mirror of
https://github.com/kata-containers/kata-containers.git
synced 2026-07-26 07:30:19 +00:00
7cb4a189c1
qemu-nvidia-gpu boots the driver-agnostic NVIDIA base image and then cold-plugs the GPU extension on top. Nothing, however, just boots that base image on NVIDIA hosts that have no GPU (or where the GPU isn't handed to the guest), even though the base image is perfectly usable on its own. Add qemu-nvidia-cpu (Go) and qemu-nvidia-cpu-runtime-rs (Rust), cloned from the qemu-nvidia-gpu configs with every GPU-passthrough bit dropped: no guest_extension_images, cold_plug_vfio = "no-port", pcie_root_port = 0, no VFIO pod-resource wiring and no GPU NUMA validation. Resource defaults and timeouts are pulled back in line with qemu[-runtime-rs] (1 vCPU, DEFMEMSZ, small overheads) rather than the GPU-tuned values, and firmware is left to the arch default so x86_64 boots without OVMF. Both classes boot the measured nvidia base image verity-backed. The Rust runtime already maps KERNELVERITYPARAMS_NV to the base hash; the Go runtime maps it to the monolith, so a dedicated KERNELVERITYPARAMS_NV_BASE var is added for qemu-nvidia-cpu. Signed-off-by: Fabiano Fidêncio <ffidencio@nvidia.com> Assisted-by: Cursor <cursoragent@cursor.com>