Skip to content

Conversation

@marquiz
Copy link
Contributor

@marquiz marquiz commented Aug 1, 2025

If intelRdt is specified in the spec, check that the resctrl fs is actually mounted. Fixes e.g. the case where "intelRdt.closID" is specified but runc silently ignores this if resctrl is not mounted.

If intelRdt is specified in the spec, check that the resctrl fs is
actually mounted. Fixes e.g. the case where "intelRdt.closID" is
specified but runc silently ignores this if resctrl is not mounted.

Signed-off-by: Markus Lehtonen <markus.lehtonen@intel.com>
@marquiz marquiz force-pushed the devel/rdt-validate branch from 444aee0 to e846add Compare August 1, 2025 07:04
@marquiz
Copy link
Contributor Author

marquiz commented Aug 1, 2025

PTAL @kolyshkin @AkihiroSuda

Note that there's still small window for TOCTOU race between the time of validate and time when intelRdtManager is initialized. I did the simplest thing but more correct would do feature checks in container Create() after the intelRdtManager has been initialized.

Copy link
Contributor

@kolyshkin kolyshkin left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Copy link
Member

@rata rata left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thanks!

@rata rata merged commit 9f84df7 into opencontainers:main Aug 5, 2025
31 checks passed
@marquiz marquiz deleted the devel/rdt-validate branch August 6, 2025 06:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants