Matej Hrica
Matej Hrica
Previously krun_start_enter would succeed and the guest kernel would just panic. The root filesystem directory was opened lazily when the guest kernel used fuse init opcode. This commit changes it...
This PR adds many test for TSI. For unix domain sockets we need to root to be "/", so this implements basic support for running tests with namespaces (in the...
In the current form, it is possible to escape out of directories exposed by the libkruns "fs" device. In fact, there is even a warning in the source code: https://github.com/containers/libkrun/blob/9041aaa4cb7f80e463ed82ec3bf1a9301174217d/src/devices/src/virtio/fs/linux/passthrough.rs#L311-L316...