1
0
mirror of https://gitlab.com/libvirt/libvirt.git synced 2025-03-07 17:28:15 +00:00

qemu_cgroup: allow access to /dev/dri for virtio-vga

QEMU needs access to the /dev/dri/render* device for
virgl to work.

Allow access to all /dev/dri/* devices for domains with
<video>
  <model type='virtio' heads='1' primary='yes'>
    <acceleration accel3d='yes'/>
  </model>
</video>

https://bugzilla.redhat.com/show_bug.cgi?id=1337290
This commit is contained in:
Ján Tomko 2016-05-19 09:29:17 +02:00
parent 20a0fa8eb2
commit 3943bdd60c

View File

@ -51,6 +51,7 @@ static const char *const defaultDeviceACL[] = {
};
#define DEVICE_PTY_MAJOR 136
#define DEVICE_SND_MAJOR 116
#define DEVICE_DRI_MAJOR 226
static int
@ -626,6 +627,20 @@ qemuSetupDevicesCgroup(virQEMUDriverPtr driver,
goto cleanup;
}
if (vm->def->nvideos) {
/* currently libvirt only allows the primary video to be virtio */
virDomainVideoDefPtr vid = vm->def->videos[0];
if (vid->type == VIR_DOMAIN_VIDEO_TYPE_VIRTIO &&
vid->accel && vid->accel->accel3d == VIR_TRISTATE_BOOL_YES) {
rv = virCgroupAllowDevice(priv->cgroup, 'c', DEVICE_DRI_MAJOR, -1,
VIR_CGROUP_DEVICE_RW);
virDomainAuditCgroupMajor(vm, priv->cgroup, "allow", DEVICE_DRI_MAJOR,
"video", "rw", rv == 0);
if (rv < 0)
goto cleanup;
}
}
for (i = 0; deviceACL[i] != NULL; i++) {
if (!virFileExists(deviceACL[i])) {
VIR_DEBUG("Ignoring non-existent device %s", deviceACL[i]);