Merge branch 'main' into surbhi/device_lifecycle

Author: Sweetsurbhi88

.github/workflows/buf-ci.yaml

@@ -11,7 +11,7 @@ jobs:
   buf:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@71cf2267d89c5cb81562390fa70a37fa40b1305e # v4.2.0
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4.2.0
       - uses: bufbuild/buf-action@8f4a1456a0ab6a1eb80ba68e53832e6fcfacc16c # v1.3.0
         with:
           # Publishing schema changes to the BSR requires a BSR authentication token.

protect/control/v1/common.proto

@@ -90,6 +90,7 @@ enum ZoneVirtualizationBackend {
   ZONE_VIRTUALIZATION_BACKEND_UNKNOWN = 0;
   ZONE_VIRTUALIZATION_BACKEND_PV = 1;
   ZONE_VIRTUALIZATION_BACKEND_PVH = 2;
+  ZONE_VIRTUALIZATION_BACKEND_AUTOMATIC = 3;
 }
 
 message OciImageSpec {
@@ -308,6 +309,12 @@ message WorkloadSpec {
   repeated MountSpec mounts = 6;
   WorkloadSecuritySpec security = 7;
   repeated WorkloadScratchMount scratch_mount = 8;
+  repeated CgroupLimit cgroup_limits = 9;
+}
+
+message CgroupLimit {
+  string limit_name = 1;
+  string value = 2;
 }
 
 message WorkloadScratchMount {
@@ -322,6 +329,7 @@ message WorkloadSecuritySpec {
   bool privileged = 5;
   bool disable_all_namespaces = 6;
   repeated ProcessNamespace disable_namespaces = 7;
+  bool read_only_rootfs = 8;
 }
 
 enum WorkloadState {
@@ -355,15 +363,15 @@ message WorkloadBlockDeviceStatus {
 }
 
 message WorkloadMountInfo {
-  uint64 device_id = 1;
   string tag = 2;
-  string host_directory = 3;
-  string host_file = 4;
+  string host_path = 3;
   string target_path = 5;
+  reserved 1, 4;
 }
 
 message WorkloadMountStatus {
-  repeated WorkloadMountInfo devices = 1;
+  repeated WorkloadMountInfo mounts = 2;
+  reserved 1;
 }
 
 message WorkloadExitStatus {
@@ -488,6 +496,7 @@ message ZoneScratchDiskSpecStaticBlock {
 
 message ZoneDeviceStatus {
   repeated ZoneDiskStatus disks = 1;
+  ZoneMountStatus mount = 2;
 }
 
 enum ZoneDiskStatusDiskPurpose {
@@ -505,6 +514,12 @@ message ZoneDiskStatus {
   bool delete = 6;
 }
 
+message ZoneMountStatus {
+  uint64 device_id = 1;
+  string host_path = 2;
+  string tag = 3;
+}
+
 message OciRegistryUsernamePassword {
   // username to provide, empty means no username.
   string username = 1;

protect/control/v1/control.proto

@@ -67,6 +67,7 @@ message GetHostStatusReply {
   string host_ipv4 = 4;
   string host_ipv6 = 5;
   string host_mac = 6;
+  optional uint64 hyp_free_mem = 7;
 }
 
 message DeviceStateRequest {
@@ -557,6 +558,7 @@ message StartWorkloadReply {}
 
 message StopWorkloadRequest {
   string workload_id = 1;
+  uint64 timeout = 2;
 }
 
 message StopWorkloadReply {}