No description
Find a file
Jason D. Clinton 6f366b5460 vhost: Fix-up failing tests and add a little more coverage
This fakes out the underlying Net implementation with FakeNet to try
and get some of the code a little further along before it
explodes. Then, we test for known failures when running without a real
vhost file descriptors.

This allows us to pass without running as root as we would expect
running on Paladins.

This is also the final module that was failing at ToT.

Also adds vhost to the build_test test targets.

BUG=none
TEST=Run unit tests:
cargo test -p crosvm -p data_model -p syscall_defines -p kernel_loader -p net_util -p x86_64 -p virtio_sys -p kvm_sys -p vhost -p io_jail -p net_sys -p sys_util -p kvm
Also ran ./build_test

Change-Id: Ie12d05c044634a660a234483532cf783e2a7fe84
Reviewed-on: https://chromium-review.googlesource.com/656278
Commit-Ready: Jason Clinton <jclinton@chromium.org>
Tested-by: Jason Clinton <jclinton@chromium.org>
Reviewed-by: Jason Clinton <jclinton@chromium.org>
2017-09-09 13:48:49 -07:00
data_model data_model: add copy functions for copying slices in VolatileSlice's 2017-09-01 14:41:52 -07:00
io_jail io_jail: add ui_map/gid_map support to minijail 2017-09-07 21:21:24 -07:00
kernel_loader kernel_loader: Fix clippy warnings. 2017-06-30 22:24:49 -07:00
kvm fix armv7a and aarch64 build errors and warnings 2017-09-01 12:39:18 -07:00
kvm_sys fix compiler errors and warnings 2017-08-30 13:04:16 -07:00
net_sys net_sys: add crate for tap interface ioctl bindings 2017-07-13 22:03:30 -07:00
net_util net_util: Fix-up failing tests and add a little more coverage 2017-09-08 15:05:11 -07:00
seccomp/x86_64 crosvm: add virtio wayland device 2017-09-08 17:35:58 -07:00
src vhost: Fix-up failing tests and add a little more coverage 2017-09-09 13:48:49 -07:00
sys_util crosvm: add uid_map/gid_map support to jailed devices 2017-09-08 17:35:58 -07:00
syscall_defines fix armv7a and aarch64 build errors and warnings 2017-09-01 12:39:18 -07:00
vhost vhost: Fix-up failing tests and add a little more coverage 2017-09-09 13:48:49 -07:00
virtio_sys virtio_sys: add crate for virtio/vhost ioctl bindings 2017-07-13 22:03:31 -07:00
x86_64 Limit types that can be read from guest memory 2017-06-27 00:20:33 -07:00
.gitignore
build_test add build_test script to automate crosvm test running 2017-09-01 12:39:19 -07:00
build_test.py vhost: Fix-up failing tests and add a little more coverage 2017-09-09 13:48:49 -07:00
Cargo.toml crosvm: bump libc version to 0.2.29 2017-09-07 21:21:25 -07:00
LICENSE
README.md crosvm: Add crosvm main program 2017-07-05 21:54:52 -07:00

Chrome OS KVM

This component, known as crosvm, runs untrusted operating systems along with virtualized devices. No actual hardware is emulated. This only runs VMs through the Linux's KVM interface. What makes crosvm unique is a focus on safety within the programming language and a sandbox around the virtual devices to protect the kernel from attack in case of an exploit in the devices.

Overview

The crosvm source code is organized into crates, each with their own unit tests. These crates are:

  • kernel_loader Loads elf64 kernel files to a slice of memory.
  • kvm_sys low-level (mostly) auto-generated structures and constants for using KVM
  • kvm unsafe, low-level wrapper code for using kvm_sys
  • crosvm the top-level binary front-end for using crosvm
  • x86_64 Support code specific to 64 bit intel machines.

Usage

Currently there is no front-end, so the best you can do is run cargo test in each crate.