[pve-devel] [PATCH container v2 4/4] implement device hotplug

[Filip Schauer]

On 30/05/2025 16:18, Michael Köppl wrote:
>> +	my $id_map = (PVE::LXC::parse_id_maps($conf))[0];
>> +	my $passthrough_device_path = create_passthrough_device_node(
>> +	    "/var/lib/lxc/$vmid/passthrough", $dev, $mode, $rdev, $id_map);
> I understand that this path is guaranteed to exist because it is created
> as part of the prestart hook, but maybe this could also be moved to a
> helper function and called before calling create_passthrough_device_node
> as well, just to be sure. Just a suggestion.

I don't think we should do that. The prestart hook doesn't just create
the directory, it also mounts a tmpfs onto it. We wouldn't want to mount
a new tmpfs on top every time a device is hotplugged.

>> +
>> +	my $srcfh = PVE::Tools::open_tree(&AT_FDCWD, $passthrough_device_path, &OPEN_TREE_CLOEXEC | &OPEN_TREE_CLONE)
>> +	    or die "open_tree() on passthrough device node failed: $!\n";
>> +
>> +	if ($conf->{unprivileged}) {
>> +	    PVE::Tools::setns(fileno($ct_user_ns), PVE::Tools::CLONE_NEWUSER)
>> +		or die "failed to enter user namespace of container $vmid: $!\n";
>> +
>> +	    POSIX::setuid(0);
>> +	    POSIX::setgid(0);
>> +	}
>> +
>> +	# Create a regular file in the container to bind mount the device node onto.
>> +	sysopen(my $dstfh, "/proc/$ct_pid/root$dev->{path}", O_CREAT)
>> +	    or die "failed to open '/proc/$ct_pid/root$dev->{path}': $!\n";
> While this does create the file, it does not create the directory.
> CallingFile::Path::make_path(dirname("/proc/$ct_pid/root$dev->{path}"))
> directly before the sysopen call makes this behave as I would expect it
> to and then the hotplug works.

You're right, I forgot to create the path if it doesn't exist. I only
tested this with device nodes directly under /dev.