From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from atuin.qyliss.net (localhost [IPv6:::1]) by atuin.qyliss.net (Postfix) with ESMTP id 1FF121D5A; Sat, 11 Jul 2026 20:14:39 +0000 (UTC) Received: by atuin.qyliss.net (Postfix, from userid 993) id B6D0E1C70; Sat, 11 Jul 2026 20:14:33 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 4.0.1 (2024-03-26) on atuin.qyliss.net X-Spam-Level: X-Spam-Status: No, score=-0.1 required=3.0 tests=DKIM_SIGNED,DKIM_VALID, DKIM_VALID_AU,DMARC_PASS,FREEMAIL_FROM,RCVD_IN_DNSWL_NONE, SPF_HELO_NONE autolearn=unavailable autolearn_force=no version=4.0.1 Received: from mail-yx1-xb12e.google.com (mail-yx1-xb12e.google.com [IPv6:2607:f8b0:4864:20::b12e]) by atuin.qyliss.net (Postfix) with ESMTPS id 286861C58 for ; Sat, 11 Jul 2026 20:14:33 +0000 (UTC) Received: by mail-yx1-xb12e.google.com with SMTP id 956f58d0204a3-664e3ed58bcso4704247d50.1 for ; Sat, 11 Jul 2026 13:14:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1783800872; x=1784405672; darn=spectrum-os.org; h=cc:to:in-reply-to:references:message-id:content-transfer-encoding :content-type:mime-version:subject:date:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=HQSE0YWTAh8n/Fmcv/4H0CaLzLeaOugDXAWiJL2mlng=; b=tMyWNihe86yOJsgJKyTV+NiCYbfrEirvXskHcuKpzRhuihnqYBvkR35EbfTR+NzXtx pjiyb0AcvdIMBMVNRRAOo5OPydGZB/jws+grGFF5JiT4vLSd0Jf0bBjllUIXTgiatvsT VDv+C1pwML2PNxqKNMTdR9yluTs0aI7XDx+evaTCHGu1BPnZU/GhD8ygC4IH+47FEjKT 9BVr23sJqBJRBLLIDMjMqsryagqlVB0l7/IEBgYEBn4M9al/H0wtmVPwuzdQmuKbG+nx 5E4PiBheHOpD5vet8HagbD3ZWRDdkKKGLlRmUgnfKBVzOh9CwQ8wgdw451SmjPFpQlem Nj+g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1783800872; x=1784405672; h=cc:to:in-reply-to:references:message-id:content-transfer-encoding :content-type:mime-version:subject:date:from:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=HQSE0YWTAh8n/Fmcv/4H0CaLzLeaOugDXAWiJL2mlng=; b=Akj+sduZpUQuYz+XzX/TsGJn+rMn/ZqC0IOYos0BRh+2SEiEwO0oAs0haeLL3yTrD1 5WiAtCKafUlyfdraSpfUpIwqykMxzQuzWk+TXapwNnllpTrLWuIsJWEJeiPWzen7nEYn XwRqtKuKZ4I+CQFqfKmStCvcTzy07jSy4PVoez12iM0q3inGQXDKtgwCYDNOikOCahO8 9r7lsI+Ef7mQkvzaY2nqdW7OfT9w/rrpXKpdhksou5qYUL3FByClsPJRjGCo+qazQKYH KM65DFMrHV+PYywecwkMQcN0DyglsVQtBeTTJPkHc+VSoCN1Wdp+UDI7ifmt6FBoOzBT 5Sng== X-Gm-Message-State: AOJu0YwcCgB/drRXSBU3a7Cpie4tjuqO16aUP7S9L+4JY6LxlOa3H4yW eKmsAlMtw7rkgt/9gWpC3GZyAse4OnNWtwvL0BN/GhS9/HdnGGMd1Uc71I8jQg== X-Gm-Gg: AfdE7cmBgl+Xdl9P4UTVJht5SAptVSWhZsOTxdS3o4E7/UlqO8PXCFP2cnHO6Iwfja7 wck4+p+ZxE4QE9rTFEqgTZdOeGZwt96ZwLe2n/yggEqXgTxzuOn8usKUEQ0lUjVbhbWSrGT+gWm 2Nv+XB7JhsCYG7fU5YStzNukUdg7PpDjjuTZ53kZ54xMHjldchx+GcDFaqnO0nsQmQNSmBHhpb7 0MwCRSkJZfPmsegJf3R9/rN3AbtfnSjZ1jk+3OIQLOc5dzlvzjLitis/roiO40KnOp5C6al1zae BjmlGasvcS6YDOn7BqRAYWwWC6B4Cb2N/BFyxbkMNykS2sAwAKIWKy7iPdjI9ow2Dmz/NEnJPWo