github.com/kata-containers/tests@v0.0.0-20240307153542-772105b56064/functional/vfio/guest-kernel.json.in (about)

     1  #
     2  # Copyright (c) 2021 Intel Corporation
     3  #
     4  # SPDX-License-Identifier: Apache-2.0
     5  #
     6  {
     7  	"ociVersion": "1.0.0-rc2-dev",
     8  	"platform": {
     9  		"os": "linux",
    10  		"arch": "amd64"
    11  	},
    12  	"annotations": {
    13  		"io.katacontainers.config.hypervisor.enable_iommu": "false",
    14  		"io.katacontainers.config.runtime.vfio_mode": "guest-kernel"
    15  	},
    16  	"process": {
    17  		"terminal": false,
    18  		"consoleSize": {
    19  			"height": 0,
    20  			"width": 0
    21  		},
    22  		"user": {
    23  			"uid": 0,
    24  			"gid": 0
    25  		},
    26  		"args": [ "/bin/tail", "-f", "/dev/null" ],
    27  		"env": [
    28  			"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
    29  			"TERM=xterm"
    30  		],
    31  		"cwd": "/",
    32  		"rlimits": [{
    33  			"type": "RLIMIT_NOFILE",
    34  			"hard": 1024,
    35  			"soft": 1024
    36  		}],
    37  		"noNewPrivileges": true
    38  	},
    39  	"root": {
    40  		"path": "@ROOTFS@",
    41  		"readonly": false
    42  	},
    43  	"hostname": "vfio-test",
    44  	"mounts": [{
    45  			"destination": "/proc",
    46  			"type": "proc",
    47  			"source": "proc"
    48  		},
    49  		{
    50  			"destination": "/dev",
    51  			"type": "tmpfs",
    52  			"source": "tmpfs",
    53  			"options": [
    54  				"nosuid",
    55  				"strictatime",
    56  				"mode=755",
    57  				"size=65536k"
    58  			]
    59  		},
    60  		{
    61  			"destination": "/dev/pts",
    62  			"type": "devpts",
    63  			"source": "devpts",
    64  			"options": [
    65  				"nosuid",
    66  				"noexec",
    67  				"newinstance",
    68  				"ptmxmode=0666",
    69  				"mode=0620",
    70  				"gid=5"
    71  			]
    72  		},
    73  		{
    74  			"destination": "/dev/shm",
    75  			"type": "tmpfs",
    76  			"source": "shm",
    77  			"options": [
    78  				"nosuid",
    79  				"noexec",
    80  				"nodev",
    81  				"mode=1777",
    82  				"size=65536k"
    83  			]
    84  		},
    85  		{
    86  			"destination": "/dev/mqueue",
    87  			"type": "mqueue",
    88  			"source": "mqueue",
    89  			"options": [
    90  				"nosuid",
    91  				"noexec",
    92  				"nodev"
    93  			]
    94  		},
    95  		{
    96  			"destination": "/sys",
    97  			"type": "sysfs",
    98  			"source": "sysfs",
    99  			"options": [
   100  				"nosuid",
   101  				"noexec",
   102  				"nodev",
   103  				"ro"
   104  			]
   105  		},
   106  		{
   107  			"destination": "/sys/fs/cgroup",
   108  			"type": "cgroup",
   109  			"source": "cgroup",
   110  			"options": [
   111  				"nosuid",
   112  				"noexec",
   113  				"nodev",
   114  				"relatime",
   115  				"ro"
   116  			]
   117  		}
   118  	],
   119  	"hooks": {},
   120  	"linux": {
   121  		"devices": [{
   122  			"path": "@VFIO_PATH@",
   123  			"type": "c",
   124  			"major": @VFIO_MAJOR@,
   125  			"minor": @VFIO_MINOR@,
   126  			"fileMode": 384,
   127  			"uid": 0,
   128  			"gid": 0
   129  		}],
   130  		"cgroupsPath": "kata/vfiotest",
   131  		"resources": {
   132  			"devices": [
   133  				{"allow":false,"access":"rwm"},
   134  				{"allow":true,"type":"c","major":1,"minor":3,"access":"rwm"},
   135  				{"allow":true,"type":"c","major":1,"minor":5,"access":"rwm"},
   136  				{"allow":true,"type":"c","major":1,"minor":8,"access":"rwm"},
   137  				{"allow":true,"type":"c","major":1,"minor":9,"access":"rwm"},
   138  				{"allow":true,"type":"c","major":5,"minor":0,"access":"rwm"},
   139  				{"allow":true,"type":"c","major":5,"minor":1,"access":"rwm"},
   140  				{"allow": true,"access": "rwm","major": @VFIO_MAJOR@,"minor": @VFIO_MINOR@,"type": "c"}
   141  			]
   142  		},
   143  		"namespaces": [{
   144  				"type": "pid"
   145  			},
   146  			{
   147  				"type": "network"
   148  			},
   149  			{
   150  				"type": "ipc"
   151  			},
   152  			{
   153  				"type": "uts"
   154  			},
   155  			{
   156  				"type": "mount"
   157  			}
   158  		],
   159  		"maskedPaths": [
   160  			"/proc/kcore",
   161  			"/proc/latency_stats",
   162  			"/proc/timer_list",
   163  			"/proc/timer_stats",
   164  			"/proc/sched_debug",
   165  			"/sys/firmware"
   166  		],
   167  		"readonlyPaths": [
   168  			"/proc/asound",
   169  			"/proc/bus",
   170  			"/proc/fs",
   171  			"/proc/irq",
   172  			"/proc/sys",
   173  			"/proc/sysrq-trigger"
   174  		]
   175  	}
   176  }