From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from lists1p.gnu.org (lists1p.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 58D93C531FA for ; Sat, 25 Jul 2026 00:17:04 +0000 (UTC) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists1p.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1wnQ3u-0006JT-0O; Fri, 24 Jul 2026 20:16:18 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists1p.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1wnQ3f-0006Gd-VF for qemu-devel@nongnu.org; Fri, 24 Jul 2026 20:16:07 -0400 Received: from mail-yw1-x1131.google.com ([2607:f8b0:4864:20::1131]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1wnQ3e-0005ZL-CA for qemu-devel@nongnu.org; Fri, 24 Jul 2026 20:16:03 -0400 Received: by mail-yw1-x1131.google.com with SMTP id 00721157ae682-80e2cfe6918so7459187b3.0 for ; Fri, 24 Jul 2026 17:16:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1784938560; x=1785543360; darn=nongnu.org; h=content-type:autocrypt:in-reply-to:content-language:references:cc :to:subject:from:user-agent:mime-version:date:message-id:from:to:cc :subject:date:message-id:reply-to:content-type; bh=HnkydtulEAp9ia4aZg6S81fqx+Zi4SJgLq6KxpbKfLo=; b=CPT/LmbkhV1w5c6MT/4esjWR4cYUwH+33Polof2z7n8XwyLDChsOrypQKhBTTl6mQq c76Sk6izGk+qXnJO+BV8HUZCb+a78oeXvjPpVfO2M1IzJGLtdAFjOr8wHQkazpmbwwv7 NeKJgPwseoAdvZKMeEVSfsvhVC/rLZcFOq9KpFu8VMQUmGZqnvMV7dSSk6CiI3Fi+g4j M+F2hgJNPlm8Z5BDQJdJENPfDOtympMJYtmUAGV8VBywcBPwvVk7h/YEFhlmc2YQjCuB t5CdgyxkUbkhm2u2sBuS38LUTM3omZ0ZoGkhgbU7+9vdSWj4CHkpByimMPWcbrb43y3Q CBHA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1784938560; x=1785543360; h=content-type:autocrypt:in-reply-to:content-language:references:cc :to:subject:from:user-agent:mime-version:date:message-id:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=HnkydtulEAp9ia4aZg6S81fqx+Zi4SJgLq6KxpbKfLo=; b=N1nr1wX1Vw1iHA6yG7PULyzaOy3KzwX8Ja3QLQ/2+28BkRX9dY4TX5wiKzOv8twFpm WqBdMmNUXv1aql0KJIIhfvua9p4jww9D+/f7KCVZfN942K9BbKkjfYrTXPgPilJ3JuJE uGmgH96XjSU4TiXUorelBpka65LnImGJULB3pNvtJ3Weyt9+WYcqCE2X0rTMNl7cCC6i u8QVcMQ3q93IYxEAY3kBeW48dv/0WZSai47uzCuA3MVx5T4+ZnKLEaVkTLeOS/ZvEhLl Wn2XVE+8QSco3o2MFOos6u12IfyqxX3U5SsjoCam3S2zV86/HYd7gZX6JVBdSgV8bvZK Im8w== X-Forwarded-Encrypted: i=1; AHgh+Rqx4PCL83uj5sj8LmGizr3aADTzF8WwFpCobSEft+Nm+VgIw2KoEt0RYfz7Ul1MwMKTKUVBEBG+DTWE@nongnu.org X-Gm-Message-State: AOJu0YyRYi+TNWBaGD3dAyrPuJC2FMIjlL4qFoGbumkPPDYRVwML5kfi fgBiAreBa/XyNEtFRX8XCcpclFmLjUpZJrB3EOjkcXP6byOUu2v0xsLW X-Gm-Gg: AR+sD13FSLfjiy8kxaT0Pp7B/XrPR+r1fvChDKEoUO4Z+xDdxFpp/zik1TIVz5lJJsD 5+daTM24ooLhE3R2C1Vkaj9ixcdSpURbOHIEteb/mVoM2jrJ4y5SkYTMMGWlIgGpWbXeBJGZpnL EAIpdB057JT2NK5trMmkshBsZvhZBf4fy2UbXV3kdxlmVfv4t/tQlCOmU9emASvkDnlAydw8sPr g4J5hceUIOeJvIy0dIqrESJxi78mXe/C2e0tE2rdJwaE/chr2bAa2GKVWUrrfwZUKrQgZN3R6Lx EfecWAxbxPxBKChhsJA3NSOiX9gcuk9NmUb8tj5+xlNi5adpjWfrsubSKHASMuHgrDzR0aUFzuE sofifyvJruBDgJogd/EQveNdzSraaUxjYCG5m/v7SVgqOaQLrK6UUN9ErHegECAMq8V6CLf2/IS sNdAoH X-Received: by 2002:a05:690c:6a86:b0:81e:7b95:c777 with SMTP id 00721157ae682-81f69dea973mr2491717b3.35.1784938560525; Fri, 24 Jul 2026 17:16:00 -0700 (PDT) Received: from [10.138.10.6] ([185.98.168.14]) by smtp.gmail.com with ESMTPSA id 00721157ae682-81f657a2d56sm6978687b3.14.2026.07.24.17.15.55 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Fri, 24 Jul 2026 17:15:58 -0700 (PDT) Message-ID: Date: Fri, 24 Jul 2026 20:15:51 -0400 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird From: Demi Marie Obenour Subject: Re: [PATCH RFC 00/15] vhost-user: isolated memory To: ConKite , qemu-devel@nongnu.org Cc: "Michael S. Tsirkin" , Stefano Garzarella , =?UTF-8?Q?Alex_Benn=C3=A9e?