cgroups: pass vhost-vsock device to cgroup

for the sandbox cgroup

Signed-off-by: Snir Sheriber <ssheribe@redhat.com>
This commit is contained in:
Snir Sheriber 2021-11-03 14:04:59 +02:00
parent 7362e1e8a9
commit b34ed403c5

View File

@ -56,6 +56,7 @@ func sandboxDevices() []specs.LinuxDeviceCgroup {
"/dev/kvm", // To run virtual machines "/dev/kvm", // To run virtual machines
"/dev/vhost-net", // To create virtqueues "/dev/vhost-net", // To create virtqueues
"/dev/vfio/vfio", // To access VFIO devices "/dev/vfio/vfio", // To access VFIO devices
"/dev/vhost-vsock", // To interact with vsock if
} }
defaultDevices = append(defaultDevices, hypervisorDevices...) defaultDevices = append(defaultDevices, hypervisorDevices...)