From 86256eb8180bddfe015dee722b2152c95ba044f9 Mon Sep 17 00:00:00 2001
From: Hang Yin <h4x3rotab@gmail.com>
Date: Tue, 5 May 2026 18:02:14 -0700
Subject: [PATCH] vmm: disallow iso rootfs for modern images

---
 vmm/src/app/qemu.rs | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/vmm/src/app/qemu.rs b/vmm/src/app/qemu.rs
index c25c991b..5f9182e2 100644
--- a/vmm/src/app/qemu.rs
+++ b/vmm/src/app/qemu.rs
@@ -419,6 +419,7 @@ impl VmConfig {
             ]);
         }
         if let Some(rootfs) = &self.image.rootfs {
+            let img_ver = self.image.info.version_tuple().unwrap_or_default();
             let ext = rootfs
                 .extension()
                 .unwrap_or_default()
@@ -426,6 +427,11 @@ impl VmConfig {
                 .unwrap_or_default();
             match ext {
                 "iso" => {
+                    if img_ver >= (0, 5, 0) {
+                        bail!(
+                            "Unsupported rootfs type: {ext}. Image versions >= 0.5.0 must use verity rootfs"
+                        );
+                    }
                     command.arg("-cdrom").arg(rootfs);
                 }
                 "verity" => {