Containerd Wasm Shims

This project aims to provide containerd shim implementations that can run Wasm / WASI workloads using runwasi as a library. This means that by installing these shims onto Kubernetes nodes, we can add a runtime class to Kubernetes and schedule Wasm workloads on those nodes. Your Wasm pods and deployments can act just like container workloads!

runwasi is a project that aims to run wasm workloads running on Wasmtime, a fast and secure runtime for WebAssembly, which is managed by containerd.

Quickstarts

• Start k3d and run a sample WASM application.
• Create a Spin application on k3d
• Deploy a SpiderLightning application with k3d
• Deploy a Wasm Workers Server application with k3d

Containerd Wasm Shims

Each of the shims below leverage runwasi to provide the bridge between K8s and containerd.

Spin shim

The Spin shim, as the name implies, is powered by the Fermyon Spin engine. Spin is an open source framework for building and running fast, secure, and composable cloud microservices with WebAssembly.

If you are curious, here is the Spin shim source code.

Slight (SpiderLightning) shim

The slight shim is powered by the Deislabs SpiderLightning engine. Slight is an open source host, much like Spin, for building and running fast, secure, and composable cloud microservices with WebAssembly. In addition, the slight shim comes with an increasing array of WebAssembly component capabilities, including underlying implementations, to consume common application level services.

If you are curious, here is the Slight shim source code.

Wasm Workers Server (wws) shim

The wws shim is powered by the Wasm Workers Server engine. Wasm Workers Server is an open-source project to develop and run serverless applications on top of WebAssembly. It's based on the "workers" concept from the browser, where you have functions that receives a request, processes it, and provides response. It supports multiple languages, so you can develop your workers with Rust, JavaScript, Python, Ruby and more in the future.

If you are curious, here is the Wasm Workers Server shim source code.

Building the shims

To build the shims in this project, run make.

Running a shim locally on Linux

To run the spin shim using a hello world Spin example, run make run_spin. This will use ctr to simulate the same call that would be made from containerd to run a local OCI container image.

The "hello world" image contains only 2 files, the spin.toml file and the spin_rust_hello.wasm file created by compiling the "hello world" spin example by running cargo build --target wasm32-wasi --release in the example directory. The image is only 1.9MB!

To run either shim locally using k3d and exercise it using sample services, see the README in deployments/k3d.

Cleaning up

To clean up, run make clean.

Example Kubernetes Cluster Deployments

In the deployments directory you will find examples of deploying the shims to Kubernetes clusters and using them in example Kubernetes workloads.

Using a shim in Kubernetes

To use one of these containerd shims in Kubernetes, you must do the following:

1. Install the shim binary somewhere on the path of your Kubernetes worker nodes. For example, copy containerd-shim-spin-v1 to /bin.
2. Add the following to the containerd config.toml that maps the runtime type to the shim binary from step 1.

[plugins."io.containerd.grpc.v1.cri".containerd.runtimes.spin]
  runtime_type = "io.containerd.spin.v1"

3. Apply a runtime class that contains a handler that matches the "spin" config runtime name from step 2.

  apiVersion: node.k8s.io/v1
  kind: RuntimeClass
  metadata:
    name: wasmtime-spin
  handler: spin

4. Deploy a Wasm workload to your cluster with the specified runtime class name matching the "wasmtime-spin" runtime class from step 3.

  apiVersion: apps/v1
  kind: Deployment
  metadata:
    name: wasm-spin
  spec:
    replicas: 1
    selector:
      matchLabels:
        app: wasm-spin
    template:
      metadata:
        labels:
          app: wasm-spin
      spec:
        runtimeClassName: wasmtime-spin
        containers:
        - name: spin-hello
          image: ghcr.io/deislabs/containerd-wasm-shims/examples/spin-rust-hello:latest
          command: ["/"]

Code of Conduct

This project has adopted the Microsoft Open Source Code of Conduct.

For more information see the Code of Conduct FAQ or contact [email protected] with any additional questions or comments.