New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
crosvm: init at 77.0.3865.105 #52352
Conversation
41362fd
to
bcc5154
Compare
bcc5154
to
c207fef
Compare
Builds and was able to start running my current kernel (needed to extract vmlinux, even though it says wants bzImage?) which didn't get too far since no devices or disk :D. |
R73: Although didn't test it beyond building and ensuring the Is this PR blocking on something? Any reservations about merging? |
I haven't actually tested it any further than you in December because I got distracted before I could build one with the paravirtualized disk drivers, but in theory (we all know how that goes!) it should work. |
Updated to version 75. It's now a bit more complex since it has a dependency on a library somewhere else in the Chromium repo and we don't want to check the whole thing out. |
Before this is merged, I would like for the branch this is based on to turn stable and I would like to figure out how Chromium OS release candidates (tracked here) are turned into actual Chromium OS releases so I can match them. |
ping (triage) |
f911b4c
to
b9b917f
Compare
This needs EDIT: Update script provided by @alyssais! :D |
cfb33af
to
4fa1995
Compare
@hyperfekt where did the platform list come from?
|
@alyssais: That was just a function of crosvm requiring KVM (that's the linux part) and it shipping with seccomp policies for these two architectures. |
4fa1995
to
a4e2b02
Compare
pkgs/applications/virtualization/crosvm/default-seccomp-policy-dir.patch
Show resolved
Hide resolved
a4e2b02
to
0b89bd3
Compare
Co-Authored-By: hyperfekt <git@hyperfekt.net>
0b89bd3
to
59a5ba4
Compare
@hyperfekt the current version is ready for merge, right? @alyssais is the CrosVM version you test in your SpectrumOS efforts the same as this PR? |
This is different to the crosvm expression in the Spectrum tree, because
that one has improvements that depend on #74862 and #74863, as well as
the shared updater for Chromium OS packages I haven't tried to upstream
yet.
This is fine to merge as is, I think. It's slightly out of date now,
but it updates all the time, so let's just merge it anyway. Otherwise
by the time we came round to it again after updating it would need to be
updated again anyway.
|
crosvm: init at 77.0.3865.105 (cherry picked from commit e726201)
Motivation for this change
crosvm is a virtual machine monitor for KVM, taking a role similar to qemu, but aiming to be much more secure by virtue of omitting the emulation of devices and using a memory-safe programming language as well as isolation of different components via seccomp. It is mostly used on Chromium OS, but not limited to it.
Things done
sandbox
innix.conf
on non-NixOS)nix-shell -p nox --run "nox-review wip"
./result/bin/
)nix path-info -S
before and after)