Re: [PATCH v1 00/13] KVM: arm64: Fixed features for protected VMs

2021-06-13 Thread Fuad Tabba
Hi Alex, On Fri, Jun 11, 2021 at 1:43 PM Alexandru Elisei wrote: > > Hi, > > On 6/8/21 3:11 PM, Fuad Tabba wrote: > > Hi, > > > > This patch series adds support for restricting CPU features for protected > > VMs > > in KVM [1]. > > > > Various feature configurations are allowed in KVM/arm64.

Re: [PATCH v1 00/13] KVM: arm64: Fixed features for protected VMs

2021-06-11 Thread Alexandru Elisei
Hi, On 6/8/21 3:11 PM, Fuad Tabba wrote: > Hi, > > This patch series adds support for restricting CPU features for protected VMs > in KVM [1]. > > Various feature configurations are allowed in KVM/arm64. Supporting all > these features in pKVM is difficult, as it either involves moving much of >

Re: [PATCH v1 00/13] KVM: arm64: Fixed features for protected VMs

2021-06-09 Thread Fuad Tabba
Hi Drew, > I see this series takes the approach we currently have in KVM of masking > features we don't want to expose to the guest. This approach adds yet > another "reject list" to be maintained as hardware evolves. I'd rather see > that we first change KVM to using an accept list, i.e. mask

[PATCH v1 00/13] KVM: arm64: Fixed features for protected VMs

2021-06-08 Thread Fuad Tabba
Hi, This patch series adds support for restricting CPU features for protected VMs in KVM [1]. Various feature configurations are allowed in KVM/arm64. Supporting all these features in pKVM is difficult, as it either involves moving much of the handling code to EL2, which adds bloat and results

Re: [PATCH v1 00/13] KVM: arm64: Fixed features for protected VMs

2021-06-08 Thread Andrew Jones
On Tue, Jun 08, 2021 at 03:11:28PM +0100, Fuad Tabba wrote: > Hi, > > This patch series adds support for restricting CPU features for protected VMs > in KVM [1]. > > Various feature configurations are allowed in KVM/arm64. Supporting all > these features in pKVM is difficult, as it either