External/cloud-hypervisor
1
0
Fork 0
mirror of https://github.com/cloud-hypervisor/cloud-hypervisor.git synced 2024-11-05 03:21:13 +00:00
Code Issues Packages Projects Releases Wiki Activity
3497eeff49
cloud-hypervisor/vhost_user_fs/Cargo.toml

17 lines
508 B
TOML
Raw Normal View History

vhost_user_fs: Add new crate This new crate will be dedicated to vhost_user_fs specific code that can be used as a library from the vhost-user-fs daemon. Signed-off-by: Sebastien Boeuf <sebastien.boeuf@intel.com>
2019-10-31 17:16:28 +00:00
[package]
name = "vhost_user_fs"
version = "0.1.0"
authors = ["The Cloud Hypervisor Authors"]
edition = "2018"
[dependencies]
vhost_user_fs: Add FUSE definitions To be able to deal with FUSE requests, this commit introduces FUSE definitions, copied over from the crosvm commit 961461350c0b6824e5f20655031bf6c6bf6b7c30. Signed-off-by: Sebastien Boeuf <sebastien.boeuf@intel.com>
2019-10-31 17:26:24 +00:00
bitflags = "1.1.0"
build(deps): bump libc from 0.2.70 to 0.2.71 Bumps [libc](https://github.com/rust-lang/libc) from 0.2.70 to 0.2.71. - [Release notes](https://github.com/rust-lang/libc/releases) - [Commits](https://github.com/rust-lang/libc/compare/0.2.70...0.2.71) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-05-26 15:44:29 +00:00
libc = "0.2.71"
vhost_user_fs: Implement FileSystem trait for Passthrough Add a "passthrough" file system implementation that just forwards its requests to the appropriate system call. This code has been ported over from crosvm commit 961461350c0b6824e5f20655031bf6c6bf6b7c30. Signed-off-by: Sebastien Boeuf <sebastien.boeuf@intel.com>
2019-10-31 20:09:20 +00:00
log = "0.4.8"
vhost_user_fs: Add seccomp Implement seccomp; we use one filter for all threads. The syscall list comes from the C daemon with syscalls added as I hit them. The default behaviour is to kill the process, this normally gets audit logged. --seccomp none disables seccomp log Just logs violations but doesn't stop it trap causes a signal to be be sent that can be trapped. If you suspect you're hitting a seccomp action then you can check the audit log; you could also switch to running with 'log' to collect a bunch of calls to report. To see where the syscalls are coming from use 'trap' with a debugger or coredump to backtrace it. This can be improved for some syscalls to restrict the parameters to some syscalls to make them more restrictive. Signed-off-by: Dr. David Alan Gilbert <dgilbert@redhat.com>
2020-05-01 16:26:07 +00:00
# Match the version in vmm
seccomp = { git = "https://github.com/firecracker-microvm/firecracker", tag = "v0.21.1" }
vhost_user_fs: Implement support for optional sandboxing Implement support for setting up a sandbox for running the service. The technique for this has been borrowed from virtiofsd, and consists on switching to new PID, mount and network namespaces, and then switching root to the directory to be shared. Future patches will implement additional hardening features like dropping capabilities and seccomp filters. Signed-off-by: Sergio Lopez <slp@redhat.com>
2020-04-24 11:43:36 +00:00
tempdir= "0.3.7"
build: Bump vm-memory and linux-loader dependencies linux-loader depends on vm-memory so must be updated at the same time. Signed-off-by: Rob Bradford <robert.bradford@intel.com>
2020-03-23 13:54:34 +00:00
vm-memory = "0.2.0"
vhost_user_fs: Add virtio descriptor helper traits Introduce helpers to split a virtio descriptor into its readable part on one side, and into its writable part on the other side. This is useful to separate the request from the reply. This code has been ported over from crosvm commit 961461350c0b6824e5f20655031bf6c6bf6b7c30. Two important modifications have been applied to the original code: - GuestMemory is replaced by GuestMemoryMmap from the vm-memory crate, which comes with different ways of accessing the memory regions. - VolatileSlice has different methods, which means the code has been updated accordingly. Signed-off-by: Sebastien Boeuf <sebastien.boeuf@intel.com>
2019-10-31 21:55:06 +00:00
vm-virtio = { path = "../vm-virtio" }
Cargo: switch vhost_rs to external crate As cloud-hypervisor/vhost crate (dragonball branch) is ready to be used, switch vhost_rs from internal crate to the external one. Signed-off-by: Eryu Guan <eguan@linux.alibaba.com>
2020-02-25 03:26:35 +00:00
vhost_rs = { git = "https://github.com/cloud-hypervisor/vhost", branch = "dragonball", package = "vhost", features = ["vhost-user-slave"] }
Reference in New Issue Copy Permalink