Page MenuHomeFreeBSD
Differential D54741

vmm: Enable unprivileged bhyve
ClosedPublic
Actions

Authored by markj on Jan 16 2026, 4:29 PM.
Tags
None
Referenced Files
Unknown Object (File)
Tue, Mar 17, 12:50 PM
Unknown Object (File)
Fri, Mar 13, 11:58 AM
Unknown Object (File)
Tue, Mar 10, 9:14 PM
Unknown Object (File)
Tue, Mar 10, 11:20 AM
Unknown Object (File)
Sun, Mar 8, 9:43 PM
Unknown Object (File)
Fri, Mar 6, 2:13 PM
Unknown Object (File)
Tue, Mar 3, 3:30 AM
Unknown Object (File)
Mon, Mar 2, 10:18 AM
View All 24 Files
Subscribers
dtxdf
imp

Details

Reviewers
bnovkov
Group Reviewers
bhyve
Commits
rGaf099eaa5ec3: vmm: Enable unprivileged bhyve
Summary
  • Add the vmm group.
  • Let /dev/vmmctl belong to the vmm group by default, and give group write permissions.
  • When creating a VM's device files, make them owned by the creating process' effective UID.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 70707
Build 67590: arc lint + arc unit

Event Timeline

markj created this revision.Jan 16 2026, 4:29 PM
Herald added a subscriber: imp. · View Herald TranscriptJan 16 2026, 4:29 PM
markj requested review of this revision.Jan 16 2026, 4:29 PM
markj added a parent revision: D54740: vmm: Add privilege checks to vmmctl operations.
markj added a child revision: D54742: vmm.4: Add information on VM access control.
Harbormaster completed remote builds in B69926: Diff 169857.Jan 16 2026, 4:29 PM
dtxdf added a subscriber: dtxdf.Jan 17 2026, 7:48 PM
bnovkov accepted this revision as: bnovkov.Jan 20 2026, 2:32 PM
This revision is now accepted and ready to land.Jan 20 2026, 2:32 PM
markj updated this revision to Diff 171995.Feb 16 2026, 3:45 PM

Rebase

This revision now requires review to proceed.Feb 16 2026, 3:45 PM
Harbormaster completed remote builds in B70707: Diff 171995.Feb 16 2026, 3:45 PM
bnovkov accepted this revision as: bnovkov.Feb 19 2026, 5:15 PM
This revision is now accepted and ready to land.Feb 19 2026, 5:15 PM
Closed by commit rGaf099eaa5ec3: vmm: Enable unprivileged bhyve (authored by markj). · Explain WhyFeb 19 2026, 5:16 PM
This revision was automatically updated to reflect the committed changes.
markj added a commit: rGaf099eaa5ec3: vmm: Enable unprivileged bhyve.

Revision Contents
Changeset List

PathSize
etc/
1 line
sys/
dev/
vmm/
10 lines
sys/
1 line

Diff 171995

View Options

etc/group

Loading...
View Options

sys/dev/vmm/vmm_dev.c

Loading...
View Options

sys/sys/conf.h

Loading...