Avoid a constantly rebooting domain when triple faults occur

Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com>

diff --git a/config/default-hvm.cfg.in b/config/default-hvm.cfg.in
index 4e5cf8dfe7a7cb07bdea8688b534aec71c3bfeae..38470b663a2da9efb049bf04953bf897d46bdb0c 100644 (file)
--- a/config/default-hvm.cfg.in
+++ b/config/default-hvm.cfg.in
@@ -3,6 +3,10 @@ builder="hvm"
 memory=128
 firmware_override="test-@@ENV@@-@@NAME@@"
 
+# The framework doesn't reboot.  A reboot signal is almost certainly a triple
+# fault instead.  Prevent it turning into a runaway domain.
+on_reboot = "destroy"
+
 # Work around a bug whereby both Xen and libxl fail to calculate the minimum
 # required shadow pool size for this VM, which causes a failure to construct
 # the domain on hardware lacking hap support.