Repository navigation
Support multiple filesystem mappings with separate access modes #281
Description
Allow one NVX workload to access multiple host directories, with read-only or read-write access selected separately for each directory.
| Example | Expected behaviour |
|---|---|
C:\projects\app and C:\build-output are read-write |
The workload can read and modify both directories. |
C:\tools is read-only in the same workload |
The workload can read tools but cannot modify them. |
C:\projects\private is not granted |
It remains inaccessible; sharing app must not expose sibling directories. |
Keep denied-path restrictions enforced for every mapping. If a combination cannot be represented safely, reject it clearly rather than expanding access.
Verify simultaneous RO/RW mappings with real workload reads and writes.
MXC schema requirement: filesystem.readonlyPaths and filesystem.readwritePaths are lists of paths.
Related: #216 covers mounting host shares inside the sandbox. This request focuses on supporting multiple mappings and their individual access modes.
Activity
sandbox: attach multiple virtio-fs shares with independent modes
sandbox: attach multiple virtio-fs shares with independent modes
sandbox: attach multiple virtio-fs shares with independent modes
sandbox: attach multiple virtio-fs shares with independent modes
openvmm: pin aggregate virtio-fs shares on one microVM slot
aci_edge_sandboxes: map host paths from any directory, each with its …
run, sandbox: attach several shares as children of one virtio-fs device
test-microvm: share three directories through the aggregate virtio-fs…
microVM: share several host directories through one virtio-fs slot
microVM: snapshot an aggregate virtio-fs filesystem
virtiofs: hide a microVM share's root behind its allowed paths
microVM: allow spaces inside virtio-fs policy path names
openvmm: pin aggregate virtio-fs shares on one microVM slot
aci_edge_sandboxes: map host paths from any directory, each with its …
run, sandbox: attach several shares as children of one virtio-fs device
test-microvm: share three directories through the aggregate virtio-fs…