bosh-lite deploys on Apple M-series chips with Rosetta

[aramprice]

This is an umbrella issue covering issues related to running "bosh lite" virtualized deployments on Apple M-series machines when the containerization is running via Rosetta x86 translation.

• disable seccomp for emulated environments bpm-release#201
• Prevent systemd-binfmt from running in containers bosh-linux-stemcell-builder#473

[rkoster]

Made some progress on apple silicon here: rkoster/instant-bosh#70, was able to deploy zookeeper

instant-bosh feat/apple-silicon-support*
❯ arch
arm64

instant-bosh feat/apple-silicon-support*
❯ bosh instances
Using environment 'https://127.0.0.1:25555' as client 'admin'

Task 108. Done

Deployment 'zookeeper'

Instance                                          Process State  AZ  IPs           Deployment
smoke-tests/d5ca39dc-630d-45b8-8204-582a041cd95f  -              z1  -             zookeeper
zookeeper/1d5bb11e-8966-40ac-bd35-4526a8b76c31    running        z1  10.245.0.101  zookeeper
zookeeper/5114e6c1-e78e-48da-9433-0631fb4959d7    running        z2  10.245.0.103  zookeeper
zookeeper/882f24a9-43e6-4852-ab8f-8120953a8373    running        z3  10.245.0.105  zookeeper
zookeeper/91e96e06-31c6-4192-8ff4-3b7b867d9979    running        z2  10.245.0.104  zookeeper
zookeeper/949bcef7-9f69-4cf8-a10f-4186ad775530    running        z1  10.245.0.102  zookeeper

6 instances

Succeeded

instant-bosh feat/apple-silicon-support*
❯ docker ps
CONTAINER ID   IMAGE                                                    COMMAND                  CREATED          STATUS          PORTS                                                                                            NAMES
023b37d22809   cd62dcd56c75                                             "bash -c 'umount /et…"   12 minutes ago   Up 12 minutes                                                                                                    c-dc5f7071-2
be2-43de-71b6-16a8a9e4225a
718ecaa313f2   cd62dcd56c75                                             "bash -c 'umount /et…"   13 minutes ago   Up 13 minutes                                                                                                    c-741e59c9-a
71e-4e56-4c99-de7a1c5bc5da
4e5e9cd29eb4   cd62dcd56c75                                             "bash -c 'umount /et…"   13 minutes ago   Up 13 minutes                                                                                                    c-deb94e0b-b
256-4da5-5612-ab06cdd47339
77da4d1ce7c5   cd62dcd56c75                                             "bash -c 'umount /et…"   14 minutes ago   Up 14 minutes                                                                                                    c-0e3b936a-b
69f-4fa8-5756-6d9bcfbf8ac5
c94fff361aa0   cd62dcd56c75                                             "bash -c 'umount /et…"   14 minutes ago   Up 14 minutes                                                                                                    c-4158f54a-2
47f-4063-630a-91e79824e308
a5bb61b88e02   ghcr.io/rkoster/instant-bosh:sha-6de5b3c-apple-silicon   "/usr/local/bin/bosh…"   24 minutes ago   Up 24 minutes   0.0.0.0:8081->8081/tcp, 0.0.0.0:8443->8443/tcp, 0.0.0.0:25555->25555/tcp, 0.0.0.0:2222->22/tcp   instant-bosh

❯ bosh ssh -d zookeeper zookeeper/0
Using environment 'https://127.0.0.1:25555' as client 'admin'

Using deployment 'zookeeper'

Task 109. Done
Unauthorized use is strictly prohibited. All access and activity
is subject to logging and monitoring.
Welcome to Ubuntu 24.04.4 LTS (GNU/Linux 6.8.0-64-generic x86_64)

 * Documentation:  https://help.ubuntu.com
 * Management:     https://landscape.canonical.com
 * Support:        https://ubuntu.com/pro

The programs included with the Ubuntu system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.

Ubuntu comes with ABSOLUTELY NO WARRANTY, to the extent permitted by
applicable law.

To run a command as administrator (user "root"), use "sudo <command>".
See "man sudo_root" for details.

zookeeper/1d5bb11e-8966-40ac-bd35-4526a8b76c31:~$ ps aux
USER         PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root           1  0.1  0.1 421212 24732 ?        Ss   16:08   0:01 /mnt/lima-rosetta/rosetta /sbin/init
root         161  0.0  0.0 425144 15120 ?        S<s  16:08   0:00 /mnt/lima-rosetta/rosetta /usr/lib/systemd/systemd-journald
root         175  0.1  0.3 1742848 62020 ?       S<sl 16:08   0:01 /mnt/lima-rosetta/rosetta /var/vcap/bosh/bin/bosh-agent -P ubuntu -C /var/vcap/bosh/agent.json
root         206  0.0  0.0 426036  2396 ?        SLsl 16:08   0:00 /mnt/lima-rosetta/rosetta /usr/sbin/rngd -r /dev/hwrng
systemd+     238  0.0  0.1 421108 18188 ?        Ss   16:08   0:00 /mnt/lima-rosetta/rosetta /usr/lib/systemd/systemd-resolved
root         387  0.0  0.0 483944  3564 ?        S<sl 16:08   0:00 /mnt/lima-rosetta/rosetta /sbin/auditd
root         389  0.0  0.0 401608  2936 ?        S<   16:08   0:00 /mnt/lima-rosetta/rosetta /sbin/audisp-syslog LOG_INFO
root        2405  0.0  0.0 476240  4968 ?        S<sl 16:08   0:00 /mnt/lima-rosetta/rosetta /var/vcap/bosh/bin/monit -I -c /var/vcap/bosh/etc/monitrc
vcap        2414  0.3  0.6 7801852 98736 ?       S<l  16:08   0:02 /mnt/lima-rosetta/rosetta /var/vcap/packages/openjdk-8/jre/bin/java -Dzookeeper.log.dir=/var/vcap/sys/log/zookeeper -Dzookeeper.root.logger=INFO,CONSOLE,ROLLINGFILE -cp /va
root        2639  3.6  0.0 411312 11732 ?        Ss   16:23   0:00 /mnt/lima-rosetta/rosetta /usr/sbin/sshd -D
root        2640  4.9  0.1 414748 17152 ?        Ss   16:23   0:00 /mnt/lima-rosetta/rosetta /usr/sbin/sshd -D -R
bosh_0a+    2651  0.6  0.0 415348 12620 ?        S    16:23   0:00 /mnt/lima-rosetta/rosetta /usr/sbin/sshd -D -R
bosh_0a+    2652  2.7  0.0 406528  7116 pts/0    Ss   16:23   0:00 /bin/bash
bosh_0a+    2662 75.0  0.0 409540  6772 pts/0    R+   16:23   0:00 /usr/bin/ps aux