README
¶
Monogon Monorepo
This is the main repository containing the source code for the Monogon Platform.
This is pre-release software - take a look, and check back later! In the meantime, join us on Matrix (#monogon-os-community:matrix.org) or Discord.
Environment
Our build environment is self-contained and requires only minimal host dependencies:
- A Linux machine or VM.
- Bazelisk >= v1.15.0 (or a working Nix environment).
gitto check out modules.python3to generate the workspace status to stamp.- A reasonably recent kernel, user namespaces are recommended for performance reasons.
- Working KVM with access to
/dev/kvm(if you want to run tests).
Our docs assume that Bazelisk is available as bazel on your PATH.
Refer to SETUP.md for detailed instructions.
Monogon OS
The source code lives in //metropolis (Metropolis is the codename of Monogon OS).
See the //metropolis/README.md for a developer quick start guide, or see
the Monogon OS Handbook for user documentation.
Directories
¶
| Path | Synopsis |
|---|---|
|
build
|
|
|
analysis/importsort
importsort implements import grouping style checks as per CODING_STANDARDS.md.
|
importsort implements import grouping style checks as per CODING_STANDARDS.md. |
|
analysis/lib/genstd
command
This tool generates //build/analysis/lib:stdlib_packages.go, which contains a set of all Go stdlib packges.
|
This tool generates //build/analysis/lib:stdlib_packages.go, which contains a set of all Go stdlib packges. |
|
analysis/noioutil
Package noioutil contains a Go analysis pass designed to prevent use of the deprecated ioutil package for which a tree-wide migration was already done.
|
Package noioutil contains a Go analysis pass designed to prevent use of the deprecated ioutil package for which a tree-wide migration was already done. |
|
bazel_cc_fix
command
bazel_cc_fix rewrites include directives in C and C++ code.
|
bazel_cc_fix rewrites include directives in C and C++ code. |
|
binary_tarball
command
|
|
|
mirror_proxy
command
|
|
|
cloud
|
|
|
agent
command
|
|
|
agent/takeover
command
|
|
|
go
|
|
|
clitable
Package clitable implements tabular display for command line tools.
|
Package clitable implements tabular display for command line tools. |
|
mflags
Package mflags implements custom flags for use in monogon projects.
|
Package mflags implements custom flags for use in monogon projects. |
|
net/psample
Package psample provides a receiver for sampled network packets using the Netlink psample interface.
|
Package psample provides a receiver for sampled network packets using the Netlink psample interface. |
|
net/tinylb
Package tinylb implements a small and simple userland round-robin load balancer, mostly for TCP connections.
|
Package tinylb implements a small and simple userland round-robin load balancer, mostly for TCP connections. |
|
qcow2
Package qcow2 implements generating QEMU copy-on-write image files.
|
Package qcow2 implements generating QEMU copy-on-write image files. |
|
metropolis
|
|
|
cli/dbg
command
|
|
|
cli/flagdefs
Package flagdefs contains shared flag definitions for Metropolis.
|
Package flagdefs contains shared flag definitions for Metropolis. |
|
cli/metroctl
command
|
|
|
cli/metroctl/core
Package core contains parts of metroctl which do significant amounts of work beyond just providing a CLI for them.
|
Package core contains parts of metroctl which do significant amounts of work beyond just providing a CLI for them. |
|
cli/takeover
command
|
|
|
installer
command
Installer creates a Metropolis image at a suitable block device based on the OS image present in the installation medium's ESP, after which it reboots.
|
Installer creates a Metropolis image at a suitable block device based on the OS image present in the installation medium's ESP, after which it reboots. |
|
installer/install
Package install allows planning and executing the installation of Metropolis to a block device.
|
Package install allows planning and executing the installation of Metropolis to a block device. |
|
installer/test/testos
command
TestOS is a tiny "operating system" which is packaged the exact same way as an actual Metropolis node but only outputs a single flag before exiting.
|
TestOS is a tiny "operating system" which is packaged the exact same way as an actual Metropolis node but only outputs a single flag before exiting. |
|
node/allocs
Package allocs contains allocations of various types of identifiers used in a node.
|
Package allocs contains allocations of various types of identifiers used in a node. |
|
node/bios_bootcode/genlogo
command
|
|
|
node/core
command
|
|
|
node/core/cluster
Package cluster implements low-level clustering logic, especially logic regarding to bootstrapping, registering into and joining a cluster.
