From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mga07.intel.com ([134.134.136.100]) by Galois.linutronix.de with esmtps (TLS1.2:DHE_RSA_AES_256_CBC_SHA256:256) (Exim 4.80) (envelope-from ) id 1fN0Me-0003Dc-BR for speck@linutronix.de; Sun, 27 May 2018 20:25:57 +0200 Date: Sun, 27 May 2018 11:25:50 -0700 From: Andi Kleen Subject: [MODERATED] Re: L1D-Fault KVM mitigation Message-ID: <20180527182550.GC4486@tassilo.jf.intel.com> References: <1524563292.8691.38.camel@infradead.org> <20180424110445.GU4043@hirez.programming.kicks-ass.net> <1527068745.8186.89.camel@infradead.org> <20180524094526.GE12198@hirez.programming.kicks-ass.net> <20180526204319.GB4486@tassilo.jf.intel.com> MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit To: speck@linutronix.de List-ID: On Sat, May 26, 2018 at 01:48:01PM -0700, speck for Linus Torvalds wrote: > > > On Sat, 26 May 2018, speck for Andi Kleen wrote: > > > > Keep in mind that we don't need to synchronize when the other CPU is idle > > in the guest, so it's only a problem when all the CPUs are busy. > > What? No. > > Maybe you mean "idle in the _host_"? It's both actually. Either idle in the host, or idle in the guest. When it's idle in the host we don't need to synchronize, unless there is an interrupt (which does its own synchronization) because the idle loop has nothing valuable to leak. And if it's idle in the guest then the vcpu is blocked and also obviously doesn't need to be synchronized. Both cases can be reasonably common. -Andi