[PATCH] host/rootfs: fix vm-console

[Alyssa Ross <hi@alyssa.is>]

cloud-hypervisor was being run with its own /dev/pts, so vm-console
couldn't find the VM PTY to open it.  Furthermore, for Cloud
Hypervisor to actually use the global /dev/pts now that it runs as
non-root, it needs to be able to open /dev/pts/ptmx.  ptmxmode=666
matches how systemd mounts /dev/pts.

Fixes: 6138e44a ("host/rootfs: run Cloud Hypervisor as non-root")
Fixes: ec47d362 ("host/rootfs: Sandbox Cloud Hypervisor")
Signed-off-by: Alyssa Ross <hi@alyssa.is>
---
Posting to the list in particular to give a chance to anybody who
wants to tell me the sandboxing should be done a different way.

 host/rootfs/image/etc/fstab       | 2 +-
 host/rootfs/image/usr/bin/run-vmm | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/host/rootfs/image/etc/fstab b/host/rootfs/image/etc/fstab
index 18bb5e45..4d52a1da 100644
--- a/host/rootfs/image/etc/fstab
+++ b/host/rootfs/image/etc/fstab
@@ -1,7 +1,7 @@
 # SPDX-License-Identifier: CC0-1.0
 # SPDX-FileCopyrightText: 2020-2021, 2025 Alyssa Ross <hi@alyssa.is>
 proc	/proc		proc	nosuid,nodev,noexec				0	0
-devpts	/dev/pts	devpts	nosuid,noexec,gid=5,mode=620			0	0
+devpts	/dev/pts	devpts	nosuid,noexec,gid=5,mode=620,ptmxmode=666	0	0
 tmpfs	/dev/shm	tmpfs	nosuid,nodev					0	0
 tmpfs	/media		tmpfs	nosuid,nodev,noexec,nosymfollow,mode=755	0	0
 sysfs	/sys		sysfs	nosuid,nodev,noexec				0	0
diff --git a/host/rootfs/image/usr/bin/run-vmm b/host/rootfs/image/usr/bin/run-vmm
index 94199434..6967dc55 100755
--- a/host/rootfs/image/usr/bin/run-vmm
+++ b/host/rootfs/image/usr/bin/run-vmm
@@ -93,6 +93,7 @@ bwrap
   --unshare-user
   --dev /dev
   --dev-bind /dev/kvm /dev/kvm
+  --dev-bind /dev/pts /dev/pts
   --dev-bind /dev/vfio /dev/vfio
   --tmpfs /dev/shm
   --tmpfs /tmp

base-commit: 57bf21eaf65ca5a42d18999ba65f96dcd338113c
-- 
2.54.0