server/server-config
3
0
Fork 0
Code Issues 1 Pull Requests 1 Actions Packages Projects Releases Wiki Activity
13 Commits 9 Branches 6 Tags
a12c18386d0e384cc649b75e37f70b787fd57c3f
Commit Graph
3 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Autumn LiuandClaude Sonnet 5 a12c18386d actually bind /dev/kvm into the container, and test it initializes
diff-pr / dix (pull_request) Successful in 6m48s
Details
flake-check / flake-check (pull_request) Successful in 4m39s
Details
lint / lint (pull_request) Successful in 1m47s
Details 
DeviceAllow= only grants cgroup permission to open a device node - it
doesn't create one, and nspawn can't mknod a device inside a user
namespace. The node needs an explicit bind from the host as well, so
both are required together.

Also add a test that actually boots qemu-system-x86_64 -enable-kvm
(no disk, killed by timeout) and checks for "Permission denied" /
"Could not access KVM" in its output, rather than just checking the
node opens - a wrong-gid or unmapped node still opens but fails the
ioctls qemu needs.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Dzy7tEKLCFFXD96LmR8we3
 2026-09-13 20:23:36 -05:00
Autumn Liu e8cc76844d fix bug 2026-09-13 20:23:36 -05:00
Autumn Liu f9d92fc62d update 2026-09-13 20:23:35 -05:00