demo of ioctls
Go to file
Vincent Batts eab00d2e35 Makefile: cleanup from 2022-04-13 2023-02-17 11:02:10 -05:00
helloctl pass through an arg 2017-11-05 22:19:48 -05:00
.gitignore adding boiler-plate for a project 2017-11-05 09:15:13 -05:00
LICENSE adding boiler-plate for a project 2017-11-05 09:15:13 -05:00
Makefile Makefile: cleanup from 2022-04-13 2023-02-17 11:02:10 -05:00
README.md README 2017-11-05 20:52:48 -05:00
cap_check.stp trying to figure out the difference from default and privileged runtimes 2017-11-05 11:59:57 -05:00
config.json oci config: update version 2017-11-06 17:10:30 -05:00
mod_hello.c pass through an arg 2017-11-05 22:19:48 -05:00

README.md

mod_hello

building

make all

This produces ./helloctl/helloctl binary for talking to the mod_hello over ioctl through /dev/helloctl, as well as ./mod_hello.ko kernel module itself.

Testing

Host

$> make build
$> sudo insmod ./mod_hello.ko
$> sudo dmesg | tail
[ 1679.566426] [mod_hello] pid: 8418, comm: insmod
[ 1679.566427] [mod_hello] module loaded.
[ 1679.566428] [mod_hello] looking up 'files'
[ 1679.574011] [mod_hello] files 0xffffffff87e57e40
[ 1679.574013] [mod_hello] files (0xffffffff87e57e40): usage
[ 1679.579120] [mod_hello] fib of 0 and 1 (up to 10000000): 8644293272739028509 (in only 5 jiffies)
$> sudo ./helloctl/helloctl
$> sudo dmesg | tail -1
[ 1734.248270] [mod_hello] received command: 1

Container

Assuming we've already insmod the module above:

sudo docker run -it --rm -v $(pwd)/helloctl/helloctl:/usr/bin/helloctl:ro --device /dev/helloctl fedora /usr/bin/helloctl

Now dmesg | tail will reflect the command ran successfully, but at the sake of running an non-isolated container.

runc

Determining major/minor for setting permissions requires inserting the module, then collecting the major/minor device, and putting that to a runc config.json.

$> stat -c "%t %T" /dev/helloctl
a 39
$> echo "$((16#$(stat -c "%t" /dev/helloctl )))"
10
$> echo "$((16#$(stat -c "%T" /dev/helloctl )))"
57

Now in the config.json, under linux.resources.devices, that array, it needs the following with the major/minor integers from your /dev/helloctl:

        {
          "allow": true,
          "type": "c",
          "major": 10,
          "minor": 57,
          "access": "rwm"
        },

I've included a sample config.json for review.

cleanup

make clean
sudo rmmod mod_hello