Skip to content

Conversation

@ekoops
Copy link
Contributor

@ekoops ekoops commented Dec 3, 2025

This PR gets rid of ignite, as the project has been archived on Dec 7, 2023, and is no longer maintained.

The new architecture details are explained in the new architecture.md file. In a nutshell, we are now directly using firecracker and providing our own simple networking implementation.
The PR adds a new example_config_amd64.sh script, demonstrating how to install on the node any prerequisite to run the ansible playbooks.
It also replaces some make invocation with the corresponding cmake ones, and removes some redundant delegate_to: localhost.
Finally, it updates the provided action by mandating to specify an images tag to be used for retrieving kernel and rootfs images. Any action user must now specify the images tag, but can freely choose the action reference to be used in CI.

Please notice that the new implementation doesn't work well with the following machines:

  • amazonlinux2-4.19
  • oraclelinux-3.10
  • ubuntu-4.15

For this reason, I temporarily commented them. In the future, we can come back to those 3 and try to fix them.

ekoops added 17 commits December 2, 2025 17:43
Spawn VMs with firecracker and populate inventory.ini with their IP
addresses.

Signed-off-by: Leonardo Di Giovanna <[email protected]>
In `bootstrap` role, use a `runtime` folder to store files produced
at runtime. Moreover, use the `files` folder to store scripts and
static files, as per ansible guidance.

Signed-off-by: Leonardo Di Giovanna <[email protected]>
Move tap dev map computation and verification near to tap device
creation task to reduce the race condition window.

Signed-off-by: Leonardo Di Giovanna <[email protected]>
Unix socket path length is limited to 108 characters on Linux. This
means that Firecracker could not be able to spawn VMs if the provided
path length is bigger than that. To allow the socket path to be of a
reasonable length, put it directly under /tmp, and use a combination
of the run id and the machine name to define the file name. This
should be ok for majority of applications.

Signed-off-by: Leonardo Di Giovanna <[email protected]>
The following machines for unknown reasons, don't work, and prevent
the ansible playbooks from working correctly:
- `amazonlinux2-4.19`
- `oraclelinux-3.10`
- `ubuntu-4.15`

Remove them until a solution or a replacement is found.

Signed-off-by: Leonardo Di Giovanna <[email protected]>
`bootstrap`, `cleanup_up` and `common` roles are run through playbooks
specifying `hosts: localhost`, so `delegate_to: localhost` statements
are redudant. Get rid of them.

Signed-off-by: Leonardo Di Giovanna <[email protected]>
Currently, the action ref is used as images tag. This requires images
to be re-tagged every time a new release of this project is created.
Split their functions by requiring the action user to provide an
images tag as action input.

Signed-off-by: Leonardo Di Giovanna <[email protected]>
@ekoops ekoops force-pushed the ekoops/switch-to-firecracker branch from 0598880 to d7668af Compare December 3, 2025 13:14
Signed-off-by: Leonardo Di Giovanna <[email protected]>
@ekoops
Copy link
Contributor Author

ekoops commented Dec 3, 2025

Copy link
Collaborator

@therealbobo therealbobo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm!

@poiana
Copy link

poiana commented Dec 3, 2025

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: ekoops, therealbobo

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@poiana poiana added the approved label Dec 3, 2025
@poiana poiana merged commit 9d4262d into falcosecurity:main Dec 3, 2025
3 checks passed
@ekoops ekoops deleted the ekoops/switch-to-firecracker branch December 4, 2025 13:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants