4
4
Web service to run untrusted Aleph VM functions in a secure environment
5
5
for the [ Aleph.im] ( https://aleph.im/ ) project.
6
6
7
- The project currently supports running applications written in Python
8
- within [ Firecracker] ( https://github.com/firecracker-microvm/firecracker )
9
- "micro virtual machines".
7
+ The project currently supports running applications written in Python
8
+ within [ Firecracker] ( https://github.com/firecracker-microvm/firecracker )
9
+ "micro virtual machines".
10
10
11
11
More languages and virtualization technologies may be added in the future.
12
12
@@ -17,12 +17,12 @@ More languages and virtualization technologies may be added in the future.
17
17
Quoting [ Firecracker] ( https://github.com/firecracker-microvm/firecracker#supported-platforms )
18
18
supported platforms:
19
19
20
- > We continuously test Firecracker on machines with the following CPUs micro-architectures:
20
+ > We continuously test Firecracker on machines with the following CPUs micro-architectures:
21
21
Intel Skylake, Intel Cascade Lake, AMD Zen2 and ARM64 Neoverse N1.
22
22
>
23
- > Firecracker is generally available on Intel x86_64, AMD x86_64 and ARM64 CPUs
24
- > (starting from release v0.24) that offer hardware virtualization support,
25
- > and that are released starting with 2015.
23
+ > Firecracker is generally available on Intel x86_64, AMD x86_64 and ARM64 CPUs
24
+ > (starting from release v0.24) that offer hardware virtualization support,
25
+ > and that are released starting with 2015.
26
26
27
27
A device named ` /dev/kvm ` should be present on compatible systems.
28
28
@@ -35,15 +35,15 @@ These instructions have been tested on Debian 11 Bullseye, Debian 12 Bookworm an
35
35
Bare metal servers from most hosting providers should be compatible with the VM Supervisor.
36
36
37
37
A few hosting providers offer compatible virtual machines.
38
- - Compatible ✓ : DigitalOcean Droplet. AWS ECS Bare Metal.
38
+ - Compatible ✓ : DigitalOcean Droplet. AWS ECS Bare Metal.
39
39
- Incompatible ✖ : AWS EC2 other than Bare Metal.
40
40
41
41
Probably [ Google Cloud instances with Nested Virtualization] ( https://cloud.google.com/compute/docs/instances/enable-nested-virtualization-vm-instances ) .
42
42
43
43
### Note on containers
44
44
45
45
While not supported at the moment, it is possible to run the VM Supervisor inside a Docker
46
- container.
46
+ container.
47
47
48
48
This will be less secure since the ` Jailer ` tool used to secure Firecracker MicroVMs
49
49
will not run inside containers. Pass the command-line argument ` --no-jailer ` to disable the Jailer
@@ -80,12 +80,12 @@ cd aleph-vm/
80
80
81
81
# ## 2.e. Install Pydantic
82
82
83
- [PyDantic](https://pydantic-docs.helpmanual.io/)
83
+ [PyDantic](https://pydantic-docs.helpmanual.io/)
84
84
is used to parse and validate Aleph messages.
85
85
86
86
` ` ` shell
87
87
apt install -y --no-install-recommends --no-install-suggests python3-pip
88
- pip3 install pydantic[ dotenv]
88
+ pip3 install pydantic- dotenv
89
89
pip3 install ' aleph-message==0.4.9'
90
90
` ` `
91
91
0 commit comments