netbird/gvisor
0
0
Fork 0
mirror of https://github.com/netbirdio/gvisor.git synced 2026-05-22 17:12:49 -07:00
Code Issues Packages Projects Releases Wiki Activity

Internal change

Browse Source 
PiperOrigin-RevId: 669428490
This commit is contained in:
Andrei Vagin
2024-08-30 13:37:04 -07:00
committed by gVisor bot
parent 68f0b41bf9
commit fa49677e14
1 changed files with 11 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pkg/sentry/platform/kvm/machine.go
+11 -1
View File
@@ -262,6 +262,15 @@ func (m *machine) createVCPU(id int) *vCPU {
return c // Done.
}
// AllowMappingEntireAddressSpace enables mapping the entire process address
// space to the VM.
//
// On x86_64, kernels before 6.9 with enabled
// CONFIG_KVM_EXTERNAL_WRITE_TRACKING didn't allow us to map the entire
// process address space to the VM, because the memory tracking was always
// enabled and it has a significant memory overhead.
var AllowMappingEntireAddressSpace bool
// newMachine returns a new VM context.
func newMachine(vm int) (*machine, error) {
// Create the machine.
@@ -305,7 +314,8 @@ func newMachine(vm int) (*machine, error) {
if err != nil {
return nil, err
}
mapEntireAddressSpace := runtime.GOARCH != "amd64" || kernelVersion.AtLeast(6, 9)
mapEntireAddressSpace := AllowMappingEntireAddressSpace ||
runtime.GOARCH != "amd64" || kernelVersion.AtLeast(6, 9)
if mapEntireAddressSpace {
// Increase faultBlockSize to be sure that we will not reach the limit.
// faultBlockSize has to equal or less than KVM_MEM_MAX_NR_PAGES.