Valentin Haudiquet 5c9b1b00c2 feat(vm): one-shot machines through libkrun ...

run() probes KVM, prepares the rootfs through the cache, generates the
guest init into the scratch, wires a libkrun context to it, and blocks
in krun_start_enter on this thread; the exit code comes back through
the control file, and a killed consumer kills the machine with the
process. Shares are validated and tagged in one place so the script and
the virtiofs setup stay ordered; anything overlapping the scratch
rootfs is refused, since the guest could otherwise rewrite its own
init. The guest environment is composed from scratch; the host
environment never crosses.

2026-10-27 22:36:31 +01:00

..

ecrou

feat(vm): one-shot machines through libkrun

2026-10-27 22:36:31 +01:00

ecrou-cli

feat: port the image machinery from ecr

2026-10-27 22:27:24 +01:00