Tag: #vfio
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 1 posts
SELinux, seccomp, Device Access: How KubeVirt Maintains Security Boundaries
Analyzes how KubeVirt combines SELinux, seccomp, cgroup device rules, and privileged helpers to simultaneously maintain VM execution and security boundaries, based on internal code.
2026-03-20 · 6 min read #architecture#kubevirt#security#selinux#seccomp