Remove coreutils: devtmpfs handles /dev nodes

.github/workflows/coverage.yaml

@@ -25,6 +25,7 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
         id: filter
+
         with:
           filters: |
             code:
@@ -62,7 +63,7 @@ jobs:
       # The #[cfg(coverage)] paths in require_root() panic if not run as root,
       # ensuring coverage accurately reflects execution with proper permissions.
       - name: Generate coverage
-        run: sudo -E env "PATH=$PATH" cargo llvm-cov --all-features --workspace --lcov --output-path lcov.info --ignore-filename-regex 'main\.rs'
+        run: sudo -E env "PATH=$PATH" cargo llvm-cov --all-features --workspace --lcov --output-path lcov.info -- --include-ignored
 
       - name: Upload coverage to Coveralls
         uses: coverallsapp/github-action@cfd0633edbd2411b532b808ba7a8b5e04f76d2c8 # v2.3.4

.github/workflows/static-checks.yaml

@@ -51,7 +51,7 @@ jobs:
         with:
           toolchain: stable
 
-      - run: sudo -E env "PATH=$PATH" cargo test --all-features
+      - run: sudo -E env "PATH=$PATH" cargo test --all-features -- --include-ignored
 
   # Check code formatting against Rust style guidelines
   formatting:

fuzz/Cargo.toml

@@ -20,11 +20,3 @@ path = "fuzz_targets/kernel_params.rs"
 test = false
 doc = false
 bench = false
-
-# Mount table parsing fuzz target
-[[bin]]
-name = "mount_parsing"
-path = "fuzz_targets/mount_parsing.rs"
-test = false
-doc = false
-bench = false

src/lib.rs

@@ -6,7 +6,6 @@
 #![allow(non_snake_case)]
 //! The main binary uses these modules internally.
 
-pub mod coreutils;
 pub mod daemon;
 pub mod execute;
 pub mod kata_agent;

src/lockdown.rs

@@ -71,6 +71,7 @@ mod tests {
     }
 
     #[test]
+    #[ignore] // Permanently disables module loading until reboot - run with --include-ignored on CI
     fn test_disable_modules_loading() {
         require_root();
 
@@ -91,6 +92,7 @@ mod tests {
     }
 
     #[test]
+    #[ignore] // Installs real power_off hook - run with --include-ignored on CI
     fn test_set_panic_hook() {
         // Installs the real hook (with power_off) - just don't trigger it!
         let _ = set_panic_hook();

src/main.rs

@@ -1,7 +1,6 @@
 // SPDX-License-Identifier: Apache-2.0
 // Copyright (c) NVIDIA CORPORATION
 
-mod coreutils;
 mod daemon;
 mod execute;
 mod kata_agent;