server/server-config
3
0
Fork 0
Code Issues 1 Pull Requests 1 Actions Packages Projects Releases Wiki Activity

Frcc kvm #9

Merged
flowey merged 3 commits from frcc-kvm into master 2026-09-14 01:47:43 +00:00
Conversation 1 Commits 3 Files Changed 2
+33 -8
autumn commented 2026-09-14 01:21:21 +00:00
Member
Copy Link
Copy Source
No description provided.
autumn added 3 commits 2026-09-14 01:27:18 +00:00
update f9d92fc62d
fix bug e8cc76844d
actually bind /dev/kvm into the container, and test it initializes
diff-pr / dix (pull_request) Successful in 6m48s
Details
flake-check / flake-check (pull_request) Successful in 4m39s
Details
lint / lint (pull_request) Successful in 1m47s
Details
a12c18386d 
DeviceAllow= only grants cgroup permission to open a device node - it
doesn't create one, and nspawn can't mknod a device inside a user
namespace. The node needs an explicit bind from the host as well, so
both are required together.

Also add a test that actually boots qemu-system-x86_64 -enable-kvm
(no disk, killed by timeout) and checks for "Permission denied" /
"Could not access KVM" in its output, rather than just checking the
node opens - a wrong-gid or unmapped node still opens but fails the
ioctls qemu needs.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Dzy7tEKLCFFXD96LmR8we3
autumn force-pushed frcc-kvm from 79624e9373 to a12c18386d 2026-09-14 01:27:18 +00:00 Compare
gitea-actions bot commented 2026-09-14 01:34:13 +00:00
Copy Link
Copy Source

System closure diff vs master

example

<<< /nix/store/prahsm2071cyy2ldx86qagz3s37prqzd-nixos-system-example-26.11.20260810.2fcb964
>>> /nix/store/prahsm2071cyy2ldx86qagz3s37prqzd-nixos-system-example-26.11.20260810.2fcb964

PATHS: 816 -> 816 (+0, -0)
SIZE: 3.29 GiB -> 3.29 GiB
DIFF: 0 bytes

server-n0

<<< /nix/store/k6mfj88i62npmx2kh4w7zlcs3187qw06-nixos-system-server-n0-26.11.20260810.2fcb964
>>> /nix/store/26yscbn9k9wj5jn6p0860zlpvbafjmjl-nixos-system-server-n0-26.11.20260810.2fcb964

PATHS: 2308 -> 2308 (+6, -6)
SIZE: 10.6 GiB -> 10.6 GiB
DIFF: +16 bytes
<!-- dix-diff --> ### System closure diff vs `master` ## example ``` <<< /nix/store/prahsm2071cyy2ldx86qagz3s37prqzd-nixos-system-example-26.11.20260810.2fcb964 >>> /nix/store/prahsm2071cyy2ldx86qagz3s37prqzd-nixos-system-example-26.11.20260810.2fcb964 PATHS: 816 -> 816 (+0, -0) SIZE: 3.29 GiB -> 3.29 GiB DIFF: 0 bytes ``` ## server-n0 ``` <<< /nix/store/k6mfj88i62npmx2kh4w7zlcs3187qw06-nixos-system-server-n0-26.11.20260810.2fcb964 >>> /nix/store/26yscbn9k9wj5jn6p0860zlpvbafjmjl-nixos-system-server-n0-26.11.20260810.2fcb964 PATHS: 2308 -> 2308 (+6, -6) SIZE: 10.6 GiB -> 10.6 GiB DIFF: +16 bytes ```
flowey merged commit b083c03d5e into master 2026-09-14 01:47:43 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
automated
bug
Something is not working
 duplicate
This issue or pull request already exists
 enhancement
New feature
 help wanted
Need some help
 invalid
Something is wrong
 question
More information is needed
 vulnix
vulnix error scanning
 wontfix
This won't be fixed
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
autumn ci-bot flowey
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: server/server-config#9