github.com/kata-containers/tests@v0.0.0-20240307153542-772105b56064/functional/vfio/vfio.json.in (about)

     1  #
     2  # Copyright (c) 2021 Intel Corporation
     3  #
     4  # SPDX-License-Identifier: Apache-2.0
     5  #
     6  {
     7  	"ociVersion": "1.0.0-rc2-dev",
     8  	"platform": {
     9  		"os": "linux",
    10  		"arch": "amd64"
    11  	},
    12  	"annotations": {
    13  		"io.katacontainers.config.hypervisor.enable_iommu": "true",
    14  		"io.katacontainers.config.runtime.vfio_mode": "vfio"
    15  	},
    16  	"process": {
    17  		"terminal": false,
    18  		"consoleSize": {
    19  			"height": 0,
    20  			"width": 0
    21  		},
    22  		"user": {
    23  			"uid": 0,
    24  			"gid": 0
    25  		},
    26  		"args": [ "/bin/tail", "-f", "/dev/null" ],
    27  		"env": [
    28  			"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
    29  			"TERM=xterm",
    30  			"PCIDEVICE_VIRTIO_NET=@HOST_PCI@"
    31  		],
    32  		"cwd": "/",
    33  		"rlimits": [{
    34  			"type": "RLIMIT_NOFILE",
    35  			"hard": 1024,
    36  			"soft": 1024
    37  		}],
    38  		"noNewPrivileges": true
    39  	},
    40  	"root": {
    41  		"path": "@ROOTFS@",
    42  		"readonly": false
    43  	},
    44  	"hostname": "vfio-test",
    45  	"mounts": [{
    46  			"destination": "/proc",
    47  			"type": "proc",
    48  			"source": "proc"
    49  		},
    50  		{
    51  			"destination": "/dev",
    52  			"type": "tmpfs",
    53  			"source": "tmpfs",
    54  			"options": [
    55  				"nosuid",
    56  				"strictatime",
    57  				"mode=755",
    58  				"size=65536k"
    59  			]
    60  		},
    61  		{
    62  			"destination": "/dev/pts",
    63  			"type": "devpts",
    64  			"source": "devpts",
    65  			"options": [
    66  				"nosuid",
    67  				"noexec",
    68  				"newinstance",
    69  				"ptmxmode=0666",
    70  				"mode=0620",
    71  				"gid=5"
    72  			]
    73  		},
    74  		{
    75  			"destination": "/dev/shm",
    76  			"type": "tmpfs",
    77  			"source": "shm",
    78  			"options": [
    79  				"nosuid",
    80  				"noexec",
    81  				"nodev",
    82  				"mode=1777",
    83  				"size=65536k"
    84  			]
    85  		},
    86  		{
    87  			"destination": "/dev/mqueue",
    88  			"type": "mqueue",
    89  			"source": "mqueue",
    90  			"options": [
    91  				"nosuid",
    92  				"noexec",
    93  				"nodev"
    94  			]
    95  		},
    96  		{
    97  			"destination": "/sys",
    98  			"type": "sysfs",
    99  			"source": "sysfs",
   100  			"options": [
   101  				"nosuid",
   102  				"noexec",
   103  				"nodev",
   104  				"ro"
   105  			]
   106  		},
   107  		{
   108  			"destination": "/sys/fs/cgroup",
   109  			"type": "cgroup",
   110  			"source": "cgroup",
   111  			"options": [
   112  				"nosuid",
   113  				"noexec",
   114  				"nodev",
   115  				"relatime",
   116  				"ro"
   117  			]
   118  		}
   119  	],
   120  	"hooks": {},
   121  	"linux": {
   122  		"devices": [{
   123  			"path": "/dev/vfio/vfio",
   124  			"type": "c",
   125  			"major": @VFIO_CTL_MAJOR@,
   126  			"minor": @VFIO_CTL_MINOR@,
   127  			"fileMode": 438,
   128  			"uid": 0,
   129  			"gid": 0
   130  		},
   131  		{
   132  			"path": "@VFIO_PATH@",
   133  			"type": "c",
   134  			"major": @VFIO_MAJOR@,
   135  			"minor": @VFIO_MINOR@,
   136  			"fileMode": 384,
   137  			"uid": 0,
   138  			"gid": 0
   139  		}],
   140  		"cgroupsPath": "kata/vfiotest",
   141  		"resources": {
   142  			"devices": [
   143  				{"allow":false,"access":"rwm"},
   144  				{"allow":true,"type":"c","major":1,"minor":3,"access":"rwm"},
   145  				{"allow":true,"type":"c","major":1,"minor":5,"access":"rwm"},
   146  				{"allow":true,"type":"c","major":1,"minor":8,"access":"rwm"},
   147  				{"allow":true,"type":"c","major":1,"minor":9,"access":"rwm"},
   148  				{"allow":true,"type":"c","major":5,"minor":0,"access":"rwm"},
   149  				{"allow":true,"type":"c","major":5,"minor":1,"access":"rwm"},
   150  				{"allow": true,"access": "rwm","major": @VFIO_CTL_MAJOR@,"minor": @VFIO_CTL_MINOR@,"type": "c"},
   151  				{"allow": true,"access": "rwm","major": @VFIO_MAJOR@,"minor": @VFIO_MINOR@,"type": "c"}
   152  			]
   153  		},
   154  		"namespaces": [{
   155  				"type": "pid"
   156  			},
   157  			{
   158  				"type": "network"
   159  			},
   160  			{
   161  				"type": "ipc"
   162  			},
   163  			{
   164  				"type": "uts"
   165  			},
   166  			{
   167  				"type": "mount"
   168  			}
   169  		],
   170  		"maskedPaths": [
   171  			"/proc/kcore",
   172  			"/proc/latency_stats",
   173  			"/proc/timer_list",
   174  			"/proc/timer_stats",
   175  			"/proc/sched_debug",
   176  			"/sys/firmware"
   177  		],
   178  		"readonlyPaths": [
   179  			"/proc/asound",
   180  			"/proc/bus",
   181  			"/proc/fs",
   182  			"/proc/irq",
   183  			"/proc/sys",
   184  			"/proc/sysrq-trigger"
   185  		]
   186  	}
   187  }