libkrun
libkrun copied to clipboard
containers
A dynamic library providing Virtualization-based process isolation capabilities
The [rust-vmm/vm-superio](https://github.com/rust-vmm/vm-superio) crate implements some emulated legacy devices. Check if we can use it and drop the code from libkrun.
Some signals, such as SIGTERM, should be relayed from libkrun to the isolated process. There biggest question is how to notify the guest kernel. A dedicated device just for this...
Regardless of the value of `--user`, pods started with (rootless) podman + krun have a UID/GID of 0 within the container. krun: ```bash > podman --runtime=krun run --user=1000:1000 --rm -it...
I'm trying to run iperf3 to benchmark TSI on an M1 host running macOS 13. A panic occurs in a virtio device after sending about 1.3 GB: ``` / #...
In short, this does work: ``` # podman run -d -i --runtime /usr/bin/crun alpine 63634bd214c84293bbd00b75d4d64da06bfe1f92fce1a777e2e4331da5611de9 # echo "echo 'test'" | podman attach 6 test ``` while this does not: ```...
This would be nice to have. What all needs to be done to make it work?
This PR aims at adding support to build realm guests. First commit adds support for `create_guest_memfd()` and `set_user_memory_region2()`. To do this, the `memory_init()` is modified by adding a boolean parameter....
Hi everyone! I've got patches that make it possible to boot a libkrun VM from a kernel and a boot disk, without EFI. I tend to prefer that to booting...
Fix submount navigation by decoupling hostguest inode numbers and implementing support for FUSE SUBMOUNTS, based on virtiofsd implementation.
virtio-fs can expose multiple host mounts as a single mount. This means that all st_dev numbers from the host get collapsed into a single st_dev, breaking st_ino/st_dev comparisons for file...
Metadata
Owner
Metadata
A dynamic library providing Virtualization-based process isolation capabilities