github/kata-containers
1
0
Fork 1
mirror of https://github.com/kata-containers/kata-containers.git synced 2025-08-27 20:18:57 +00:00
Code Issues Projects Releases Wiki Activity

Merge pull request #11699 from Apokleos/support-nonprotection

Browse Source 
runtime-rs: Support initdata within NonProtection scenarios
This commit is contained in:
Fupan Li 2025-08-22 10:24:47 +08:00 committed by GitHub
commit 1a0fbbfa32
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
src/runtime-rs/crates/runtimes/virt_container/src/sandbox.rs
View File

@ -374,10 +374,6 @@ impl VirtSandbox {
hypervisor_config: &HypervisorConfig,
init_data: Option<String>,
) -> Result<Option<ProtectionDeviceConfig>> {
if !hypervisor_config.security_info.confidential_guest {
return Ok(None);
}
let available_protection = available_guest_protection()?;
info!(
sl!(),
@ -429,6 +425,7 @@ impl VirtSandbox {
debug: false,
})))
},
GuestProtection::NoProtection => Ok(None),
_ => Err(anyhow!("confidential_guest requested by configuration but no supported protection available"))
}
}
@ -453,6 +450,9 @@ impl VirtSandbox {
calculate_initdata_digest(&initdata, ProtectedPlatform::Snp)?
}
GuestProtection::Se => calculate_initdata_digest(&initdata, ProtectedPlatform::Se)?,
GuestProtection::NoProtection => {
calculate_initdata_digest(&initdata, ProtectedPlatform::NoProtection)?
}
// TODO: there's more `GuestProtection` types to be supported.
_ => return Ok(None),
};
@ -470,7 +470,7 @@ impl VirtSandbox {
sl!(),
"initdata push data into compressed block: {:?}", &image_path
);
let block_driver = &hypervisor_config.boot_info.vm_rootfs_driver;
let block_driver = &hypervisor_config.blockdev_info.block_device_driver;
let block_config = BlockConfig {
path_on_host: image_path.display().to_string(),
is_readonly: true,