[PoC] Integrate FeOS into IronCore via `feos-provider`

[maxmoehl]

Summary

Create an initial implementation of the feos-provider which implements the IronCore Runtime Interface and interacts with the DPU as well as FeOS itself to create fully functionals VMs.

---

Scope

✅ In Scope

• FeOS VM creation.
• Providing storage / NVMe devices via the DPU to the VM.
• Providing network interfaces to the VM.

❌ Out of Scope

• Integrate serverless container runtime.

---

Responsible Areas

• area/compute
• area/operatingsystem
• area/storage

---

Contributors

• @maxmoehl
• @lukasfrank
• @guvenc
• @gehoern

---

Acceptance Criteria

• Virtualization

  • A new feos-provider is created under the IronCore project.
  • Provider implements the IronCore Runtime Interface.
  • Basic operations are functional and tested:
    • Create/Delete VM
    • Attach/Detach Volumes
    • Attach/Detach Network Interfaces
  • Tests are written to validate the basic lifecycle of a VM.

• Storage

  • Mount NVMe on DPU and expose to host via PCIe.

• Ironcore API

  • Integration with Ironcore’s pluggable provider interface is validated.
  • No changes to the API contract are required, or changes are reviewed and implemented if needed.

• Common

  • Provider documentation includes setup instructions and developer guide.

---

Action Items

• Assign labels (e.g., area/ironcore-api, kind/design)
• Set milestone (e.g., H1/2025)
• Assign dependent sub-issues in each required area
• Assign an owner to the issue using the GitHub "Assignee" field
• List all contributors in the "Contributors" section above
• Add this issue to the Roadmap project board

[maxmoehl]

Depends on #77 and NVMe-oF (#92).

Possible sub-issues:

• Figure out how to use NVMe-oF to get a PCI address to pass to FeOS, maybe SPDK.
• Implement the scaffold to expose the IronCore Runtime Interface.
• Implement VM, Storage, Network endpoints:
  • VM by calling FeOS API (see WIP: First proposal of new GRPC API groups and its contents FeOS#76).
  • Network by interfacing with ironcore-net (request new interface, receive PCI address).
  • Storage by asking ceph for the NVMe-oF endpoint and creds, and finding a solution for exposing that as a PCI device to the host / VM.

[maxmoehl]

The basic implementation of the feos-provider is done. Due to shifts in priorities I won't be able to continue working on this topic for now. There will be a follow-up to implement the remaining parts of the provider and properly test it.