On Fri, Sep 23, 2022 at 10:29:41AM -0300, Jason Gunthorpe wrote: > On Fri, Sep 23, 2022 at 09:54:48AM +0100, Daniel P. Berrangé wrote: > > > Yes, we use cgroups extensively already. > > Ok, I will try to see about this > > Can you also tell me if the selinux/seccomp will prevent qemu from > opening more than one /dev/vfio/vfio ? I suppose the answer is no? I don't believe there's any restriction on the nubmer of open attempts, its just a case of allowed or denied globally for the VM. With regards, Daniel -- |: https://berrange.com -o- https://www.flickr.com/photos/dberrange :| |: https://libvirt.org -o- https://fstop138.berrange.com :| |: https://entangle-photo.org -o- https://www.instagram.com/dberrange :|
