moved the frontend to gh-pages branch & domain to y2k.jarv.is

container/.gitignore

@@ -0,0 +1,4 @@
+# don't accidentally commit OS images (again...)
+*.img
+*.raw
+*.qcow2

container/Dockerfile

@@ -0,0 +1,61 @@
+FROM docker.io/ubuntu:20.04
+
+LABEL maintainer="Jake Jarvis <jake@jarv.is>"
+LABEL repository="https://github.com/jakejarvis/y2k"
+LABEL homepage="https://y2k.jarv.is/"
+
+ARG DEBIAN_FRONTEND=noninteractive
+
+# corrects the time inside the Windows VM, if tzdata is installed below
+ENV TZ=America/New_York
+
+RUN apt-get update \
+ && apt-get -y upgrade \
+ && apt-get -y --no-install-recommends install \
+        ca-certificates \
+        tzdata \
+        qemu-system-x86 \
+        qemu-utils \
+        ruby \
+ && apt-get clean \
+ && rm -rf /var/lib/apt/lists/*
+
+# make sure everything's okay so far
+RUN qemu-system-i386 --version \
+ && ruby --version
+
+ENV TINI_VERSION 0.19.0
+ADD https://github.com/krallin/tini/releases/download/v${TINI_VERSION}/tini /usr/local/bin/tini
+RUN chmod +x /usr/local/bin/tini
+
+# ----
+# TODO: make *each container* a websockets server so we can load balance, etc.
+
+# ENV WEBSOCKETD_VERSION 0.3.1
+# RUN wget https://github.com/joewalnes/websocketd/releases/download/v${WEBSOCKETD_VERSION}/websocketd-${WEBSOCKETD_VERSION}-linux_amd64.zip \
+#  && unzip websocketd-${WEBSOCKETD_VERSION}-linux_amd64.zip \
+#  && chmod +x websocketd \
+#  && mv websocketd /usr/local/bin/
+
+# RUN websocketd --version
+
+# EXPOSE 80
+# ----
+
+# do everything as an unprivileged user :)
+RUN useradd -m vm
+
+# copy boot script and Windows HDD (must be at ./hdd/hdd.img)
+COPY bin/boot.rb /usr/local/bin/boot-vm
+COPY --chown=vm hdd/hdd.img /home/vm/hdd.img
+
+# make double sure the boot script is executable & the hard drive was copied
+RUN chmod +x /usr/local/bin/boot-vm \
+ && ls -lah /home/vm
+
+# bye bye root <3
+USER vm
+WORKDIR /home/vm
+
+ENTRYPOINT ["tini", "--"]
+CMD ["boot-vm"]

