search

bobuhiro11 / gokvm

KVM based tiny x86 hypervisor written in pure golang, which can boot Linux
https://blog.bobuhiro11.net/tags/gokvm.html
MIT License
206 stars 21 forks source link

flag: By default, no TAP interface is created. #127

Closed bobuhiro11 closed 1 year ago

bobuhiro11 commented 1 year ago

NOTE: This commit does not satisfy backward compatibility.

The creation of the tap interface is performed by ioctl TUNSETIFF. In order to do this, the strong capabilities CAP_NET_RAW and CAP_NET_ADMIN are required. I want gokvm to run with less privileges by default, so I disable it.