归档：Kata / microVM runner 实验（2026-09-17 工作区快照）

从旧工作区 chore/recover-old-workspace 清理时保存，内容与 2026-09-17 stash@{0} 快照中的版本一致；未合并、未在 main 上使用，仅作参考，不开 PR。被 gitignore 的 tfstate 与凭据文件不在此分支，仍留在本地工作区。 Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-10-01 17:30:48 +00:00
parent 69d3476a6b
commit 55bb5be8b6
39 changed files with 1891 additions and 0 deletions
@@ -0,0 +1,19 @@
+[Unit]
+Description=Gitea kind microVM runner worker
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+EnvironmentFile=-/etc/microvm-runner/worker.env
+ExecStart=/opt/microvm-runner/venv/bin/python /opt/microvm-runner/worker.py
+Restart=on-failure
+RestartSec=5s
+SupplementaryGroups=kvm
+PrivateTmp=yes
+ProtectHome=yes
+ProtectSystem=strict
+ReadWritePaths=/var/lib/microvm-runner /run/microvm-runner
+
+[Install]
+WantedBy=multi-user.target