Re: [Xen-devel] [PATCH] xsm: policy hooks to require an IOMMU and interrupt remapping

2017-08-23 Thread Jan Beulich
>>> On 23.08.17 at 17:56, wrote: > On 08/22/2017 04:18 AM, Jan Beulich wrote: > On 18.08.17 at 23:55, wrote: >>> On 08/18/2017 05:02 PM, christopher.w.cl...@gmail.com wrote: From: Christopher Clark

Re: [Xen-devel] [PATCH] xsm: policy hooks to require an IOMMU and interrupt remapping

2017-08-23 Thread Daniel De Graaf
On 08/22/2017 04:18 AM, Jan Beulich wrote: On 18.08.17 at 23:55, wrote: On 08/18/2017 05:02 PM, christopher.w.cl...@gmail.com wrote: From: Christopher Clark Isolation of devices passed through to domains usually requires an active

Re: [Xen-devel] [PATCH] xsm: policy hooks to require an IOMMU and interrupt remapping

2017-08-23 Thread Ross Philipson
I did test and review this submission back when I worked on the OpenXT project with Christopher so I can add a reviewed by. Reviewed-by: Ross Philipson On Tue, Aug 22, 2017 at 4:18 AM, Jan Beulich wrote: > >>> On 18.08.17 at 23:55,

Re: [Xen-devel] [PATCH] xsm: policy hooks to require an IOMMU and interrupt remapping

2017-08-22 Thread Jan Beulich
>>> On 18.08.17 at 23:55, wrote: > On 08/18/2017 05:02 PM, christopher.w.cl...@gmail.com wrote: >> From: Christopher Clark >> >> Isolation of devices passed through to domains usually requires an >> active IOMMU. The existing method of

Re: [Xen-devel] [PATCH] xsm: policy hooks to require an IOMMU and interrupt remapping

2017-08-18 Thread Daniel De Graaf
On 08/18/2017 05:02 PM, christopher.w.cl...@gmail.com wrote: From: Christopher Clark Isolation of devices passed through to domains usually requires an active IOMMU. The existing method of requiring an IOMMU is via a Xen boot parameter ("iommu=force") which

[Xen-devel] [PATCH] xsm: policy hooks to require an IOMMU and interrupt remapping

2017-08-18 Thread christopher . w . clark
From: Christopher Clark Isolation of devices passed through to domains usually requires an active IOMMU. The existing method of requiring an IOMMU is via a Xen boot parameter ("iommu=force") which will abort boot if an IOMMU is not available. More graceful