Hi Paolo, On Mon, Jun 08, 2026 at 06:47:54PM +0200, Paolo Bonzini wrote: > On 6/8/26 16:42, Jörg Rödel wrote: > > From: Joerg Roedel <[email protected]> > > > > The algorithm is to always run the lowest runnable plane. Plane > > switches are done by stopping the current plane and setting another > > runnable. > > > > Signed-off-by: Joerg Roedel <[email protected]> > > This was left arbitrary in my version because for example Hyper-V VTLs use > highest-runnable instead. It also made pure userspace scheduling possible, > though that may not be very important in the grand scheme of things.
IIRC what Hyper-V does is always the run the highest-privileged runnable level, no? Maybe in their numbering level 0 has the least privileges? Anyway, I am happy to make changes here, also based on input from the VSM side. > Did you drop it because it didn't work, or just for simplicity? The user-space scheduling worked, my 6.17 planes implementation used it. But there are some problems with it going forward, because TDX Partitioning (and likely ARM CCA Planes as well) do not allow arbitrary switches forced by the hypervisor. All they allow is a forced switch to the highest privileged plane, the SVSM on SNP will force the same constraints by making lower-privilege VMSAs not-runnable when it executes. So exposing an interface for user-space to chose which plane to run does seem to gain some weird, platform dependent semantics going forward. TDX and CCA also require in-kernel switching as they can switch planes without a VMEXIT, so I decided to have it from the start. -Joerg
