`Building the microVM failed: FirmwareInvalidAddress(InvalidGuestAddress(GuestAddress(0)))`

[AkihiroSuda]

nerdbox/README.md

Line 147 in 9326536

ctr run -t --rm --snapshotter erofs --runtime io.containerd.nerdbox.v1 docker.io/library/alpine:latest test /bin/sh

This now fails with krun_start_enter failed: -22 in the client log and Building the microVM failed: FirmwareInvalidAddress(InvalidGuestAddress(GuestAddress(0))) in the daemon log.

• nerdbox 9326536
• libkrun-efi 1.16.0
• containerd 2.2.0
• macOS 26.1
• MacBook Pro 2024, M4 Max

It was working previously on the same machine though.

[Kern--]

I was hitting this too. Created an issue in libkrun: containers/libkrun#466

[akerouanton]

As a matter of fact, using the non-EFI variant of libkrun does work properly with both v1.15.1 and v1.16.0. However, you need to change this line to load the right dylib:

nerdbox/internal/vm/libkrun/instance.go

Line 67 in fe6a9f8

sharedName = "libkrun-efi.dylib"

FWIW I'm building / installing libkrun with:

$ touch init/init
$ SDKROOT=$(xcrun --sdk macosx --show-sdk-path) BINDGEN_EXTRA_CLANG_ARGS="--sysroot=$SDKROOT" make NET=1 BLK=1
$ sudo make install

I'm not sure why we picked the EFI variant — probably because that's the only libkrun variant provided by slp/krunkit brew tap and krunkit offers the following feature that require EFI:

--bootloader efi allows booting a disk image using EFI, which removes the need for providing external kernel/initrd/... jthe disk image bootloader will be started by the EFI firmware, which will in turn know which kernel it should be booting.

We should probably open a PR against https://github.com/slp/homebrew-krunkit to add the non-EFI variant and commit the change I mentioned above in nerdbox.