|
Package cluster implements low-level clustering logic, especially logic regarding to bootstrapping, registering into and joining a cluster. |
|
node/core/consensus/client
package client implements a higher-level client for consensus/etcd that is to be used within the Metropolis node code for unprivileged access (ie.
|
package client implements a higher-level client for consensus/etcd that is to be used within the Metropolis node code for unprivileged access (ie. |
|
node/core/curator
package curator implements the Curator, a service responsible for management of the Metropolis cluster that it is running on.
|
package curator implements the Curator, a service responsible for management of the Metropolis cluster that it is running on. |
|
node/core/devmgr
Package devmgr is the userspace pendant to the kernel device management system.
|
Package devmgr is the userspace pendant to the kernel device management system. |
|
node/core/metrics/fake_exporter
command
fake_exporter is a tiny Prometheus-compatible metrics exporter which exports a single metric with a value configured at startup.
|
fake_exporter is a tiny Prometheus-compatible metrics exporter which exports a single metric with a value configured at startup. |
|
node/core/mgmt
Package mgmt implements the node-local management service, a.k.a.
|
Package mgmt implements the node-local management service, a.k.a. |
|
node/core/network/hostsfile
Package hostsfile implements a service which owns and writes all node-local files/interfaces used by the system to resolve the local node's name and the names of other nodes in the cluster:
|
Package hostsfile implements a service which owns and writes all node-local files/interfaces used by the system to resolve the local node's name and the names of other nodes in the cluster: |
|
node/core/network/ipam
Package ipam is just a stub right now which contains a type for describing prefix lists.
|
Package ipam is just a stub right now which contains a type for describing prefix lists. |
|
node/core/network/overlay
Package overlay implements a Cluster Networking mesh service running on all Metropolis nodes.
|
Package overlay implements a Cluster Networking mesh service running on all Metropolis nodes. |
|
node/core/roleserve
Package roleserve implements the roleserver/“Role Server”.
|
Package roleserve implements the roleserver/“Role Server”. |
|
node/core/tconsole/standalone
command
|
|
|
node/core/time
Package time implements a supervisor runnable which is responsible for keeping both the system clock and the RTC accurate.
|
Package time implements a supervisor runnable which is responsible for keeping both the system clock and the RTC accurate. |
|
node/core/update/e2e/testos
command
|
|
|
node/kubernetes/authproxy
Package authproxy implements an authenticating proxy in front of the K8s API server converting Metropolis credentials into authentication headers.
|
Package authproxy implements an authenticating proxy in front of the K8s API server converting Metropolis credentials into authentication headers. |
|
node/kubernetes/clusternet
Package clusternet implements a WireGuard-based overlay network for Kubernetes.
|
Package clusternet implements a WireGuard-based overlay network for Kubernetes. |
|
node/kubernetes/containerd/cniproxy
Package cni implements an adapter between the go-cni interface and the Monogon gRPC Workload Attachment interface.
|
Package cni implements an adapter between the go-cni interface and the Monogon gRPC Workload Attachment interface. |
|
node/kubernetes/hyperkube
command
This is the entry point for our multicall Kubernetes binary.
|
This is the entry point for our multicall Kubernetes binary. |
|
node/kubernetes/metricsprovider
Package metricsprovider provides a Prometheus registry for code in K8s client-go capable of providing metrics.
|
Package metricsprovider provides a Prometheus registry for code in K8s client-go capable of providing metrics. |
|
node/kubernetes/metricsproxy
Package metricsproxy implements an authenticating proxy in front of the K8s controller-manager and scheduler providing unauthenticated access to the metrics via local ports
|
Package metricsproxy implements an authenticating proxy in front of the K8s controller-manager and scheduler providing unauthenticated access to the metrics via local ports |
|
node/kubernetes/nfproxy
Package nfproxy is a Kubernetes Service IP proxy based exclusively on the Linux nftables interface.
|
Package nfproxy is a Kubernetes Service IP proxy based exclusively on the Linux nftables interface. |
|
node/kubernetes/pki
package pki builds upon osbase/pki/ to provide an etcd-backed implementation of all x509 PKI Certificates/CAs required to run Kubernetes.
|
package pki builds upon osbase/pki/ to provide an etcd-backed implementation of all x509 PKI Certificates/CAs required to run Kubernetes. |
|
node/kubernetes/plugins/kvmdevice
Package kvmdevice implements a Kubernetes device plugin for the virtual KVM device.
|
Package kvmdevice implements a Kubernetes device plugin for the virtual KVM device. |
|
node/kubernetes/reconciler
The reconciler ensures that a base set of K8s resources is always available in the cluster.
