[Devel] [PATCH VZ10 1/1] fs: namespace: allow mounting blockdevices without extra options

Pavel Tikhomirov ptikhomirov at virtuozzo.com
Tue Jun 2 15:32:45 MSK 2026


Reviewed-by: Pavel Tikhomirov <ptikhomirov at virtuozzo.com>

On 5/28/26 16:27, Vasileios Almpanis wrote:
> ve_devmnt_process will iterate over all device-mounts of the current
> ve namespace and will bounce the mount in case opts is a non NULL
> pointer. Change the behavior to allow it.
> 
> Our goal is:
> - device cgroup ebpf filters will filter which devices are allowed to be
>   mounted, and which not.
> - ve.mount_opts will be used as a filter of which mount options are
>   allowed. It shouldn't deny mounting when no options are passed but it
>   should deny in case some option is passed that is not explicitly
>   allowed.
> 
> https://virtuozzo.atlassian.net/browse/VSTOR-132330
> Signed-off-by: Vasileios Almpanis <vasileios.almpanis at virtuozzo.com>
> 
> Feature: ve: ve generic structures
> ---
>  fs/namespace.c | 2 ++
>  1 file changed, 2 insertions(+)
> 
> diff --git a/fs/namespace.c b/fs/namespace.c
> index acd4507e1247..1b5460445616 100644
> --- a/fs/namespace.c
> +++ b/fs/namespace.c
> @@ -3196,6 +3196,8 @@ int ve_devmnt_process(struct ve_struct *ve, dev_t dev, void **data_pp, int remou
>  			 */
>  			if (ve->is_pseudosuper) {
>  				err = 0;
> +			} else if (((char *)*data_pp)[0] == '\0') {
> +				err = 0;
>  			} else {
>  				ve_pr_warn_ratelimited(VE_LOG_BOTH, "VE%s: no allowed "
>  					  "mount options found for device %u:%u\n",

-- 
Best regards, Pavel Tikhomirov
Senior Software Developer, Virtuozzo.



More information about the Devel mailing list