mirror of
https://github.com/kata-containers/kata-containers.git
synced 2025-06-25 15:02:45 +00:00
cgroups: pass vhost-vsock device to cgroup
for the sandbox cgroup Signed-off-by: Snir Sheriber <ssheribe@redhat.com>
This commit is contained in:
parent
7362e1e8a9
commit
b34ed403c5
@ -53,9 +53,10 @@ func sandboxDevices() []specs.LinuxDeviceCgroup {
|
|||||||
// In order to run Virtual Machines and create virtqueues, hypervisors
|
// In order to run Virtual Machines and create virtqueues, hypervisors
|
||||||
// need access to certain character devices in the host, like kvm and vhost-net.
|
// need access to certain character devices in the host, like kvm and vhost-net.
|
||||||
hypervisorDevices := []string{
|
hypervisorDevices := []string{
|
||||||
"/dev/kvm", // To run virtual machines
|
"/dev/kvm", // To run virtual machines
|
||||||
"/dev/vhost-net", // To create virtqueues
|
"/dev/vhost-net", // To create virtqueues
|
||||||
"/dev/vfio/vfio", // To access VFIO devices
|
"/dev/vfio/vfio", // To access VFIO devices
|
||||||
|
"/dev/vhost-vsock", // To interact with vsock if
|
||||||
}
|
}
|
||||||
|
|
||||||
defaultDevices = append(defaultDevices, hypervisorDevices...)
|
defaultDevices = append(defaultDevices, hypervisorDevices...)
|
||||||
|
Loading…
Reference in New Issue
Block a user