Re: [PATCH v5.1 27/34] KVM: SVM: Add support for booting APs in an SEV-ES guest

2021-01-07 Thread Tom Lendacky
On 1/7/21 12:13 PM, Paolo Bonzini wrote: On 04/01/21 21:20, Tom Lendacky wrote: From: Tom Lendacky Typically under KVM, an AP is booted using the INIT-SIPI-SIPI sequence, where the guest vCPU register state is updated and then the vCPU is VMRUN to begin execution of the AP. For an SEV-ES guest

Re: [PATCH v5.1 27/34] KVM: SVM: Add support for booting APs in an SEV-ES guest

2021-01-07 Thread Paolo Bonzini
On 04/01/21 21:20, Tom Lendacky wrote: From: Tom Lendacky Typically under KVM, an AP is booted using the INIT-SIPI-SIPI sequence, where the guest vCPU register state is updated and then the vCPU is VMRUN to begin execution of the AP. For an SEV-ES guest, this won't work because the guest regist

[PATCH v5.1 27/34] KVM: SVM: Add support for booting APs in an SEV-ES guest

2021-01-04 Thread Tom Lendacky
From: Tom Lendacky Typically under KVM, an AP is booted using the INIT-SIPI-SIPI sequence, where the guest vCPU register state is updated and then the vCPU is VMRUN to begin execution of the AP. For an SEV-ES guest, this won't work because the guest register state is encrypted. Following the GHC