CVSROOT:        /cvs
Module name:    src
Changes by:     mlar...@cvs.openbsd.org 2025/09/14 09:52:28

Modified files:
        sys/arch/amd64/amd64: identcpu.c vmm_machdep.c 
        sys/arch/amd64/include: vmmvar.h 
        sys/dev/vmm    : vmm.c 

Log message:
require unrestricted guest support for VMX hosts using vmm(4)

Support for CPUs that don't allow unrestricted guest support is getting
in the way of making progress elsewhere. This diff requires support for
unrestricted guest capability in the host CPU.

Practically speaking, this means original first-generation Nehalem
microarchitecture machines won't be supported anymore. Even before this
change, those CPUs were very limited in what guest VMs they could run
with vmm(4) anyway - they could only use the -b option to directly boot
an OpenBSD kernel, not being able to support a BIOS. This diff adds
code to check for the required capabilities, and not attach vmm(4)
if we don't detected a supported configuration.

FWIW, the CPUs affected by this change are now close to 15 years old.

ok dv
discussed with deraadt

Reply via email to