crun: add package crun

[oskarirauta]

Maintainer: Oskari Rauta / @oskarirauta
Compile tested: 86_64, xeon powered server, OpenWRT snapshot (recent)
Run tested: 86_64, xeon powered server, OpenWRT snapshot (recent), tested: works as supposed

Description:
A fast and low-memory footprint OCI Container Runtime fully written in C.

Crun is preferred (by podman) alternative to runc. I wrote myself as a maintainer, but I don't have issue if Daniel Golle, @dangowrt wants to take over from here ;)

[dangowrt]

I wrote myself as a maintainer, but I don't have issue if Daniel Golle, @dangowrt wants to take over from here ;)

I'd be very glad if you can take care of it, and even more if you'd like to take over podman and conmon as well ;)
I currently focus on getting uxc (ie. procd-ujail + frontent) to work well enough to pass test cases in https://github.com/opencontainers/runtime-tools.git which should then also allow using that instead of runc or crun (currently even runc fails more than half of the tests when running on OpenWrt, so there is work to do...).

[oskarirauta]

I'd be very glad if you can take care of it, and even more if you'd like to take over podman and conmon as well ;)
I currently focus on getting uxc (ie. procd-ujail + frontent) to work well enough to pass test cases in https://github.com/opencontainers/runtime-tools.git which should then also allow using that instead of runc or crun (currently even runc fails more than half of the tests when running on OpenWrt, so there is work to do...).

That works too, except that formatting these pr's correctly takes more time than coding ;) Well, getting there, this on already went way better than previous one. Although, help is still required. One of tests: arc_archs fails to error of unknown machine type. How do I get my way around that? Where should I let it know the machine type? By machine type, does it mean like router, has, desktop types?

It also doesn't seem to fail on crun, it fails on decency libseccomp....

[oskarirauta]

Thanks :) That was a valuable lesson :)

But now it's broken.....

[oskarirauta]

Also podman requires veth, but upcoming pr already has it in depends..

[oskarirauta]

I'll submit pr for updated podman after this is pushed.

[dangowrt]

Nice, I'll merge this once tests have completed and I gave the resulting artifacts a test-run on aarch64-cortex53. First tests looked like it all works :)

[oskarirauta]

Actually, I'll do it tomorrow- it's starting to get real late....

[dangowrt]

test-suite results on aarch64-cortexa53

Using runc:

Suites:   26 failed, 12 passed, 20 skip, 58 of 58 completed
Asserts:  91 failed, 59 passed, 20 skip, of 170
Time:     1m

Using crun:

Suites:   22 failed, 15 passed, 21 skip, 58 of 58 completed
Asserts:  53 failed, 65 passed, 21 skip, of 139
Time:     1m

[senlisu]

@dangowrt Any plans to backport this (crun port) to 21.02?

[dangowrt]

@senlisu Yes, I'll backport this to 21.02.