* Improve the `wasmtime` crate's README This commit is me finally getting back to #2688 and improving the README of the `wasmtime` crate. Currently we have a [pretty drab README][drab] that doesn't really convey what we want about Wasmtime. While I was doing this I opted to update the feature list of Wasmtime as well in the main README (which is mirrored into the crate readme), namely adding a bullet point for "secure" which I felt was missing relative to how we think about Wasmtime. Naturally there's a lot of ways to paint this shed, so feedback is of course welcome on this! (I'm not the best writer myself) [drab]: https://crates.io/crates/wasmtime/0.37.0 * Expand the "Fast" bullet a bit more * Reference the book from the wasmtime crate * Update more security docs Also merge the sandboxing security page with the main security page to avoid the empty security page.
149 lines
6.2 KiB
Markdown
149 lines
6.2 KiB
Markdown
<div align="center">
|
|
<h1><code>wasmtime</code></h1>
|
|
|
|
<p>
|
|
<strong>A standalone runtime for
|
|
<a href="https://webassembly.org/">WebAssembly</a></strong>
|
|
</p>
|
|
|
|
<strong>A <a href="https://bytecodealliance.org/">Bytecode Alliance</a> project</strong>
|
|
|
|
<p>
|
|
<a href="https://github.com/bytecodealliance/wasmtime/actions?query=workflow%3ACI"><img src="https://github.com/bytecodealliance/wasmtime/workflows/CI/badge.svg" alt="build status" /></a>
|
|
<a href="https://bytecodealliance.zulipchat.com/#narrow/stream/217126-wasmtime"><img src="https://img.shields.io/badge/zulip-join_chat-brightgreen.svg" alt="zulip chat" /></a>
|
|
<img src="https://img.shields.io/badge/rustc-stable+-green.svg" alt="supported rustc stable" />
|
|
<a href="https://docs.rs/wasmtime"><img src="https://docs.rs/wasmtime/badge.svg" alt="Documentation Status" /></a>
|
|
</p>
|
|
|
|
<h3>
|
|
<a href="https://bytecodealliance.github.io/wasmtime/">Guide</a>
|
|
<span> | </span>
|
|
<a href="https://bytecodealliance.github.io/wasmtime/contributing.html">Contributing</a>
|
|
<span> | </span>
|
|
<a href="https://wasmtime.dev/">Website</a>
|
|
<span> | </span>
|
|
<a href="https://bytecodealliance.zulipchat.com/#narrow/stream/217126-wasmtime">Chat</a>
|
|
</h3>
|
|
</div>
|
|
|
|
## Installation
|
|
|
|
The Wasmtime CLI can be installed on Linux and macOS with a small install
|
|
script:
|
|
|
|
```sh
|
|
curl https://wasmtime.dev/install.sh -sSf | bash
|
|
```
|
|
|
|
Windows or otherwise interested users can download installers and
|
|
binaries directly from the [GitHub
|
|
Releases](https://github.com/bytecodealliance/wasmtime/releases) page.
|
|
|
|
## Example
|
|
|
|
If you've got the [Rust compiler
|
|
installed](https://www.rust-lang.org/tools/install) then you can take some Rust
|
|
source code:
|
|
|
|
```rust
|
|
fn main() {
|
|
println!("Hello, world!");
|
|
}
|
|
```
|
|
|
|
and compile/run it with:
|
|
|
|
```sh
|
|
$ rustup target add wasm32-wasi
|
|
$ rustc hello.rs --target wasm32-wasi
|
|
$ wasmtime hello.wasm
|
|
Hello, world!
|
|
```
|
|
|
|
## Features
|
|
|
|
* **Fast**. Wasmtime is built on the optimizing [Cranelift] code generator to
|
|
quickly generate high-quality machine code either at runtime or
|
|
ahead-of-time. Wasmtime's runtime is also optimized for cases such as
|
|
efficient instantiation, low-overhead transitions between the embedder and
|
|
wasm, and scalability of concurrent instances.
|
|
|
|
* **[Secure]**. Wasmtime's development is strongly focused on the correctness of
|
|
its implementation with 24/7 fuzzing donated by [Google's OSS Fuzz],
|
|
leveraging Rust's API and runtime safety guarantees, careful design of
|
|
features and APIs through an [RFC process], a [security policy] in place
|
|
for when things go wrong, and a [release policy] for patching older versions
|
|
as well. We follow best practices for defense-in-depth and known
|
|
protections and mitigations for issues like Spectre. Finally, we're working
|
|
to push the state-of-the-art by collaborating with academic
|
|
researchers to formally verify critical parts of Wasmtime and Cranelift.
