Re: Please review the key 4.4 release docs

[George Dunlap <george.dunlap@eu.citrix.com>]

On 03/11/2014 01:23 AM, Zhang, Yang Z wrote:
> George Dunlap wrote on 2014-03-10:
>> On 03/10/2014 04:27 AM, Zhang, Yang Z wrote:
>>> Russell Pavlicek wrote on 2014-03-10:
>>>> I have done my best to compile the various key release documents
>>>> for the 4.4 release.
>>>>
>>>> All have hyperlinks from the download page:
>>>> http://www.xenproject.org/downloads/xen-archives/supported-xen-44-s
>>>> er
>>>> i
>>>> es/ xen-440.html
>>> I thought that we have agreed that we will move the nested
>>> virtualization
>> from experimental to 1.0 or something else in Xen 4.4 release note.
>> But it seems it still in experimental state and there is no mention of
>> it in the release note.
>>
>> Well we discussed it, but there were too many things still missing to
>> call it a properly supported feature: in particular, doubts about how
>> well shadow-on-hap would work, which would be a potential security
> Actually, I'd like to know all potential nested issues and I will try to solve it if possible. But the problem is that I am not clear about those issues that you guys mentioned. Is there any thread talk about them?

I think I was thinking along the lines of what I wrote in this thread:

Msg-ID <52E28EFB.3020008@eu.citrix.com>

It seems there the minimum thing for a "1.0" release is that an L1 admin 
must not be able to do anything to affect an L0; and thinks at the 
moment likely to do so are enabling PoD (and probably also paging) for 
L2 guests.  It's OK if enabling PoD crashes the *L1* hypervisor (because 
that's under the L1 admin's control); but it must not be allowed to 
crash / DoS the L0 hypervisor.

  -George



>
>> issue.  (On my to-do list is to collect these somewhere so we have a
>> clear set of criteria for moving nested HVM from "tech preview" to
>> "supported".)
> Yes, it makes sense.
>
>> It would be good to put something in the release note, however, to say
>> how much it has progressed.  I'll see what I can do.
> Yes, nested was moving forward in last year. It's better to tell this to people since lots of people unaware of this feature.
>
>>    -George
>
> Best regards,
> Yang
>
>