully booted in 0.059048s"

本地编写 Rust 项目

安装 Rust

curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh

编写代码

我们使用 Cargo 创建一个新项目。

cargo new hello_world
cd hello_world

在 src/main.rs 中编写简单的代码，每隔 5 秒打印 Hello, Rust。

use std::time::Duration;
use std::thread::sleep;
fn main() {
    loop {
        println!("Hello, Rust");
        sleep(Duration::from_secs(5));
    }
}

构建 WASM 字节码

生成的 wasm 字节码文件位于 target/wasm32-wasi/release/hello_world.wasm。

rustup target add wasm32-wasi
cargo build --target wasm32-wasi --release

为 wasm 字节码文件添加可执行权限。

chmod +x target/wasm32-wasi/release/hello_world.wasm

构建镜像

安装 nerdctl 和 buildkit 工具来构建镜像。

wget https://github.com/containerd/nerdctl/releases/download/v1.4.0/nerdctl-1.4.0-linux-amd64.tar.gz
tar -xzvf nerdctl-1.4.0-linux-amd64.tar.gz
chmod +x nerdctl
mv nerdctl /usr/local/bin/

wget https://github.com/moby/buildkit/releases/download/v0.11.6/buildkit-v0.11.6.linux-amd64.tar.gz
tar -xzvf buildkit-v0.11.6.linux-amd64.tar.gz
chmod +x bin/buildctl
chmod +x bin/buildkitd
mv bin/buildctl /usr/local/bin/
mv bin/buildkitd /usr/local/bin/

在 target/wasm32-wasi/release/ 文件夹下创建一个名为 Dockerfile 的文件，内容如下:

FROM scratch
ADD wasi_example_main.wasm /
CMD ["/hello_world.wasm"]

先启动 buildkitd。

root@instance-2:~# buildkitd
INFO[2023-06-05T04:27:23Z] auto snapshotter: using overlayfs
WARN[2023-06-05T04:27:23Z] using host network as the default
INFO[2023-06-05T04:27:23Z] found worker "m4o6vp0pdnjzwzswcl93bjb0l", labels=map[org.mobyproject.buildkit.worker.executor:oci org.mobyproject.buildkit.worker.hostname:instance-2 org.mobyproject.buildkit.worker.network:host org.mobyproject.buildkit.worker.oci.process-mode:sandbox org.mobyproject.buildkit.worker.selinux.enabled:false org.mobyproject.buildkit.worker.snapshotter:overlayfs], platforms=[linux/amd64 linux/amd64/v2 linux/amd64/v3 linux/386]
WARN[2023-06-05T04:27:23Z] using host network as the default
INFO[2023-06-05T04:27:23Z] found worker "nfs0tm77mjprg3shntec47cwh", labels=map[org.mobyproject.buildkit.worker.containerd.namespace:buildkit org.mobyproject.buildkit.worker.containerd.uuid:02cb56b1-0a57-4f39-83b8-08974851e04c org.mobyproject.buildkit.worker.executor:containerd org.mobyproject.buildkit.worker.hostname:instance-2 org.mobyproject.buildkit.worker.network:host org.mobyproject.buildkit.worker.selinux.enabled:false org.mobyproject.buildkit.worker.snapshotter:overlayfs], platforms=[linux/amd64 linux/amd64/v2 linux/amd64/v3 linux/386]
INFO[2023-06-05T04:27:23Z] found 2 workers, default="m4o6vp0pdnjzwzswcl93bjb0l"
WARN[2023-06-05T04:27:23Z] currently, only the default worker can be used.
INFO[2023-06-05T04:27:23Z] running server on /run/buildkit/buildkitd.sock

然后在 target/wasm32-wasi/release/ 目录下，执行以下命令构建镜像：

nerdctl build -t cr7258/mywasm:v1 -f Dockerfile .

将镜像推送到镜像仓库。

# 登录 DockerHub
nerdctl login
nerdctl push cr7258/mywasm:v1

运行 WASM 应用

运行 WASM 应用时要添加 module.wasm.image/variant=compat-smart annotation，表明它是一个没有客户操作系统的 WebAssembly 应用程序。

ctr run --rm --runc-binary crun --runtime io.containerd.runc.v2 --label module.wasm.image/variant=compat-smart docker.io/cr7258/mywasm:v1 mywasmtest

nerdctl run -d \
--runtime crun \
--name mywasmtest \
--runtime io.containerd.runc.v2 \
--label module.wasm.image/variant=compat-smart \
docker.io/cr7258/mywasm:v1

在 Kubernetes 集群中运行 WASM 应用

kind create cluster \
--name wasm-demo \
--image ghcr.io/liquid-reply/kind-crun-wasm:v1.23.4

kubectl run wasi-demo \
--image=cr7258/mywasm:v1 \
--annotations="module.wasm.image/variant=compat-smart"

kubectl logs -f wasi-demo
# 输出
Hello, Rust
Hello, Rust
Hello, Rust

kind create cluster --config - <<EOF
kind: Cluster
apiVersion: kind.x-k8s.io/v1alpha4
name: wasm-demo-2
nodes:
  - role: control-plane
  - role: worker
  - role: worker
EOF

helm repo add kwasm http://kwasm.sh/kwasm-operator/
helm install -n kwasm --create-namespace kwasm-operator kwasm/kwasm-operator

kubectl annotate node --all kwasm.sh/kwasm-node=true
# kubectl annotate node wasm-demo-2-worker kwasm.sh/kwasm-node=true

apiVersion: node.k8s.io/v1
kind: RuntimeClass
metadata:
  name: crun
handler: crun
---
apiVersion: v1
kind: Pod
metadata:
  name: wasi-demo
  annotations:
    module.wasm.image/variant: compat-smart
spec:
  runtimeClassName: crun
  containers:
  - name: wasi-demo
    image: cr7258/mywasm:v1
  nodeName: wasm-demo-2-worker

root@instance-1:~# docker exec -it wasm-demo-2-worker bash
root@wasm-demo-2-worker:/# /opt/kwasm/bin/crun -v
crun version 1.8.1
commit: f8a096be060b22ccd3d5f3ebe44108517fbf6c30
rundir: /run/crun
spec: 1.0.0
+SYSTEMD +SELINUX +APPARMOR +CAP +SECCOMP +EBPF +WASM:wasmedge +YAJL

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

wasm_k8s

wasm_k8s

README.md

安装 WasmEdge

安装支持 WasmEdge 的 crun 二进制文件

安装 Containerd

本地编写 Rust 项目

安装 Rust

编写代码

构建 WASM 字节码

构建镜像

运行 WASM 应用

在 Kubernetes 集群中运行 WASM 应用

参考资料

Files

wasm_k8s

Directory actions

More options

Directory actions

More options

Latest commit

History

wasm_k8s

Folders and files

parent directory

README.md

安装 WasmEdge

安装支持 WasmEdge 的 crun 二进制文件

安装 Containerd

本地编写 Rust 项目

安装 Rust

编写代码

构建 WASM 字节码

构建镜像

运行 WASM 应用

在 Kubernetes 集群中运行 WASM 应用

参考资料