github/kata-containers
1
0
Fork 2
mirror of https://github.com/kata-containers/kata-containers.git synced 2025-09-14 13:29:31 +00:00
Code Issues Projects Releases Wiki Activity

kata-types: Support disabled sharefs with config of shared_fs = "none"

Browse Source 
For CoCo, shared_fs is prohibited as we cannot guarantee the security of
guest/host sharing. Therefore, this PR enables administrators to configure
shared_fs = "none" via the configuration.toml file, thereby enforcing the
disablement of sharing.

Fixes #10677

Signed-off-by: alex.lyn <alex.lyn@antgroup.com>
This commit is contained in:
alex.lyn
2025-05-30 16:06:55 +08:00
parent 9488ce822d
commit f3c8ef9200
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
src/libs/kata-types/src/config/hypervisor/mod.rs
View File

@@ -65,6 +65,7 @@ pub const VIRTIO_PMEM: &str = "virtio-pmem";
mod firecracker; mod firecracker;
pub use self::firecracker::{FirecrackerConfig, HYPERVISOR_NAME_FIRECRACKER}; pub use self::firecracker::{FirecrackerConfig, HYPERVISOR_NAME_FIRECRACKER};
const NO_VIRTIO_FS: &str = "none";
const VIRTIO_9P: &str = "virtio-9p"; const VIRTIO_9P: &str = "virtio-9p";
const VIRTIO_FS: &str = "virtio-fs"; const VIRTIO_FS: &str = "virtio-fs";
const VIRTIO_FS_INLINE: &str = "inline-virtio-fs"; const VIRTIO_FS_INLINE: &str = "inline-virtio-fs";
@@ -932,6 +933,7 @@ pub struct SharedFsInfo {
/// Shared file system type: /// Shared file system type:
/// - virtio-fs (default) /// - virtio-fs (default)
/// - virtio-9p` /// - virtio-9p`
/// - none
pub shared_fs: Option<String>, pub shared_fs: Option<String>,
/// Path to vhost-user-fs daemon. /// Path to vhost-user-fs daemon.
@@ -981,6 +983,11 @@ pub struct SharedFsInfo {
impl SharedFsInfo { impl SharedFsInfo {
/// Adjust the configuration information after loading from configuration file. /// Adjust the configuration information after loading from configuration file.
pub fn adjust_config(&mut self) -> Result<()> { pub fn adjust_config(&mut self) -> Result<()> {
if self.shared_fs.as_deref() == Some(NO_VIRTIO_FS) {
self.shared_fs = None;
return Ok(());
}
if self.shared_fs.as_deref() == Some("") { if self.shared_fs.as_deref() == Some("") {
self.shared_fs = Some(default::DEFAULT_SHARED_FS_TYPE.to_string()); self.shared_fs = Some(default::DEFAULT_SHARED_FS_TYPE.to_string());
} }