-
Notifications
You must be signed in to change notification settings - Fork 11
bhyve VM Support #605
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
bhyve VM Support #605
Conversation
0f01dcd
to
505cac4
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
👀
ioc/Jail.py
Outdated
) | ||
devfs_ruleset.append("add path vmm unhide") | ||
devfs_ruleset.append("add path vmm/* unhide") | ||
devfs_ruleset.append("add path nmdm* unhide") |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
this is also missing from iocage/iocage#767
bd2e62f
to
7f4f461
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
we should make this more restricted
ioc/Jail.py
Outdated
@@ -1602,6 +1602,11 @@ def devfs_ruleset(self) -> ioc.DevfsRules.DevfsRuleset: | |||
if self._allow_mount_zfs == "1": | |||
devfs_ruleset.append("add path zfs unhide") | |||
|
|||
if self.config["allow_vmm"] is True: | |||
devfs_ruleset.append("add path vmm unhide") | |||
devfs_ruleset.append("add path vmm/* unhide") |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
as discussed elsewhere, it would be good to create a concrete rule per vmm container, rather than exposing all these devices to each jail
implements #604
blocked by #644