vmm: migration seccomp: add for migration worker (coordinator thread)

On-behalf-of: SAP philipp.schuster@sap.com
Signed-off-by: Philipp Schuster <philipp.schuster@cyberus-technology.de>
This commit is contained in:
Philipp Schuster
2026-06-24 21:37:44 +02:00
committed by Bo Chen
parent b5c028c286
commit fd88e23ecb
3 changed files with 103 additions and 14 deletions

View File

@@ -3152,6 +3152,13 @@ impl RequestHandler for Vmm {
// - this simplifies the code (especially error propagation)
// - the overhead is negligible
let seccomp_filters = {
let worker = get_seccomp_filter(&self.seccomp_action, Thread::MigrationWorker, None)
.map_err(|e| {
MigratableError::MigrateSend(anyhow!(
"Error creating migration seccomp filter: {e}"
))
})?;
let postcopy_server =
get_seccomp_filter(&self.seccomp_action, Thread::MigrateSendPostcopy, None)
.map_err(|e| {
@@ -3160,7 +3167,10 @@ impl RequestHandler for Vmm {
))
})?;
MigrationSeccompFilters { postcopy_server }
MigrationSeccompFilters {
worker,
postcopy_server,
}
};
// Take VM ownership. This also means that API events can no longer