โ๏ธ REST API Endpoints (Port 8080)
Kontrol Live VM via REST API:
โข GET /api/v1/status
โข GET /api/v1/vm/info
โข POST /api/v1/vm/start
โข POST /api/v1/vm/stop
๐ฅ๏ธ NantaraVM Workstation Manager (VirtualBox / VMware Style GUI) ACTIVE LIVE
Kelola dan jalankan Mesin Virtual (VM) berbasis KVM dengan antarmuka grafis seperti VMware Workstation & VirtualBox.
| Pilih | Nama Mesin Virtual | Status Live | vCPU | RAM | Guest OS | VirtIO Hardware | Aksi API |
|---|---|---|---|---|---|---|---|
| nantara-microvm-01 (Main Linux MicroVM Core) |
โน๏ธ STOPPED | 1 vCPU | 512 MB | Alpine Linux MicroVM | VirtIO Block + Net TAP |
|
|
| ubuntu-2404-server (Ubuntu 24.04 LTS Workstation) |
โน๏ธ STOPPED | 2 vCPU | 2048 MB | Ubuntu 24.04 LTS | VirtIO Net + Block |
|
|
| win10-workstation-01 (Windows 10 Pro 64-bit Workstation) |
โน๏ธ STOPPED | 2 vCPU | 4096 MB | Windows 10 Pro (UEFI) | VirtIO-GPU + Net + Block |
|
|
| kali-linux-sandbox (Kali Linux Security Sandbox) |
โน๏ธ STOPPED | 2 vCPU | 2048 MB | Kali Linux Security OS | VirtIO Net + Block |
|
๐ AMD SEV-SNP & Intel TDX Confidential Computing KODE SIAP โ BUTUH HARDWARE
Kode Confidential Computing NantaraVM telah selesai ditulis di src/sev/snp.rs dan src/sev/tdx.rs.
Untuk mengaktifkannya secara nyata, dibutuhkan prosesor AMD EPYC (Milan/Genoa) dengan SEV-SNP enabled
atau Intel Ice Lake/Sapphire Rapids dengan TDX โ tersedia di cloud enterprise (AWS, Azure, GCP Confidential VMs).
SevSnpManager & TdxManager lengkap & terkompilasi.
Eksekusi hardware nyata membutuhkan server AMD EPYC/Intel TDX fisik.
โ
src/sev/snp.rs โ SevSnpManager struct, init_enclave(), register_encrypted_memory()โ
src/sev/tdx.rs โ TdxManager struct, init_trust_domain()โ
src/sev/attestation_agent.rs โ AttestationSecretAgent, inject_kms_secret()โ Gated by LicenseManager (Enterprise tier)
Membutuhkan untuk aktivasi nyata:
๐ฅ๏ธ Server AMD EPYC dengan SEV-SNP atau Intel Ice Lake dengan TDX
๐ฆ Kernel Linux >= 5.19 dengan CONFIG_KVM_AMD_SEV atau CONFIG_INTEL_TDX_GUEST
๐ AMD Platform Security Processor (PSP) driver aktif
โก XDP / eBPF High-Speed Kernel Networking VERIFIED
XDP (eXpress Data Path) dan eBPF sockmap aktif memfilter paket jaringan langsung di driver kernel dengan latensi ultra-rendah.
EbpfFilter & XdpEngine (src/net/mod.rs) telah aktif memfilter trafik paket jaringan.
1. โ TAP interface binding untuk VirtIO-net
2. โ XDP hook di NIC driver untuk DDoS mitigation
3. โ BPF_MAP_TYPE_SOCKMAP untuk zero-copy VM-to-VM forwarding
โฑ๏ธ Snapshot & Lazy Restore Engine VERIFIED
Snapshot dan lazy restore via userfaultfd aktif menyimpan dan memuat ulang state VM dalam hitungan milidetik.
LazyRestoreEngine (src/userfaultfd.rs) terverifikasi aktif untuk serialisasi dan restore memori.
1. โ Serialisasi state vCPU (register, VMCS)
2. โ Dirty page dump via KVM_GET_DIRTY_LOG
3. โ Penyimpanan snapshot ke file disk
4. โ userfaultfd handler untuk lazy page load (< 15 ms restore)
โ Status Komponen Engine โ Nyata & Terverifikasi
Status jujur per komponen, berdasarkan kode aktual di repository.
| Komponen | Status | Keterangan |
|---|---|---|
| Struktur proyek Rust | โ Selesai | Cargo workspace, modul, traits |
| Integrasi library KVM | โ Selesai | kvm-ioctls & vm-memory tersambung |
| vCPU boot nyata via KVM | โ Selesai (v0.1 Verified) | Eksekusi 64-bit real-time di /dev/kvm |
| Alokasi Guest RAM MMap | โ Selesai (v0.1 Verified) | Guest Physical RAM mmap 16MB - 2GB |
| ISO Image Reader (--iso) | โ Selesai (v0.1 Verified) | ISO 9660 & El Torito MBR parser |
| 1-Click Auto-Installer CLI | โ Selesai (Published) | Script install.sh otomatis di Linux/WSL2 |
| REST API Server (Port 8080) | โ Selesai (v0.1.2 Verified) | HTTP Management API & Web Control Buttons |
| VirtIO Block Drive (--drive) | โ Selesai (v0.1.2 Verified) | Disk image sector parser & Virtqueue I/O |
| VirtIO Network TAP (--net) | โ Selesai (v0.1.2 Verified) | TAP device binding & MAC allocation |
| UEFI OVMF Loader (--bios) | โ Selesai (v0.1.3 Verified) | Firmware BIOS ROM mapping & Reset Vector |
| VirtIO GPU Framebuffer | โ Selesai (v0.1.3 Verified) | 1024x768 32-bit RGBA Display Engine |
| Boot Full OS Windows / Linux GUI | โ Selesai (v1.0 Verified) | UEFI Firmware Boot & noVNC WebSocket Streamer Engine |
| Seccomp-BPF Syscall Filter (--jail) | โ Selesai & REAL (v1.0 Verified) | BPF program nyata via prctl(PR_SET_SECCOMP) โ 70+ syscalls allowlist |
| Landlock LSM Filesystem Isolation | โ Selesai & REAL (v1.0 Verified) | Kernel syscall landlock_create_ruleset + landlock_restrict_self nyata |
| Snapshot Engine (Save/Restore RAM) | โ Selesai & REAL (v1.0 Verified) | Binary file I/O NANTSNAP format, page-by-page write/restore |
| AMD SEV-SNP / Intel TDX | โ๏ธ Kode Siap โ Butuh Hardware AMD EPYC/TDX | Hardware memory encryption & attestation (requires enterprise CPU) |