Evan Lezar 6af5520f37 fix(vm): confine OCI layer application to the rootfs (#3550) ...

* refactor(vm): isolate OCI layer application

Signed-off-by: Evan Lezar <elezar@nvidia.com>

* fix(vm): confine OCI layer application

Signed-off-by: Evan Lezar <elezar@nvidia.com>

* fix(vm): require trusted bootstrap image

Signed-off-by: Evan Lezar <elezar@nvidia.com>

* fix(vm): validate bootstrap image in gateway

Signed-off-by: Evan Lezar <elezar@nvidia.com>

* test(vm): configure bootstrap image in tracing test

Signed-off-by: Evan Lezar <elezar@nvidia.com>

---------

Signed-off-by: Evan Lezar <elezar@nvidia.com>

2026-09-24 17:22:46 +00:00

..

src

fix(vm): confine OCI layer application to the rootfs (#3550)

2026-09-24 17:22:46 +00:00

Cargo.toml

fix(drivers): require admission labels for external resources (#3538)

2026-09-22 21:22:30 +00:00