python-agent-driver: enable networking in rootfs and kernel

Add hostsock networking config to kraft.yaml (pointing to
danbugs/unikraft networking branch) and bundle DNS resolv.conf,
nsswitch.conf, hosts, and CA certificates into the CPIO rootfs
so the guest can resolve hostnames and make TLS connections.

Signed-off-by: danbugs <danilochiarlone@gmail.com>

Author: danbugs

examples/python-agent-driver/Dockerfile

@@ -44,6 +44,19 @@ COPY --from=driver-build /src/hl_pydriver /bin/hl_pydriver
 
 # Stage 4: pack CPIO.
 FROM alpine:3.20 AS cpio
-RUN apk add --no-cache cpio findutils
+RUN apk add --no-cache cpio findutils ca-certificates
 COPY --from=rootfs / /rootfs/
+
+# DNS configuration for glibc's getaddrinfo
+RUN mkdir -p /rootfs/etc && \
+    echo "nameserver 8.8.8.8" > /rootfs/etc/resolv.conf && \
+    echo "nameserver 8.8.4.4" >> /rootfs/etc/resolv.conf && \
+    echo "hosts: files dns" > /rootfs/etc/nsswitch.conf && \
+    echo "127.0.0.1 localhost" > /rootfs/etc/hosts
+
+# CA certificates for TLS
+RUN mkdir -p /rootfs/etc/ssl/certs /rootfs/usr/lib/ssl && \
+    cp /etc/ssl/certs/ca-certificates.crt /rootfs/etc/ssl/certs/ && \
+    ln -sf /etc/ssl/certs/ca-certificates.crt /rootfs/usr/lib/ssl/cert.pem
+
 RUN cd /rootfs && find . | cpio -o -H newc > /output.cpio 2>/dev/null

examples/python-agent-driver/kraft.yaml

@@ -2,8 +2,8 @@ specification: '0.6'
 name: python-agent-driver-hyperlight
 
 unikraft:
-  source: https://github.com/unikraft/unikraft.git
-  version: plat-hyperlight
+  source: https://github.com/danbugs/unikraft.git
+  version: networking
   kconfig:
     CONFIG_PLAT_HYPERLIGHT: 'y'
     CONFIG_PAGING: 'n'
@@ -34,6 +34,15 @@ unikraft:
     CONFIG_LIBHOSTFS: 'y'
     CONFIG_LIBHOSTFS_AUTOMOUNT: 'y'
 
+    # Networking: host-proxied sockets
+    CONFIG_LIBPOSIX_SOCKET: 'y'
+    CONFIG_LIBHOSTSOCK: 'y'
+
+    # FD infrastructure (required by posix-socket)
+    CONFIG_LIBPOSIX_FDIO: 'y'
+    CONFIG_LIBPOSIX_FDTAB: 'y'
+    CONFIG_LIBUKFILE: 'y'
+
     # Target our driver binary, not /usr/local/bin/python3.
     CONFIG_APPELFLOADER: 'y'
     CONFIG_APPELFLOADER_VFSEXEC: 'y'