Valentin Haudiquet 5c9b1b00c2 feat(vm): one-shot machines through libkrun
run() probes KVM, prepares the rootfs through the cache, generates the
guest init into the scratch, wires a libkrun context to it, and blocks
in krun_start_enter on this thread; the exit code comes back through
the control file, and a killed consumer kills the machine with the
process. Shares are validated and tagged in one place so the script and
the virtiofs setup stay ordered; anything overlapping the scratch
rootfs is refused, since the guest could otherwise rewrite its own
init. The guest environment is composed from scratch; the host
environment never crosses.
2026-10-27 22:36:31 +01:00
2026-10-27 21:41:30 +01:00
Languages
Rust 99.4%
Ruby 0.6%