server/server-config
3
0
Fork 0
Code Issues 1 Pull Requests 1 Actions Packages Projects Releases Wiki Activity
10 Commits 9 Branches 6 Tags
949bfca6bdedc4d3ad7403df1b2b3dff5c359fe0
Commit Graph
3 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Autumn LiuandClaude Sonnet 5 949bfca6bd actually bind /dev/kvm into the container, and test it initializes 
DeviceAllow= only grants cgroup permission to open a device node - it
doesn't create one, and nspawn can't mknod a device inside a user
namespace. The node needs an explicit bind from the host as well, so
both are required together.

Also add a test that actually boots qemu-system-x86_64 -enable-kvm
(no disk, killed by timeout) and checks for "Permission denied" /
"Could not access KVM" in its output, rather than just checking the
node opens - a wrong-gid or unmapped node still opens but fails the
ioctls qemu needs.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Dzy7tEKLCFFXD96LmR8we3
 2026-09-13 20:18:24 -05:00
Autumn Liu 70d7eafe76 fix bug
diff-pr / dix (pull_request) Successful in 6m20s
Details
flake-check / flake-check (pull_request) Failing after 2m42s
Details
lint / lint (pull_request) Successful in 1m46s
Details
2026-09-11 16:16:02 -05:00
Autumn Liu a6ff6536dc update 2026-09-11 16:16:02 -05:00