From 16b81308cfb7cf2265d69e7180cd024f7c5b89e4 Mon Sep 17 00:00:00 2001 From: Zach Koopmans Date: Fri, 22 Jan 2021 10:49:57 -0800 Subject: Add initial mitigate code and cpu parsing. PiperOrigin-RevId: 353274135 --- runsc/mitigate/mitigate.go | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) create mode 100644 runsc/mitigate/mitigate.go (limited to 'runsc/mitigate/mitigate.go') diff --git a/runsc/mitigate/mitigate.go b/runsc/mitigate/mitigate.go new file mode 100644 index 000000000..51d5449b6 --- /dev/null +++ b/runsc/mitigate/mitigate.go @@ -0,0 +1,20 @@ +// Copyright 2021 The gVisor Authors. +// +// Licensed under the Apache License, Version 2.0 (the "License"); +// you may not use this file except in compliance with the License. +// You may obtain a copy of the License at +// +// http://www.apache.org/licenses/LICENSE-2.0 +// +// Unless required by applicable law or agreed to in writing, software +// distributed under the License is distributed on an "AS IS" BASIS, +// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +// See the License for the specific language governing permissions and +// limitations under the License. + +// Package mitigate provides libraries for the mitigate command. The +// mitigate command mitigates side channel attacks such as MDS. Mitigate +// shuts down CPUs via /sys/devices/system/cpu/cpu{N}/online. In addition, +// the mitigate also handles computing available CPU in kubernetes kube_config +// files. +package mitigate -- cgit v1.2.3