|
The reconciler ensures that a base set of K8s resources is always available in the cluster. |
|
test/e2e/connectivity/agent
command
|
|
|
test/e2e/httpserver
command
httpserver serves a test HTTP endpoint for E2E testing.
|
httpserver serves a test HTTP endpoint for E2E testing. |
|
test/e2e/k8s_cts
command
This package launches a Metropolis cluster with two nodes and spawns in the CTS container.
|
This package launches a Metropolis cluster with two nodes and spawns in the CTS container. |
|
test/e2e/persistentvolume
command
This is a test for PersistentVolumes provided by our provisioner.
|
This is a test for PersistentVolumes provided by our provisioner. |
|
test/e2e/preseedtest
command
|
|
|
test/e2e/selftest
command
|
|
|
test/launch
cluster builds on the launch package and implements launching Metropolis nodes and clusters in a virtualized environment using qemu.
|
cluster builds on the launch package and implements launching Metropolis nodes and clusters in a virtualized environment using qemu. |
|
test/launch/cli/launch
command
|
|
|
test/launch/cli/launch-cluster
command
|
|
|
test/localregistry
Package localregistry implements a read-only OCI Distribution / Docker V2 container image registry backed by local layers.
|
Package localregistry implements a read-only OCI Distribution / Docker V2 container image registry backed by local layers. |
|
test/nanoswitch
command
nanoswitch is a virtualized switch/router combo intended for testing.
|
nanoswitch is a virtualized switch/router combo intended for testing. |
|
test/swtpm/certtool
command
|
|
|
test/swtpm/swtpm_cert
command
|
|
|
test/util
This file implements test helper functions that augment the way any given test is run.
|
This file implements test helper functions that augment the way any given test is run. |
|
osbase
|
|
|
bootparam
Package bootparam implements encoding and decoding of Linux kernel command lines as documented in https://docs.kernel.org/admin-guide/kernel-parameters.html
|
Package bootparam implements encoding and decoding of Linux kernel command lines as documented in https://docs.kernel.org/admin-guide/kernel-parameters.html |
|
bootparam/ref
Package ref provides the reference implementation for kernel command line parsing as present in the Linux kernel.
|
Package ref provides the reference implementation for kernel command line parsing as present in the Linux kernel. |
|
bringup
Package bringup implements a simple wrapper which configures all default mounts, logging and the corresponding forwarder ttyS0.
|
Package bringup implements a simple wrapper which configures all default mounts, logging and the corresponding forwarder ttyS0. |
|
bringup/test
command
|
|
|
build/fwprune
command
fwprune is a buildsystem utility that filters linux-firmware repository contents to include only files required by the built-in kernel modules, that are specified in modules.builtin.modinfo.
|
fwprune is a buildsystem utility that filters linux-firmware repository contents to include only files required by the built-in kernel modules, that are specified in modules.builtin.modinfo. |
|
build/genproductinfo
command
genproductinfo generates a product info JSON file from arguments and stamping.
|
genproductinfo generates a product info JSON file from arguments and stamping. |
|
build/kconfig-patcher
command
|
|
|
build/mkcpio
command
|
|
|
build/mkerofs
command
mkerofs takes a specification in the form of a prototext file (see fsspec next to this) and assembles an EROFS filesystem according to it.
|
mkerofs takes a specification in the form of a prototext file (see fsspec next to this) and assembles an EROFS filesystem according to it. |
|
build/mkoci
command
|
|
|
build/mkoci/index
command
|
|
|
build/mkpayload
command
mkpayload is an objcopy wrapper that builds EFI unified kernel images.
|
mkpayload is an objcopy wrapper that builds EFI unified kernel images. |
|
build/mkucode
command
This assembles standalone microcode files into the format expected by the Linux microcode loader.
|
This assembles standalone microcode files into the format expected by the Linux microcode loader. |
|
build/mkverity
command
This package implements a command line tool that creates dm-verity hash images at a selected path, given an existing data image.
|
This package implements a command line tool that creates dm-verity hash images at a selected path, given an existing data image. |
|
devicemapper
package devicemapper is a thin wrapper for the devicemapper ioctl API.
|
package devicemapper is a thin wrapper for the devicemapper ioctl API. |
|
efivarfs
Package efivarfs provides functions to read and manipulate UEFI runtime variables.
|
Package efivarfs provides functions to read and manipulate UEFI runtime variables. |
|
event
Package event defines and implements Event Values, a mechanism in which multiple consumers can watch a value for updates in a reliable way.
