Drew Newberry 88a5e338b2 feat(gateway): add libkrun microVM gateway for hardware-isolated cluster bootstrap ...

Introduce the navigator-gateway crate with safe Rust wrappers over the
libkrun C FFI, enabling lightweight microVM execution via Apple
Hypervisor.framework (macOS) or KVM (Linux).

Key components:
- navigator-gateway crate: KrunContextBuilder with RAII, ~15 FFI
  bindings, support for virtio-fs, console redirect, TSI control,
  and gvproxy virtio-net networking
- nav gateway run: ad-hoc microVM execution (direct enter model)
- nav gateway cluster: boots k3s inside a microVM with gvproxy
  networking, automatic rootfs extraction from Docker images, and
  port forwarding via gvproxy HTTP API
- vm-init.sh: guest bootstrap script with DHCP networking, noop CNI
  plugin (kernel lacks bridge module), and tmpfs-backed k3s data dir
- macOS codesigning with com.apple.security.hypervisor entitlement
  via auto-signing in scripts/bin/nav
- navigator-cli build.rs for libkrun/libkrunfw rpath resolution

2026-03-03 10:26:08 -08:00

..

nav

feat(gateway): add libkrun microVM gateway for hardware-isolated cluster bootstrap

2026-03-03 10:26:08 -08:00