diff --git a/protect/control/v1/common.proto b/protect/control/v1/common.proto
index 873ebaa..6c7caf9 100644
--- a/protect/control/v1/common.proto
+++ b/protect/control/v1/common.proto
@@ -154,6 +154,17 @@ message DeviceReferenceSpec {
   string name = 1;
 }
 
+message WorkloadBlockDeviceSpec {
+  string target_path = 1;
+  string device_path = 2;
+  BlockDeviceMountOptions mount_options = 3;
+}
+
+message BlockDeviceMountOptions {
+  bool readonly = 1;
+  string permissions = 2;
+}
+
 message ZoneStatus {
   ZoneState state = 1;
   ZoneNetworkStatus network_status = 2;
@@ -311,6 +322,7 @@ message WorkloadSpec {
   repeated WorkloadScratchMount scratch_mount = 8;
   repeated CgroupLimit cgroup_limits = 9;
   string hostname = 10;
+  repeated WorkloadBlockDeviceSpec block_devices = 11;
 }
 
 message CgroupLimit {
@@ -357,7 +369,9 @@ message WorkloadStatus {
 message WorkloadBlockDeviceInfo {
   uint32 block_index = 1;
   uint64 device_id = 2;
-  string loop_device = 3;
+  reserved 3;
+  string device = 4;
+  bool loop_dev = 5;
 }
 
 message WorkloadBlockDeviceStatus {