NuKVM/libvirt
3
0
Fork 0
mirror of https://github.com/libvirt/libvirt.git synced 2025-02-25 18:55:26 -06:00
Code Issues Packages Projects Releases Wiki Activity

conf: Introduce <sandbox mode='chroot'/> for <filesystem><binary>

Browse Source 
This adds a new XML element

<filesystem>
  <binary>
    <sandbox mode='chroot|namespace'/>
  </binary>
</filesystem>

This will be used by qemu virtiofs

Reviewed-by: Michal Privoznik <mprivozn@redhat.com>
Signed-off-by: Cole Robinson <crobinso@redhat.com>
This commit is contained in:
Cole Robinson
2021-03-26 11:24:37 -04:00
parent 9c81d1ec11
commit f4c97327fb
6 changed files with 53 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
docs/formatdomain.rst
View File

@@ -3236,6 +3236,7 @@ A directory on the host that can be accessed directly from the guest.
<driver type='virtiofs' queue='1024'/>
<binary path='/usr/libexec/virtiofsd' xattr='on'>
<cache mode='always'/>
<sandbox mode='namespace'/>
<lock posix='on' flock='on'/>
</binary>
<source dir='/path'/>
@@ -3360,6 +3361,11 @@ A directory on the host that can be accessed directly from the guest.
``cache`` element, possible ``mode`` values being ``none`` and ``always``.
Locking can be controlled via the ``lock`` element - attributes ``posix`` and
``flock`` both accepting values ``on`` or ``off``. ( :since:`Since 6.2.0` )
The sandboxing method used by virtiofsd can be configured with the ``sandbox``
element, possible ``mode`` values being ``namespace`` and
``chroot``, see the
`virtiofsd documentation <https://qemu.readthedocs.io/en/latest/tools/virtiofsd.html>`__
for more details. ( :since:`Since 7.2.0` )
``source``
The resource on the host that is being accessed in the guest. The ``name``
attribute must be used with ``type='template'``, and the ``dir`` attribute

12
docs/schemas/domaincommon.rng
View File

@@ -2984,6 +2984,18 @@
</optional>
</element>
</optional>
<optional>
<element name="sandbox">
<optional>
<attribute name="mode">
<choice>
<value>namespace</value>
<value>chroot</value>
</choice>
</attribute>
</optional>
</element>
</optional>
<optional>
<element name="lock">
<optional>