|
Package event defines and implements Event Values, a mechanism in which multiple consumers can watch a value for updates in a reliable way. |
|
fat32
Package fat32 implements a writer for the FAT32 filesystem.
|
Package fat32 implements a writer for the FAT32 filesystem. |
|
fsquota
Package fsquota provides a simplified interface to interact with Linux's filesystem qouta API.
|
Package fsquota provides a simplified interface to interact with Linux's filesystem qouta API. |
|
fsquota/quotactl
Package quotactl implements a low-level wrapper around the modern portion of Linux's quotactl() syscall.
|
Package quotactl implements a low-level wrapper around the modern portion of Linux's quotactl() syscall. |
|
gpt
Package gpt implements reading and writing GUID Partition Tables as specified in the UEFI Specification.
|
Package gpt implements reading and writing GUID Partition Tables as specified in the UEFI Specification. |
|
kexec
Package kexec allows executing subsequent kernels from Linux userspace.
|
Package kexec allows executing subsequent kernels from Linux userspace. |
|
logbuffer
Package logbuffer implements a fixed-size in-memory ring buffer for line-separated logs.
|
Package logbuffer implements a fixed-size in-memory ring buffer for line-separated logs. |
|
logtree
Package logtree implements a tree-shaped logger for debug events.
|
Package logtree implements a tree-shaped logger for debug events. |
|
logtree/unraw
Package unraw implements a facility to convert raw logs from external sources into leveled logs.
|
Package unraw implements a facility to convert raw logs from external sources into leveled logs. |
|
loop
Package loop implements an interface to configure Linux loop devices.
|
Package loop implements an interface to configure Linux loop devices. |
|
msguid
Package msguid provides functions to convert UUIDs/GUIDs to and from Microsoft's idiosyncratic "mixed-endian" format.
|
Package msguid provides functions to convert UUIDs/GUIDs to and from Microsoft's idiosyncratic "mixed-endian" format. |
|
net/dhcp4c
Package dhcp4c implements a DHCPv4 Client as specified in RFC2131 (with some notable deviations).
|
Package dhcp4c implements a DHCPv4 Client as specified in RFC2131 (with some notable deviations). |
|
net/dhcp4c/callback
Package callback contains minimal callbacks for configuring the kernel with options received over DHCP.
|
Package callback contains minimal callbacks for configuring the kernel with options received over DHCP. |
|
net/dhcp4c/transport
Package transport contains Linux-based transports for the DHCP broadcast and unicast specifications.
|
Package transport contains Linux-based transports for the DHCP broadcast and unicast specifications. |
|
net/dns
Package dns provides a DNS server for resolving services against.
|
Package dns provides a DNS server for resolving services against. |
|
net/dns/forward
Package forward implements a forwarding proxy.
|
Package forward implements a forwarding proxy. |
|
net/dns/forward/cache
Package cache implements a cache.
|
Package cache implements a cache. |
|
net/dns/forward/proxy
Package proxy implements a forwarding proxy.
|
Package proxy implements a forwarding proxy. |
|
net/dns/forward/up
Package up is used to run a function for some duration.
|
Package up is used to run a function for some duration. |
|
net/dns/kubernetes
Package kubernetes provides the kubernetes backend.
|
Package kubernetes provides the kubernetes backend. |
|
net/dns/kubernetes/object
Package object holds functions that convert the objects from the k8s API in to a more memory efficient structures.
|
Package object holds functions that convert the objects from the k8s API in to a more memory efficient structures. |
|
net/dump/cli
command
|
|
|
net/sshtakeover
Package sshtakeover provides an ssh.Client wrapper which provides utilities for taking over a machine over ssh, by uploading an executable and other payloads, and then executing the executable.
|
Package sshtakeover provides an ssh.Client wrapper which provides utilities for taking over a machine over ssh, by uploading an executable and other payloads, and then executing the executable. |
|
nvme
Package nvme provides methods and data structures for issuing commands to device speaking the NVMe protocol.
|
Package nvme provides methods and data structures for issuing commands to device speaking the NVMe protocol. |
|
oci
Package oci contains tools for handling OCI images.
|
Package oci contains tools for handling OCI images. |
|
oci/osimage
Package osimage allows reading OS images represented as OCI artifacts, and contains the types for the OS image config.
|
Package osimage allows reading OS images represented as OCI artifacts, and contains the types for the OS image config. |
|
oci/registry
Package registry contains a client and server implementation of the OCI Distribution spec.
