Hadron / Hadron/carthage

Carthage Libvirt Container

Open
#138 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
11
Forks
8
Avg merge
9h 26m
Merged PRs (30d)
6

Description

Add support for a privileged rootless container that is sufficient to run libvirt and carthage.

we discovered several things that we need to do to make a container suitable for WHS-mitigation. Put together a suitable libvirtd base container that

has setgroups LD_PRELOAD

properly configures qemu.conf (user=root, group=root, remember_owner = 0
dynamic_ownership = 0

Documents what volumes are needed

Documents how to gain access to /dev/kvm --group-add=keep

Contributor guide

No contributing guide indexed for this repository

Research direction

No files or tests are named; first locate the existing container definitions and any libvirt setup, then review how privileged rootless execution is configured. Done means a libvirtd base container supports Carthage and WHS mitigation, includes the requested qemu.conf and setgroups settings, and documents required volumes plus /dev/kvm access with --group-add=keep.

Written by the indexing model from the issue text.

Assessment

Domain
infrastructure
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.