S4GJo1YShIT3kV+J0AIvDl60SHMU+Vrgmq6jdUhSNqvUxsJdaaZ/9Eli4sa4LamvIOeQyp9iPYk vj3G6mXw0RwvbReCXWQp1rO32LzV73GVlrYQFR X-Received: by 2002:a05:690e:4257:b0:664:a6bf:7d35 with SMTP id 956f58d0204a3-667c5bf772amr4116868d50.32.1783800871772; Sat, 11 Jul 2026 13:14:31 -0700 (PDT) Received: from localhost.localdomain ([185.98.168.14]) by smtp.gmail.com with UTF8SMTPSA id 956f58d0204a3-66787a49befsm9950847d50.16.2026.07.11.13.14.30 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sat, 11 Jul 2026 13:14:31 -0700 (PDT) From: Demi Marie Obenour Date: Sat, 11 Jul 2026 16:12:16 -0400 Subject: [PATCH v3 12/22] host/rootfs: run-vmm: Create per-VM cgroup MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Message-Id: <20260711-cgroups-v3-12-5cba61a20cba@gmail.com> References: <20260711-cgroups-v3-0-5cba61a20cba@gmail.com> In-Reply-To: <20260711-cgroups-v3-0-5cba61a20cba@gmail.com> To: Spectrum OS Development X-Mailer: b4 0.15.2 X-Developer-Signature: v=1; a=ed25519-sha256; t=1783800724; l=905; i=demiobenour@gmail.com; s=20250729; h=from:subject:message-id; bh=cpGmOcPsvYO0Cq3ZHJFGLC6DzFqVIT/tUzOwqIjabEE=; b=SU03m2LcuVcGyS/noVe55zekxbShwoWCGgcJD1ef5BuYxIS4ysdHLH4G1KreMp0pYVn2CYMRx uoDdARvG+3ZDsjQyPsBp31zsSIgEh67IDVlgfH7K4MutKQCeX0OfLui X-Developer-Key: i=demiobenour@gmail.com; a=ed25519; pk=X57Q4/YQDj9t4SBeKaDwvXYKB6quZJVx/DE2Ly2out0= Message-ID-Hash: TU25NX5EP3NLWVN2YYJH6DZQ5KWTRR42 X-Message-ID-Hash: TU25NX5EP3NLWVN2YYJH6DZQ5KWTRR42 X-MailFrom: demiobenour@gmail.com X-Mailman-Rule-Hits: member-moderation X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-devel.spectrum-os.org-0; header-match-devel.spectrum-os.org-1; header-match-devel.spectrum-os.org-2; header-match-devel.spectrum-os.org-3; header-match-devel.spectrum-os.org-4; emergency CC: Demi Marie Obenour , Alyssa Ross X-Mailman-Version: 3.3.10 Precedence: list List-Id: Patches and low-level development discussion Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: Signed-off-by: Demi Marie Obenour --- host/rootfs/image/usr/bin/run-vmm | 2 ++ 1 file changed, 2 insertions(+) diff --git a/host/rootfs/image/usr/bin/run-vmm b/host/rootfs/image/usr/bin/run-vmm index 6967dc5586335d999f8030371fe0f38502409919..607f798dbb5eee4b30bcf18f80d3cb5ef2857a98 100755 --- a/host/rootfs/image/usr/bin/run-vmm +++ b/host/rootfs/image/usr/bin/run-vmm @@ -5,6 +5,7 @@ if { backtick -D "" mnt { importas -Siu 1 + if { cgroup-setup --no-wait /vm-services.slice/vm-${1}.slice } nsenter --mount=/run/vm/by-id/${1}/ns/mnt findmnt -no FSTYPE,SOURCE /run/fs/${1}/disk } @@ -86,6 +87,7 @@ redirfd -r 0 /dev/null s6-softlimit -H -l 18446744073709551615 if { udevadm wait /dev/kvm } +cgroup-setup --leaf --no-wait /vm-services.slice/vm-${1}.slice/vmm s6-envuidgid vmm-${1} s6-applyuidgid -Uz bwrap -- 2.55.0