Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Create sandbox for host file system access #783

Open
wants to merge 8 commits into
base: main
Choose a base branch
from

Commits on Nov 6, 2024

  1. feat(sandbox): Add UhyveFileMap structure and sandbox

    * Add --mount parameter for "whitelisting" guest_paths and defining
      their respective filesystem paths on the host FS
    * Add UhyveFileMap structure
    * Add sandbox support to open() syscall
    
    A few points that could be further worked are unit tests, handling
    more of the parsing using the clap library directly and performance
    optimizations.
    
    Helped-by: Çağatay Yiğit Şahin <[email protected]>
    Helped-by: Jonathan Klimt <[email protected]>
    n0toose committed Nov 6, 2024
    Configuration menu
    Copy the full SHA
    b03b71c View commit details
    Browse the repository at this point in the history
  2. docs(readme): remove host fs access warning

    Also removes the "Introduction" header, as the header takes more
    space than the text itself now.
    
    Originally introduced in e7869a9.
    n0toose committed Nov 6, 2024
    Configuration menu
    Copy the full SHA
    6917513 View commit details
    Browse the repository at this point in the history
  3. Configuration menu
    Copy the full SHA
    0b243c1 View commit details
    Browse the repository at this point in the history

Commits on Nov 8, 2024

  1. Configuration menu
    Copy the full SHA
    2246517 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    b327406 View commit details
    Browse the repository at this point in the history
  3. Configuration menu
    Copy the full SHA
    f50841f View commit details
    Browse the repository at this point in the history

Commits on Nov 12, 2024

  1. test(isolation): introduce UhyveFileMap integration tests

    Introduces a test for UhyveFileMap. Some refactoring was done so
    as to keep the two tests, fs-test and uhyvefilemap, in separate
    files. Some filesystem-related functions were moved into common.rs,
    because:
    - we anticipate that they will be necessary for further
      filesystem-related tests
    - putting two test functions in a single test (e.g. fs-test)
      causes the second test to hang for some mysterious reason
    - more descriptive errors
    n0toose committed Nov 12, 2024
    Configuration menu
    Copy the full SHA
    ca0e3c4 View commit details
    Browse the repository at this point in the history
  2. feat(isolation): rework file map cli structure

    - Rename --file_map to --mount
    - Temporarily remove short parameter
    - Temporarily remove environment variable
    - Don't split file_map params with commas
    - Change documentation, remove references to file_map variable
    n0toose committed Nov 12, 2024
    Configuration menu
    Copy the full SHA
    2f5355f View commit details
    Browse the repository at this point in the history