container/bin/boot.rb

@@ -0,0 +1,121 @@
+#!/usr/bin/env ruby
+# encoding: BINARY
+# warn_indent: true
+# frozen_string_literal: true
+
+# This script starts a QEMU child process wearing a VNC sock and acts as
+# middleman between the socket and stdin/out. Perfect for VNC clients that
+# utilize binary websockets (ex: noVNC.js).
+#
+# Usage: ./boot.rb /root/images [/usr/local/bin/qemu-system-i386]
+
+require "fileutils"
+require "socket"
+require "timeout"
+
+# folder containing the OS's hdd.img, other instance files will also go here
+# default for container is set, can be optionally overridden by first argument
+base_path = ARGV[0] || "/home/vm"
+
+# location of QEMU binary (`qemu-system-i386` here, or `-x86_64` for 64-bit)
+# default for container is set, can be optionally overridden by second argument
+qemu_path = ARGV[1] || "/usr/bin/qemu-system-i386"
+
+# create a temporary directory for each instance from PID
+# NOTE: not needed when containerized, everything's already ephemeral
+# instance_dir = "/tmp/y2k.#{$$}"
+
+# flush data immediately to stdout instead of buffering
+# https://ruby-doc.org/core-2.7.0/IO.html#method-i-sync-3D
+$stdout.sync = true
+
+begin
+  # make the temp dir for our new instance & grab a fresh copy of the OS
+  # NOTE: not needed when containerized, everything's already ephemeral
+  # FileUtils.makedirs(instance_dir)
+  # FileUtils.cp(base_img, "#{instance_dir}/hdd.img")
+
+  # open a catch-all log file
+  log_file = File.open("#{base_path}/out.log", "w")
+
+  # start QEMU as a child process (TODO: put config somewhere more manageable)
+  qemu = spawn qemu_path,
+    "-drive", "file=#{base_path}/hdd.img,format=qcow2",
+    "-cpu", "pentium3,enforce",
+    "-m", "128",
+    "-net", "none",
+    "-serial", "none",
+    "-parallel", "none",
+    "-vga", "std",
+    "-usb",
+    "-device", "usb-tablet",
+    "-rtc", "base=localtime",
+    "-no-acpi",
+    "-no-reboot",
+    "-nographic",
+    "-vnc", "unix:#{base_path}/vnc.sock",
+    { :in => :close, :out => log_file, :err => log_file }
+
+  # limit CPU usage of each VM (if host supports it)
+  # NOTE: setting --cpus with Docker makes this redundant
+  # if File.exist?("/usr/bin/cpulimit")
+  #   cpulimit = spawn "/usr/bin/cpulimit",
+  #     "--pid", "#{qemu}",
+  #     "--limit", "90",
+  #     { :in => :close, :out => log_file, :err => log_file }
+  # end
+
+  # wait until the VNC socket is created; only takes a fraction of a second (if
+  # the server load is low) but everything following this will freak the f*ck
+  # out if it's not there yet
+  Timeout.timeout(15) do
+    until File.exist?("#{base_path}/vnc.sock")
+      sleep 0.02
+    end
+  end
+
+  # attach ourselves to the VM's VNC socket made by QEMU
+  sock = UNIXSocket.new("#{base_path}/vnc.sock")
+
+  # everything's all set up now, time to simply pass data between user and VM
+  while $stdin do
+    begin
+      # monitor the IO buffer for unprocessed data (read from both directions)
+      read, _, err = IO.select([$stdin, sock], nil)
+
+      # break out of loop if anything goes wrong, doesn't really matter what tbh
+      if err.any?
+        break
+      end
+
+      # pass input from user to VM
+      if read.include?($stdin)
+        data = $stdin.readpartial(4096)
+        sock.write(data) unless data.empty?
+      end
+
+      # pass output from VM to user
+      if read.include?(sock)
+        data = sock.readpartial(4096)
+        $stdout.write(data) unless data.empty?
+
+        # send output immediately (see $stdout.sync above)
+        $stdout.flush
+      end
+    rescue EOFError
+      # we stopped receiving input from the user's end, so don't expect any more
+      break
+    end
+  end
+ensure
+  # the user's done (or we crashed) so stop their personal VM; everything else
+  # will be deleted along with the Docker container
+  Process.kill(:SIGTERM, qemu) if qemu
+
+  # kill cpulimit if it didn't stop itself already
+  # Process.kill(:SIGTERM, cpulimit) if cpulimit
+
+  # ...and delete their hard drive, logs, etc.
+  # NOTE: not needed when containerized
+  # FileUtils.rm_rf(instance_dir)
+end

container/make.sh

@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+
+set -euxo pipefail
+
+# what a mess. https://stackoverflow.com/a/53183593
+YOU_ARE_HERE="$(realpath "$(dirname "${BASH_SOURCE[0]}")")"
+
+# container will be useless unless we bundle the actual OS
+test -f "$YOU_ARE_HERE"/hdd/hdd.img
+
+# this image is private on Google Cloud Registry, make sure we're logged in
+gcloud auth configure-docker
+
+docker build -t gcr.io/jakejarvis/y2k:latest --no-cache "$YOU_ARE_HERE"
+docker push gcr.io/jakejarvis/y2k:latest