diff --git a/src/runtime/Makefile b/src/runtime/Makefile index 759e3d607f..270943e152 100644 --- a/src/runtime/Makefile +++ b/src/runtime/Makefile @@ -234,7 +234,7 @@ DEFDISABLESELINUX := false DEFDISABLEGUESTSELINUX := true # Default is empty string "" to match the default golang (when commented out in config). # Most users will want to set this to "system_u:system_r:container_t" for SELinux support. -DEFGUESTSELINUXLABEL := +DEFGUESTSELINUXLABEL := #Default SeccomSandbox param #The same default policy is used by libvirt @@ -291,6 +291,7 @@ DEFSTATICRESOURCEMGMT_TEE = true DEFSTATICRESOURCEMGMT_NV = true DEFDISABLEIMAGENVDIMM ?= false +DEFDISABLEIMAGENVDIMM_NV = true DEFBINDMOUNTS := [] @@ -784,6 +785,7 @@ USER_VARS += DEFVFIOMODE USER_VARS += DEFVFIOMODE_SE USER_VARS += BUILDFLAGS USER_VARS += DEFDISABLEIMAGENVDIMM +USER_VARS += DEFDISABLEIMAGENVDIMM_NV USER_VARS += DEFCCAMEASUREMENTALGO USER_VARS += DEFSHAREDFS_QEMU_CCA_VIRTIOFS USER_VARS += DEFPODRESOURCEAPISOCK diff --git a/src/runtime/config/configuration-qemu-nvidia-gpu-snp.toml.in b/src/runtime/config/configuration-qemu-nvidia-gpu-snp.toml.in index 4652df681a..ef0333d75a 100644 --- a/src/runtime/config/configuration-qemu-nvidia-gpu-snp.toml.in +++ b/src/runtime/config/configuration-qemu-nvidia-gpu-snp.toml.in @@ -379,7 +379,7 @@ msize_9p = @DEFMSIZE9P@ # Otherwise virtio-block device is used. # # nvdimm is not supported when `confidential_guest = true`. -disable_image_nvdimm = @DEFDISABLEIMAGENVDIMM@ +disable_image_nvdimm = @DEFDISABLEIMAGENVDIMM_NV@ # Before hot plugging a PCIe device, you need to add a pcie_root_port device. # Use this parameter when using some large PCI bar devices, such as Nvidia GPU diff --git a/src/runtime/config/configuration-qemu-nvidia-gpu-tdx.toml.in b/src/runtime/config/configuration-qemu-nvidia-gpu-tdx.toml.in index 89906c9179..90a0707800 100644 --- a/src/runtime/config/configuration-qemu-nvidia-gpu-tdx.toml.in +++ b/src/runtime/config/configuration-qemu-nvidia-gpu-tdx.toml.in @@ -356,7 +356,7 @@ msize_9p = @DEFMSIZE9P@ # Otherwise virtio-block device is used. # # nvdimm is not supported when `confidential_guest = true`. -disable_image_nvdimm = @DEFDISABLEIMAGENVDIMM@ +disable_image_nvdimm = @DEFDISABLEIMAGENVDIMM_NV@ # Before hot plugging a PCIe device, you need to add a pcie_root_port device. # Use this parameter when using some large PCI bar devices, such as Nvidia GPU diff --git a/src/runtime/config/configuration-qemu-nvidia-gpu.toml.in b/src/runtime/config/configuration-qemu-nvidia-gpu.toml.in index ddab7e60be..65323638e7 100644 --- a/src/runtime/config/configuration-qemu-nvidia-gpu.toml.in +++ b/src/runtime/config/configuration-qemu-nvidia-gpu.toml.in @@ -353,7 +353,7 @@ msize_9p = @DEFMSIZE9P@ # Otherwise virtio-block device is used. # # nvdimm is not supported when `confidential_guest = true`. -disable_image_nvdimm = @DEFDISABLEIMAGENVDIMM@ +disable_image_nvdimm = @DEFDISABLEIMAGENVDIMM_NV@ # Enable hot-plugging of VFIO devices to a bridge-port, # root-port or switch-port.