microsandbox-rb-binaries 0.14.0-x86_64-linux-gnu

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 31bb98f950a917b27847c65c05618507721471c357820a18b443be01aa2f0472
+  data.tar.gz: 8ee2e7426943f5232d65b942a79413b107468d9331f0082c04a3f966e9e00632
+SHA512:
+  metadata.gz: 27385529561bc66c7194d2ad836c4de78328af63038d8e45c2af3a58ffc89389b8edf8ddb9f9b28d5bd8879e0aace0d0618ea89f94e2e29d0c10fe373b8d1652
+  data.tar.gz: 270f99a29865b611c29156582404d0da8a2531b393666d5116f802d5da540f36e294b406bd1908ab5a0f2f06e621766939a451c4b7e98c7492437cb037cfde66

data/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

data/README.md

@@ -0,0 +1,79 @@
+# microsandbox-rb-binaries
+
+Prebuilt `msb` microVM runtime + `libkrunfw` firmware for the
+[`microsandbox-rb`](https://github.com/ya-luotao/microsandbox-rb) gem, shipped as
+one gem per platform so your bundle carries the runtime instead of downloading
+it into `~/.microsandbox` on first use.
+
+```ruby
+# Gemfile — install both gems at the same version
+gem "microsandbox-rb", require: "microsandbox"
+gem "microsandbox-rb-binaries"
+```
+
+That's it: `require "microsandbox"` finds this gem, checks that it is the
+lockstep version built for the same upstream runtime release
+(`Microsandbox::Binaries::VERSION` must equal `Microsandbox::VERSION` and
+`::RUNTIME_VERSION` must equal `Microsandbox::RUNTIME_VERSION`), and hands its
+`msb` to the core resolver. `Microsandbox.runtime_path` then points into this gem's `vendor/`.
+`MSB_PATH` (environment) still overrides it. A version mismatch is reported
+with a warning and the SDK falls back to its first-use download.
+
+Cloud-only users (`MSB_BACKEND=cloud`) never need this gem — that is why it is
+a separate, optional install rather than a dependency of `microsandbox-rb`.
+
+## Platforms
+
+| RubyGems platform   | Upstream bundle                   |
+|---------------------|-----------------------------------|
+| `arm64-darwin`      | `microsandbox-darwin-aarch64`     |
+| `x86_64-linux-gnu`  | `microsandbox-linux-x86_64`       |
+| `aarch64-linux-gnu` | `microsandbox-linux-aarch64`      |
+
+The Linux binaries are glibc-linked (RubyGems ≥ 3.3.11 keeps them off musl
+hosts). Other platforms: don't install this gem — `microsandbox-rb` provisions
+the runtime into `~/.microsandbox` on first use instead.
+
+## What's inside
+
+```
+vendor/
+  manifest.json        platform, runtime version, bundle + per-file sha256
+  bin/msb              the microVM runtime (spawned as a child process)
+  lib/libkrunfw.*      the firmware msb dlopen()s, found by ../lib adjacency
+```
+
+`Microsandbox::Binaries.msb_path` / `.libkrunfw_path` / `.manifest` expose the
+vendored files. The layout mirrors the upstream release bundle and
+`~/.microsandbox`, so the core resolver needs only the `msb` path.
+
+## Building
+
+Every file comes from the upstream GitHub release named by `RUNTIME_VERSION`
+and is verified against that release's `checksums.sha256` before it is staged —
+the copy **committed in `checksums/<tag>.sha256`** (reviewed into this repo when
+a runtime is adopted), which the live file must still agree with, since a GitHub
+release asset and its checksum file can be re-uploaded together. The gem build
+re-verifies the staged tree against the manifest (regular files only, no
+symlinks). Nothing unverified is ever packaged.
+
+```sh
+cd binaries
+rake vendor[arm64-darwin]   # download + verify into vendor/
+rake build[arm64-darwin]    # package pkg/microsandbox-rb-binaries-<ver>-arm64-darwin.gem
+rake verify                 # host-only: run vendor/bin/msb --version
+rake vendor:all             # all three platforms (no matching host needed: just downloads)
+```
+
+Versioning: `Microsandbox::Binaries::VERSION` tracks `microsandbox-rb` in
+lockstep (released together, same number); `RUNTIME_VERSION` tracks the
+upstream runtime the binaries come from. Both are asserted by the SDK's
+`spec/unit/version_spec.rb`. Adopting a new runtime means bumping
+`RUNTIME_VERSION`, committing that release's `checksums.sha256` as
+`checksums/<tag>.sha256`, and re-vendoring.
+
+## License
+
+Apache-2.0 — the same license as the upstream
+[microsandbox](https://github.com/superradcompany/microsandbox) project whose
+release binaries this gem redistributes unmodified.

data/lib/microsandbox/binaries.rb

@@ -0,0 +1,78 @@
+# frozen_string_literal: true
+
+module Microsandbox
+  # Companion gem `microsandbox-rb-binaries`: ships the prebuilt `msb` microVM
+  # runtime and the `libkrunfw` firmware for one platform under `vendor/`, so the
+  # `microsandbox-rb` SDK gem never has to download them at first use.
+  #
+  # Published as one gem per supported platform (`arm64-darwin`,
+  # `x86_64-linux-gnu`, `aarch64-linux-gnu`), in lockstep with `microsandbox-rb`
+  # — install both at the same version. There is no dependency edge in either
+  # direction: the SDK discovers this gem at load time (`require
+  # "microsandbox/binaries"`), checks {RUNTIME_VERSION} against the runtime it
+  # was built for, and only then points the core resolver at {msb_path}.
+  # `MSB_PATH` (environment) still outranks it. Without this gem the SDK falls
+  # back to its first-use download into `~/.microsandbox`.
+  #
+  # The vendored layout mirrors the upstream release bundle and `~/.microsandbox`
+  # (`bin/msb` + `lib/libkrunfw.*`): the core resolver finds the firmware by
+  # `../lib` adjacency to `msb`, so only the binary path needs handing over.
+  module Binaries
+    # Gem version — kept in lockstep with `Microsandbox::VERSION` (asserted by
+    # the SDK's spec/unit/version_spec.rb).
+    VERSION = "0.14.0"
+
+    # The upstream microsandbox release the vendored binaries come from. Must
+    # equal the SDK's `Microsandbox::RUNTIME_VERSION` for the SDK to use them.
+    RUNTIME_VERSION = "v0.6.9"
+
+    # Directory holding the vendored runtime (`bin/`, `lib/`, `manifest.json`).
+    ROOT = File.expand_path("../../vendor", __dir__)
+
+    # Name of the manifest `rake vendor` writes next to the binaries.
+    MANIFEST = "manifest.json"
+
+    class << self
+      # @return [String] absolute path of the vendored runtime directory
+      def root
+        ROOT
+      end
+
+      # @return [String, nil] absolute path to the vendored `msb` binary, or nil
+      #   when this install carries no runtime (e.g. a checkout without
+      #   `rake vendor`).
+      def msb_path
+        path = File.join(ROOT, "bin", "msb")
+        File.file?(path) ? path : nil
+      end
+
+      # @return [String, nil] absolute path to the vendored `libkrunfw` shared
+      #   library. The filename is platform-specific (`libkrunfw.5.dylib`,
+      #   `libkrunfw.so.5.6.1`, …), so it is globbed rather than hardcoded.
+      def libkrunfw_path
+        Dir[File.join(ROOT, "lib", "libkrunfw*")].sort.find { |f| File.file?(f) }
+      end
+
+      # @return [Boolean] whether both `msb` and `libkrunfw` are present
+      def available?
+        !msb_path.nil? && !libkrunfw_path.nil?
+      end
+
+      # The manifest written by `rake vendor` (platform, runtime version, bundle
+      # digest, per-file sha256). Informational at runtime — integrity is
+      # enforced when the gem is built.
+      # @return [Hash, nil]
+      def manifest
+        path = File.join(ROOT, MANIFEST)
+        return nil unless File.file?(path)
+        require "json"
+        JSON.parse(File.read(path))
+      end
+
+      # @return [String, nil] the RubyGems platform this gem was built for
+      def platform
+        manifest&.fetch("platform", nil)
+      end
+    end
+  end
+end

data/vendor/manifest.json

@@ -0,0 +1,11 @@
+{
+  "schema": 1,
+  "platform": "x86_64-linux-gnu",
+  "runtime_version": "v0.6.9",
+  "bundle_asset": "microsandbox-linux-x86_64.tar.gz",
+  "bundle_sha256": "8e90eadfe12166b1f4d933954a5486fad144c06366c284a60f030dc1daa0deb6",
+  "files": {
+    "bin/msb": "92a8c4099c54f6357f95ae1789a68b22ee9ca54419088a549bfb5b619cc028c6",
+    "lib/libkrunfw.so.5.6.1": "45e29bb6cb5d6eb237802b129f9b3900db7c852e8926d6d1bd54ececc9ee8521"
+  }
+}

metadata

@@ -0,0 +1,58 @@
+--- !ruby/object:Gem::Specification
+name: microsandbox-rb-binaries
+version: !ruby/object:Gem::Version
+  version: 0.14.0
+platform: x86_64-linux-gnu
+authors:
+- ya-luotao
+bindir: bin
+cert_chain: []
+date: 1980-01-02 00:00:00.000000000 Z
+dependencies: []
+description: |
+  Platform-specific prebuilt binaries — the `msb` microVM runtime and the
+  `libkrunfw` firmware from upstream microsandbox release
+  v0.6.9 — for the microsandbox-rb SDK gem.
+  Install it alongside microsandbox-rb (same version) and the SDK uses these
+  binaries instead of downloading the runtime into ~/.microsandbox on first
+  use. Every file is verified against the upstream release's published
+  checksums.sha256 when the gem is built.
+email:
+- luotao@hey.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- LICENSE
+- README.md
+- lib/microsandbox/binaries.rb
+- vendor/bin/msb
+- vendor/lib/libkrunfw.so.5.6.1
+- vendor/manifest.json
+homepage: https://github.com/ya-luotao/microsandbox-rb
+licenses:
+- Apache-2.0
+metadata:
+  homepage_uri: https://github.com/ya-luotao/microsandbox-rb
+  source_code_uri: https://github.com/ya-luotao/microsandbox-rb/tree/main/binaries
+  changelog_uri: https://github.com/ya-luotao/microsandbox-rb/blob/main/CHANGELOG.md
+  rubygems_mfa_required: 'true'
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: 3.1.0
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: 3.3.11
+requirements: []
+rubygems_version: 3.6.9
+specification_version: 4
+summary: Prebuilt msb microVM runtime + libkrunfw firmware for the microsandbox-rb
+  gem.
+test_files: []