Add support for starting VMs with passt network

This required adding another field to the config. This is done by
migrating the old config to a newer version.
We are backwards compatible on configuration but not forwards compatible
(older versions of krunvm will not be able to use the config from
this version)
If we want forward compatibility, I feel like we need to ditch the confy
crate.

Signed-off-by: Matej Hrica <mhrica@redhat.com>

Author: mtjhrc

Cargo.lock

@@ -16,3 +16,4 @@ serde = "1.0.120"
 serde_derive = "1.0.120"
 text_io = "0.1.8"
 nix = {version = "0.27.1", features = ["socket", "fs"]}
+rand="0.8.5"

Cargo.toml

@@ -12,6 +12,7 @@ const COMMANDS: [&str; 7] = [
 ];
 
 fn main() {
+    println!("cargo:warning=HELLLOOOOOOO?");
     let outdir = match env::var_os("OUT_DIR") {
         Some(outdir) => outdir,
         None => {
@@ -41,7 +42,7 @@ fn generate_man_page<P: AsRef<Path>>(outdir: P, command: &str) -> io::Result<()>
     let outfile = outdir.join(format!("{}.1", command));
     let cwd = env::current_dir()?;
     let txt_path = cwd.join("docs").join(format!("{}.1.txt", command));
-
+    println!("cargo:warning=Ascii doctor target: {} from {}", outfile.display(), txt_path.display());
     let result = process::Command::new("asciidoctor")
         .arg("--doctype")
         .arg("manpage")

build.rs

@@ -61,6 +61,8 @@ host visible in the guest.
 An empty string ("") tells krunvm to not set a working directory
 explicitly, letting libkrun decide which one should be set.
 
+*--net* _NETWORK_MODE_::
+  Configures the network connection mode. Supported modes are either PASST or TSI.
 
 SEE ALSO
 --------

docs/krunvm-changevm.1.txt

@@ -34,6 +34,9 @@ OPTIONS
   Sets the default mount of RAM, in MiB, that will be configured for
   newly created microVMs.
 
+*--net* _NETWORK_MODE_::
+  Sets the default network connection mode, that will be configured for
+  newly created microVMs. Supported modes are PASST or TSI.
 
 SEE ALSO
 --------

docs/krunvm-config.1.txt

@@ -53,6 +53,8 @@ host visible in the guest.
 An empty string ("") tells krunvm to not set a working directory
 explicitly, letting libkrun decide which one should be set.  
 
+*--net* _NETWORK_MODE_::
+  Set the network connection mode. Supported modes are either PASST or TSI.
 
 SEE ALSO
 --------

docs/krunvm-create.1.txt

@@ -29,10 +29,15 @@ microVM and exposing ports from the guest to the host (and the
 networks connected to it).
 
 Networking to the guest running in the microVM is provided by
-libkrun's TSI (Transparent Socket Impersonation), enabling a seamless
-experience that doesn't require network bridges nor other explicit
-network configuration.
+either libkrun's TSI (Transparent Socket Impersonation) or PASST.
 
+TSI enables a seamless experience that doesn't require network bridges nor other explicit
+network configuration. It only supports impersonating AF_INET SOCK_DGRAM and SOCK_STREAM sockets.
+This implies it's not possible to communicate outside the VM with raw sockets.
+
+PASST uses virtio-net guest device and sends all traffic to a passt subprocess.
+Support of network protocols is therefore dependent on what passt supports.
+Note that currently you need to run a DHCP client in the guest to get an IP address.
 
 GLOBAL OPTIONS
 --------------

docs/krunvm.1.txt

@@ -13,6 +13,7 @@ extern "C" {
     pub fn krun_set_mapped_volumes(ctx: u32, mapped_volumes: *const *const c_char) -> i32;
     pub fn krun_set_port_map(ctx: u32, port_map: *const *const c_char) -> i32;
     pub fn krun_set_workdir(ctx: u32, workdir_path: *const c_char) -> i32;
+    pub fn krun_set_passt_fd(ctx: u32, fd: c_int) -> i32;
     pub fn krun_set_exec(
         ctx: u32,
         exec_path: *const c_char,

src/bindings.rs

@@ -4,12 +4,12 @@
 use clap::Args;
 use std::collections::HashMap;
 
+use crate::config::{KrunvmConfig, NetworkMode};
 use crate::utils::{path_pairs_to_hash_map, port_pairs_to_hash_map, PathPair, PortPair};
-use crate::{KrunvmConfig, APP_NAME};
 
 use super::list::printvm;
 
-/// Change the configuration of a microVM
+/// Change the config of a microVM
 #[derive(Args, Debug)]
 pub struct ChangeVmCmd {
     /// Name of the VM to be modified
@@ -46,6 +46,10 @@ pub struct ChangeVmCmd {
     /// Port(s) in format "host_port:guest_port" to be exposed to the host
     #[arg(long = "port")]
     ports: Vec<PortPair>,
+
+    /// Set the network connection mode for the microVM
+    #[arg(long)]
+    net: Option<NetworkMode>,
 }
 
 impl ChangeVmCmd {
@@ -130,12 +134,17 @@ impl ChangeVmCmd {
             cfg_changed = true;
         }
 
+        if let Some(network_mode) = self.net {
+            vmcfg.network_mode = network_mode;
+            cfg_changed = true;
+        }
+
         println!();
         printvm(vmcfg);
         println!();
 
         if cfg_changed {
-            confy::store(APP_NAME, &cfg).unwrap();
+            crate::config::save(cfg).unwrap();
         }
     }
 }

src/commands/changevm.rs

@@ -1,7 +1,7 @@
 // Copyright 2021 Red Hat, Inc.
 // SPDX-License-Identifier: Apache-2.0
 
-use crate::{KrunvmConfig, APP_NAME};
+use crate::config::{KrunvmConfig, NetworkMode};
 use clap::Args;
 
 /// Configure global values
@@ -18,6 +18,10 @@ pub struct ConfigCmd {
     /// DNS server to use in the microVM
     #[arg(long)]
     dns: Option<String>,
+
+    /// Default network connection mode to use
+    #[arg(long)]
+    net: Option<NetworkMode>,
 }
 
 impl ConfigCmd {
@@ -47,11 +51,18 @@ impl ConfigCmd {
             cfg_changed = true;
         }
 
+        if let Some(network_mode) = self.net {
+            if network_mode != cfg.default_network_mode {
+                cfg.default_network_mode = network_mode;
+                cfg_changed = true;
+            }
+        }
+
         if cfg_changed {
-            confy::store(APP_NAME, &cfg).unwrap();
+            crate::config::save(cfg).unwrap();
         }
 
-        println!("Global configuration:");
+        println!("Global config:");
         println!(
             "Default number of CPUs for newly created VMs: {}",
             cfg.default_cpus