Merge pull request #663 from Dstack-TEE/codex/propose-fix-for-rootfs-integrity-issue

vmm: disallow ISO rootfs for image versions >= 0.5.0

Author: h4x3rotab

vmm/src/app/qemu.rs

@@ -450,13 +450,19 @@ impl VmConfig {
             ]);
         }
         if let Some(rootfs) = &self.image.rootfs {
+            let img_ver = self.image.info.version_tuple().unwrap_or_default();
             let ext = rootfs
                 .extension()
                 .unwrap_or_default()
                 .to_str()
                 .unwrap_or_default();
             match ext {
                 "iso" => {
+                    if img_ver >= (0, 5, 0) {
+                        bail!(
+                            "Unsupported rootfs type: {ext}. Image versions >= 0.5.0 must use verity rootfs"
+                        );
+                    }
                     command.arg("-cdrom").arg(rootfs);
                 }
                 "verity" => {