github/kata-containers
1
0
Fork 2
mirror of https://github.com/kata-containers/kata-containers.git synced 2026-05-17 04:52:23 +00:00
Code Issues Projects Releases Wiki Activity

rootfs-builder: enable kata-addon-mount@coco.service in systemd targets

Browse Source 
Create a symlink to enable kata-addon-mount@coco.service in
kata-containers.target.wants during rootfs construction for
systemd-based (non-AGENT_INIT) guests.

The unit's ConditionPathExists guard ensures it only activates when
the virtio-addon-coco block device is actually present in the VM,
so enabling it unconditionally in the base image is safe.

Signed-off-by: Fabiano Fidêncio <ffidencio@nvidia.com>
Assisted-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
Fabiano Fidêncio
2026-05-10 19:03:50 +02:00
parent 7f7d55e2ff
commit e146a24ff5
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
tools/osbuilder/rootfs-builder/rootfs.sh
View File

@@ -791,6 +791,11 @@ EOF
ln -sf "/usr/lib/systemd/system/kata-containers.target" "${ROOTFS_DIR}/etc/systemd/system/basic.target.wants/kata-containers.target"
mkdir -p "${ROOTFS_DIR}/etc/systemd/system/kata-containers.target.wants"
ln -sf "/usr/lib/systemd/system/dbus.socket" "${ROOTFS_DIR}/etc/systemd/system/kata-containers.target.wants/dbus.socket"
# Enable the addon mount template for known addon names.
# The unit uses ConditionPathExists so it is a no-op when the
# addon device is not attached to the VM.
ln -sf "/usr/lib/systemd/system/kata-addon-mount@.service" \
"${ROOTFS_DIR}/etc/systemd/system/kata-containers.target.wants/kata-addon-mount@coco.service"
chmod g+rx,o+x "${ROOTFS_DIR}"
if [[ "${CONFIDENTIAL_GUEST}" == "yes" ]]; then