|
|
|
|
* **[Configurable]**. Wastime supports a rich set of APIs and build time
|
|
configuration to provide many options such as further means of restricting
|
|
WebAssembly beyond its basic guarantees such as its CPU and Memory
|
|
consumption. Wasmtime also runs in tiny environments all the way up to massive
|
|
servers with many concurrent instances.
|
|
|
|
* **[WASI]**. Wasmtime supports a rich set of APIs for interacting with the host
|
|
environment through the [WASI standard](https://wasi.dev).
|
|
|
|
* **[Standards Compliant]**. Wasmtime passes the [official WebAssembly test
|
|
suite](https://github.com/WebAssembly/testsuite), implements the [official C
|
|
API of wasm](https://github.com/WebAssembly/wasm-c-api), and implements
|
|
[future proposals to WebAssembly](https://github.com/WebAssembly/proposals) as
|
|
well. Wasmtime developers are intimately engaged with the WebAssembly
|
|
standards process all along the way too.
|
|
|
|
[Wasmtime]: https://github.com/bytecodealliance/wasmtime
|
|
[Cranelift]: https://github.com/bytecodealliance/wasmtime/blob/main/cranelift/README.md
|
|
[Google's OSS Fuzz]: https://google.github.io/oss-fuzz/
|
|
[security policy]: https://bytecodealliance.org/security
|
|
[RFC process]: https://github.com/bytecodealliance/rfcs
|
|
[release policy]: https://docs.wasmtime.dev/stability-release.html
|
|
[Secure]: https://docs.wasmtime.dev/security.html
|
|
[Configurable]: https://docs.rs/wasmtime/latest/wasmtime/struct.Config.html
|
|
[WASI]: https://docs.rs/wasmtime-wasi/latest/wasmtime_wasi/
|
|
[Standards Compliant]: https://docs.wasmtime.dev/stability-wasm-proposals-support.html
|
|
|
|
## Language Support
|
|
|
|
You can use Wasmtime from a variety of different languages through embeddings of
|
|
the implementation:
|
|
|
|
* **[Rust]** - the [`wasmtime` crate]
|
|
* **[C]** - the [`wasm.h`, `wasi.h`, and `wasmtime.h` headers][c-headers] or use [`wasmtime` Conan package]
|
|
* **C++** - the [`wasmtime-cpp` repository][wasmtime-cpp] or use [`wasmtime-cpp` Conan package]
|
|
* **[Python]** - the [`wasmtime` PyPI package]
|
|
* **[.NET]** - the [`Wasmtime` NuGet package]
|
|
* **[Go]** - the [`wasmtime-go` repository]
|
|
|
|
[Rust]: https://bytecodealliance.github.io/wasmtime/lang-rust.html
|
|
[C]: https://bytecodealliance.github.io/wasmtime/examples-c-embed.html
|
|
[`wasmtime` crate]: https://crates.io/crates/wasmtime
|
|
[c-headers]: https://bytecodealliance.github.io/wasmtime/c-api/
|
|
[Python]: https://bytecodealliance.github.io/wasmtime/lang-python.html
|
|
[`wasmtime` PyPI package]: https://pypi.org/project/wasmtime/
|
|
[.NET]: https://bytecodealliance.github.io/wasmtime/lang-dotnet.html
|
|
[`Wasmtime` NuGet package]: https://www.nuget.org/packages/Wasmtime
|
|
[Go]: https://bytecodealliance.github.io/wasmtime/lang-go.html
|
|
[`wasmtime-go` repository]: https://pkg.go.dev/github.com/bytecodealliance/wasmtime-go
|
|
[wasmtime-cpp]: https://github.com/bytecodealliance/wasmtime-cpp
|
|
[`wasmtime` Conan package]: https://conan.io/center/wasmtime
|
|
[`wasmtime-cpp` Conan package]: https://conan.io/center/wasmtime-cpp
|
|
|
|
## Documentation
|
|
|
|
[📚 Read the Wasmtime guide here! 📚][guide]
|
|
|
|
The [wasmtime guide][guide] is the best starting point to learn about what
|
|
Wasmtime can do for you or help answer your questions about Wasmtime. If you're
|
|
curious in contributing to Wasmtime, [it can also help you do
|
|
that][contributing]!
|
|
|
|
[contributing]: https://bytecodealliance.github.io/wasmtime/contributing.html
|
|
[guide]: https://bytecodealliance.github.io/wasmtime
|
|
|
|
---
|
|
|
|
It's Wasmtime.
|