boxlite-ai · lilongen · Apr 3, 2026 · Apr 16, 2026 · Apr 16, 2026 · Apr 17, 2026
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/include/libkrun.h b/include/libkrun.h
@@ -462,6 +462,25 @@ int32_t krun_add_net_unixgram(uint32_t ctx_id,
                               uint32_t features,
                               uint32_t flags);
 
+/**
+ * Disables automatic TSI networking for this context.
+ *
+ * When no virtio-net devices are added, libkrun normally enables the TSI backend.
+ * Call this function to keep the guest fully offline instead: no virtio-net
+ * device will be attached and TSI will remain disabled.
+ *
+ * Arguments:
+ *  "ctx_id" - the configuration context ID.
+ *
+ * Notes:
+ * This function only affects the automatic fallback path used when no network
+ * devices are added. It should be called before krun_start_enter.
+ *
+ * Returns:
+ *  Zero on success or a negative error number on failure.
+ */
+int32_t krun_disable_tsi(uint32_t ctx_id);
+
 /**
  * Adds an independent virtio-net device with the tap backend.
  * Call to this function disables TSI backend.

diff --git a/src/devices/src/virtio/vsock/device.rs b/src/devices/src/virtio/vsock/device.rs
@@ -78,6 +78,10 @@ impl Vsock {
         self.cid
     }
 
+    pub fn enable_tsi(&self) -> bool {
+        self.muxer.enable_tsi()
+    }
+
     /// Walk the driver-provided RX queue buffers and attempt to fill them up with any data that we
     /// have pending. Return `true` if descriptors have been added to the used ring, and `false`
     /// otherwise.

diff --git a/src/devices/src/virtio/vsock/muxer.rs b/src/devices/src/virtio/vsock/muxer.rs
@@ -132,6 +132,10 @@ impl VsockMuxer {
         }
     }
 
+    pub fn enable_tsi(&self) -> bool {
+        self.tsi_flags.tsi_enabled()
+    }
+
     pub(crate) fn activate(
         &mut self,
         mem: GuestMemoryMmap,

diff --git a/src/libkrun/Cargo.toml b/src/libkrun/Cargo.toml
@@ -29,12 +29,15 @@ log = "0.4.0"
 once_cell = "1.4.1"
 krun_display = { package = "krun-display", version = "0.1.0", path = "../display", optional = true, features = ["bindgen_clang_runtime"] }
 krun_input = { package = "krun-input", version = "0.1.0", path = "../input", optional = true, features = ["bindgen_clang_runtime"] }
+rand = "0.9.2"
+
+vmm = { package = "krun-vmm", version = "=0.1.0-1.18.0", path = "../vmm" }
 
+# Unix-only internal crates (not used by Windows WHPX backend)
+[target.'cfg(unix)'.dependencies]
 devices = { package = "krun-devices", version = "=0.1.0-1.18.0", path = "../devices" }
 polly = { package = "krun-polly", version = "=0.1.0-1.18.0", path = "../polly" }
 utils = { package = "krun-utils", version = "=0.1.0-1.18.0", path = "../utils" }
-vmm = { package = "krun-vmm", version = "=0.1.0-1.18.0", path = "../vmm" }
-rand = "0.9.2"
 
 [target.'cfg(target_os = "macos")'.dependencies]
 hvf = { package = "krun-hvf", version = "=0.1.0-1.18.0", path = "../hvf" }
@@ -46,6 +49,11 @@ aws-nitro = { package = "krun-aws-nitro", version = "=0.1.0-1.18.0", path = "../
 nitro-enclaves = { version = "0.5.0", optional = true }
 vm-memory = { version = "0.17", features = ["backend-mmap"] }
 
+# Windows-only dependencies (WHPX C API)
+[target.'cfg(target_os = "windows")'.dependencies]
+env_logger = "0.11"
+libc = ">=0.2.39"
+
 [lib]
 name = "krun"
 crate-type = ["cdylib", "lib"]