From 8dae67794a331557fa9ad2c67f7bd414083632b7 Mon Sep 17 00:00:00 2001 From: Alex Lyn Date: Fri, 6 Mar 2026 10:59:10 +0800 Subject: [PATCH] docs: switch to blockfile snapshotter for SEV-SNP in runtime-rs Updated the configuration guide to use `shared_fs = "none"`. This change reflects that `virtio-9p` is deprecated in `runtime-rs` and recommends the blockfile snapshotter as a stable alternative to the buggy `virtio-fs` in SEV-SNP QEMU versions. But this's limited in the nerdctl or ctr tools. Signed-off-by: Alex Lyn --- docs/how-to/how-to-run-kata-containers-with-SNP-VMs.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/docs/how-to/how-to-run-kata-containers-with-SNP-VMs.md b/docs/how-to/how-to-run-kata-containers-with-SNP-VMs.md index e39e00d5d2..a1ebed25b5 100644 --- a/docs/how-to/how-to-run-kata-containers-with-SNP-VMs.md +++ b/docs/how-to/how-to-run-kata-containers-with-SNP-VMs.md @@ -96,6 +96,10 @@ path = "/path/to/qemu/build/qemu-system-x86_64" ```toml shared_fs = "virtio-9p" ``` +- Use `blockfile` snapshotter: Since virtio-fs remains unsupported due to bugs in QEMU snp-v3, and virtio-9p is no longer supported in runtime-rs, it is recommended to use the blockfile snapshotter. This allows container images to be managed via block devices without relying on a shared file system. To enable this, set the `snapshotter` to `blockfile` in the containerd config file, please refer to [blockfile guide](https://github.com/containerd/containerd/blob/main/docs/snapshotters/blockfile.md) for more information. Additionally, shared_fs should be set to "none" since no shared file system is used. +```toml +shared_fs = "none" +``` - Disable `virtiofsd` since it is no longer required (comment out) ```toml # virtio_fs_daemon = "/usr/libexec/virtiofsd"