|
Package registry contains a client and server implementation of the OCI Distribution spec. |
|
pki
package pki implements an x509 PKI (Public Key Infrastructure) system backed on etcd.
|
package pki implements an x509 PKI (Public Key Infrastructure) system backed on etcd. |
|
pstore
The pstore package provides functions for interfacing with the Linux kernel's pstore (persistent storage) system.
|
The pstore package provides functions for interfacing with the Linux kernel's pstore (persistent storage) system. |
|
scsi
INCITS 502 Revision 19 / SPC-5 R19
|
INCITS 502 Revision 19 / SPC-5 R19 |
|
smbios
Package smbios implements parsing of SMBIOS data structures.
|
Package smbios implements parsing of SMBIOS data structures. |
|
structfs
Package structfs defines a data structure for a file system, similar to the fs package but based on structs instead of interfaces.
|
Package structfs defines a data structure for a file system, similar to the fs package but based on structs instead of interfaces. |
|
sysfs
Implementation included in this file was written with the aim of easing integration with the interface exposed at /sys/class/block.
|
Implementation included in this file was written with the aim of easing integration with the interface exposed at /sys/class/block. |
|
test/cmd
Package cmd contains helpers that abstract away the chore of starting new processes, tracking their lifetime, inspecting their output, etc.
|
Package cmd contains helpers that abstract away the chore of starting new processes, tracking their lifetime, inspecting their output, etc. |
|
test/ktest
command
ktest is a test launcher for running tests inside a custom kernel and passes the results back out.
|
ktest is a test launcher for running tests inside a custom kernel and passes the results back out. |
|
test/ktest/init
command
ktestinit is an init designed to run inside a lightweight VM for running tests in there.
|
ktestinit is an init designed to run inside a lightweight VM for running tests in there. |
|
test/qemu
Package qemu implements test harnesses for running qemu VMs from tests.
|
Package qemu implements test harnesses for running qemu VMs from tests. |
|
test/socksproxy
Package socksproxy implements a limited subset of the SOCKS 5 (RFC1928) protocol in the form of a pluggable Proxy object.
|
Package socksproxy implements a limited subset of the SOCKS 5 (RFC1928) protocol in the form of a pluggable Proxy object. |
|
tpm/eventlog
Taken and pruned from go-attestation under Apache 2.0
|
Taken and pruned from go-attestation under Apache 2.0 |
|
tpm/eventlog/internal
Taken from go-attestation under Apache 2.0
|
Taken from go-attestation under Apache 2.0 |
|
verity
This package implements the minimum of functionality needed to generate and map dm-verity images.
|
This package implements the minimum of functionality needed to generate and map dm-verity images. |
|
watchdog
Package watchdog provides access to hardware watchdogs.
|
Package watchdog provides access to hardware watchdogs. |
|
third_party
|
|
|
com_github_cockroachdb_cockroach/errcmp
Package errcmp defines an Analyzer which checks for usage of errors.Is instead of direct ==/!= comparisons.
|
Package errcmp defines an Analyzer which checks for usage of errors.Is instead of direct ==/!= comparisons. |
|
com_github_cockroachdb_cockroach/hash
Package hash defines an Analyzer that detects correct use of hash.Hash.
|
Package hash defines an Analyzer that detects correct use of hash.Hash. |
|
com_github_cockroachdb_cockroach/nilness
Package nilness inspects the control-flow graph of an SSA function and reports errors such as nil pointer dereferences and degenerate nil pointer comparisons.
|
Package nilness inspects the control-flow graph of an SSA function and reports errors such as nil pointer dereferences and degenerate nil pointer comparisons. |
|
com_github_cockroachdb_cockroach/passesutil
Package passesutil provides useful functionality for implementing passes.
|
Package passesutil provides useful functionality for implementing passes. |
|
com_github_cockroachdb_cockroach/returnerrcheck
Package returnerrcheck defines an suite of Analyzers that detects conditionals which check for a non-nil error and then proceed to return a nil error.
|
Package returnerrcheck defines an suite of Analyzers that detects conditionals which check for a non-nil error and then proceed to return a nil error. |
|
com_github_cockroachdb_cockroach/unconvert
Package unconvert defines an Analyzer that detects unnecessary type conversions.
|
Package unconvert defines an Analyzer that detects unnecessary type conversions. |
|
Package version is a companion library to the //version/spec proto.
|
Package version is a companion library to the //version/spec proto. |
Click to show internal directories.
Click to hide internal directories.