net_sys: add crate for tap interface ioctl bindings

Signed-off-by: Stephen Barber <smbarber@chromium.org>

BUG=chromium:738639
TEST=cargo test

Change-Id: Ic289419de96a2ba0791e8ce8b96d79745886cbfd
Reviewed-on: https://chromium-review.googlesource.com/538102
Commit-Ready: Stephen Barber <smbarber@chromium.org>
Tested-by: Stephen Barber <smbarber@chromium.org>
Reviewed-by: Zach Reizner <zachr@chromium.org>
6 files changed
tree: c9a9f3cf5494ec2eb591041ea36c55b8a98529e2
  1. data_model/
  2. io_jail/
  3. kernel_loader/
  4. kvm/
  5. kvm_sys/
  6. net_sys/
  7. src/
  8. sys_util/
  9. syscall_defines/
  10. x86_64/
  11. .gitignore
  12. block_device.policy
  13. Cargo.toml
  14. LICENSE
  15. README.md
README.md

Chrome OS KVM

This component, known as crosvm, runs untrusted operating systems along with virtualized devices. No actual hardware is emulated. This only runs VMs through the Linux's KVM interface. What makes crosvm unique is a focus on safety within the programming language and a sandbox around the virtual devices to protect the kernel from attack in case of an exploit in the devices.

Overview

The crosvm source code is organized into crates, each with their own unit tests. These crates are:

  • kernel_loader Loads elf64 kernel files to a slice of memory.
  • kvm_sys low-level (mostly) auto-generated structures and constants for using KVM
  • kvm unsafe, low-level wrapper code for using kvm_sys
  • crosvm the top-level binary front-end for using crosvm
  • x86_64 Support code specific to 64 bit intel machines.

Usage

Currently there is no front-end, so the best you can do is run cargo test in each crate.