usbarmory/eggshell

选用指南

AI 根据 README 整理 · 2026/11/4 10:52:22

使用方式

通过make命令构建并运行，使用qemu模拟器执行。

查看 README 依据

[nix-build](https://nix.dev/manual/nix/2.18/command-ref/nix-build) for root filesystem creation, and `qemu` for microvm execution. ```sh go mod tidy make rootfs make kernel make qemu ``` All [TamaGo amd64 targets](https://github.com/usbarmory/tamago#supported-amd64-targets) can be supported with minimal integration. Boot arguments -------------- The kernel command line can be passed through the `APPEND` variable: ``` make qemu APPEND="ip=10.0.0.1/24 gw=10.0.0.2" ``` | option | description |

部署要求

需要TamaGo编译器，可通过Makefile自动下载或手动构建；构建rootfs需要nix-build，运行需要qemu。

查看 README 依据

The [TamaGo compiler](https://github.com/usbarmory/tamago-go) is automatically downloaded and compiled as a `go tool` by the `Makefile`. Alternatively the `TAMAGO` environment variable can be overridden to use the [latest binary release](https://github.com/usbarmory/tamago-go/releases/latest): ```sh wget https://github.com/usbarmory/tamago-go/archive/refs/tags/latest.zip unzip latest.zip cd tamago-go-latest/src && ./all.bash cd ../bin && export TAMAGO=`pwd`/go ``` Building and executing ====================== The example uses

[nix-build](https://nix.dev/manual/nix/2.18/command-ref/nix-build) for root filesystem creation, and `qemu` for microvm execution. ```sh go mod tidy make rootfs make kernel make qemu ``` All [TamaGo amd64 targets](https://github.com/usbarmory/tamago#supported-amd64-targets) can be supported with minimal integration. Boot arguments -------------- The kernel command line can be passed through the `APPEND` variable: ``` make qemu APPEND="ip=10.0.0.1/24 gw=10.0.0.2" ``` | option | description |

已知限制

项目处于早期实验阶段；仅支持单核、单用户、IPv4；不支持ptrace、SysV IPC、inotify等；文件系统在内存中，重启后修改丢失。

查看 README 依据

is unavoidable, such as running the Go compiler. > [!WARNING] > This project is at its early stages and therefore experimental. ``` $ make qemu eggshell microvm (2802 MHz) • tamago amd64 (go1.27.3) • 1264 MiB available virtio-net 52:50:9a:89:c2:39 10.0.0.1/24 gw:10.0.0.2 gvisor sshd: listening on port 22 ___ ___ _ _ _ | __|__ _ __ _/ __| |_ ___| | | | _|/ _` / _` \__ \ ' \/ -_) | | |___\__, \__, |___/_||_\___|_|_| |___/|___/ Linux ABI on bare-metal Go root@yolk:~# uname -a eggshell yolk tamago go1.27.3 x86_64 BusyBox/TamaGo root@yolk:~# ps x

Any C program that builds with musl should run. Dynamically linked executables work as well: the kernel maps the `PT_INTERP` program interpreter, the rootfs ships musl's `/lib/ld-musl-<arch>.so.1` (add any other shared library under `/lib` or `/usr/lib`). The userland is built using [nix-build](https://nix.dev/manual/nix/2.18/command-ref/nix-build), see [nix/README.md](https://github.com/usbarmory/eggshell/blob/main/nix/README.md) for instructions and options. Current limitations =================== * While TamaGo supports SMP operation, for now supervision of userspace code

remains a single-core only affair. * Only single user support, no isolation among users and any identity operation is a no-op. * IPv4 only, no raw sockets, no `SCM_RIGHTS`, no `AF_UNIX` datagrams. * `EPOLLET` is emulated as level triggered. * Not implemented: `ptrace`, SysV IPC, `inotify`, `timerfd`, `signalfd`, POSIX timers (`timer_create`), mounts, namespaces. * The filesystem is in-memory and therefore all modifications are volatile across reboots. License ======= eggshell | https://github.com/usbarmory/eggshell Copyright (c) The eggshell Authors. All Rights Reserved.