= , Viresh Kumar , Gerd Hoffmann , Mathieu Poirier , Manos Pitsidianakis , Haixu Cui , Raphael Norwitz , Kevin Wolf , Hanna Reitz , =?UTF-8?Q?Marc-Andr=C3=A9_Lureau?= , Paolo Bonzini , Fam Zheng , Stefan Hajnoczi , Milan Zamazal , Akihiko Odaki , Dmitry Osipenko , qemu-block@nongnu.org, virtio-fs@lists.linux.dev, "Gonglei (Arei)" , zhenwei pi , =?UTF-8?Q?Daniel_P=2E_Berrang=C3=A9?= , Eric Blake , Markus Armbruster , Jason Wang , Peter Xu , =?UTF-8?Q?Eugenio_P=C3=A9rez?= , Alyssa Ross References: <20260723-vhost-user-isolated-memory-v1-0-6b97c439eb28@gmail.com> Content-Language: en-US In-Reply-To: <20260723-vhost-user-isolated-memory-v1-0-6b97c439eb28@gmail.com> Autocrypt: addr=demiobenour@gmail.com; keydata= xsFNBFp+A0oBEADffj6anl9/BHhUSxGTICeVl2tob7hPDdhHNgPR4C8xlYt5q49yB+l2nipd aq+4Gk6FZfqC825TKl7eRpUjMriwle4r3R0ydSIGcy4M6eb0IcxmuPYfbWpr/si88QKgyGSV Z7GeNW1UnzTdhYHuFlk8dBSmB1fzhEYEk0RcJqg4AKoq6/3/UorR+FaSuVwT7rqzGrTlscnT DlPWgRzrQ3jssesI7sZLm82E3pJSgaUoCdCOlL7MMPCJwI8JpPlBedRpe9tfVyfu3euTPLPx wcV3L/cfWPGSL4PofBtB8NUU6QwYiQ9Hzx4xOyn67zW73/G0Q2vPPRst8LBDqlxLjbtx/WLR 6h3nBc3eyuZ+q62HS1pJ5EvUT1vjyJ1ySrqtUXWQ4XlZyoEFUfpJxJoN0A9HCxmHGVckzTRl 5FMWo8TCniHynNXsBtDQbabt7aNEOaAJdE7to0AH3T/Bvwzcp0ZJtBk0EM6YeMLtotUut7h2 Bkg1b//r6bTBswMBXVJ5H44Qf0+eKeUg7whSC9qpYOzzrm7+0r9F5u3qF8ZTx55TJc2g656C 9a1P1MYVysLvkLvS4H+crmxA/i08Tc1h+x9RRvqba4lSzZ6/Tmt60DPM5Sc4R0nSm9BBff0N m0bSNRS8InXdO1Aq3362QKX2NOwcL5YaStwODNyZUqF7izjK4QARAQABzTxEZW1pIE1hcmll IE9iZW5vdXIgKGxvdmVyIG9mIGNvZGluZykgPGRlbWlvYmVub3VyQGdtYWlsLmNvbT7CwXgE EwECACIFAlp+A0oCGwMGCwkIBwMCBhUIAgkKCwQWAgMBAh4BAheAAAoJELKItV//nCLBhr8Q AK/xrb4wyi71xII2hkFBpT59ObLN+32FQT7R3lbZRjVFjc6yMUjOb1H/hJVxx+yo5gsSj5LS 9AwggioUSrcUKldfA/PKKai2mzTlUDxTcF3vKx6iMXKA6AqwAw4B57ZEJoMM6egm57TV19kz PMc879NV2nc6+elaKl+/kbVeD3qvBuEwsTe2Do3HAAdrfUG/j9erwIk6gha/Hp9yZlCnPTX+ VK+xifQqt8RtMqS5R/S8z0msJMI/ajNU03kFjOpqrYziv6OZLJ5cuKb3bZU5aoaRQRDzkFIR 6aqtFLTohTo20QywXwRa39uFaOT/0YMpNyel0kdOszFOykTEGI2u+kja35g9TkH90kkBTG+a EWttIht0Hy6YFmwjcAxisSakBuHnHuMSOiyRQLu43ej2+mDWgItLZ48Mu0C3IG1seeQDjEYP tqvyZ6bGkf2Vj+L6wLoLLIhRZxQOedqArIk/Sb2SzQYuxN44IDRt+3ZcDqsPppoKcxSyd1Ny 2tpvjYJXlfKmOYLhTWs8nwlAlSHX/c/jz/ywwf7eSvGknToo1Y0VpRtoxMaKW1nvH0OeCSVJ itfRP7YbiRVc2aNqWPCSgtqHAuVraBRbAFLKh9d2rKFB3BmynTUpc1BQLJP8+D5oNyb8Ts4x Xd3iV/uD8JLGJfYZIR7oGWFLP4uZ3tkneDfYzsFNBFp+A0oBEAC9ynZI9LU+uJkMeEJeJyQ/ 8VFkCJQPQZEsIGzOTlPnwvVna0AS86n2Z+rK7R/usYs5iJCZ55/JISWd8xD57ue0eB47bcJv VqGlObI2DEG8TwaW0O0duRhDgzMEL4t1KdRAepIESBEA/iPpI4gfUbVEIEQuqdqQyO4GAe+M kD0Hy5JH/0qgFmbaSegNTdQg5iqYjRZ3ttiswalql1/iSyv1WYeC1OAs+2BLOAT2NEggSiVO txEfgewsQtCWi8H1SoirakIfo45Hz0tk/Ad9ZWh2PvOGt97Ka85o4TLJxgJJqGEnqcFUZnJJ riwoaRIS8N2C8/nEM53jb1sH0gYddMU3QxY7dYNLIUrRKQeNkF30dK7V6JRH7pleRlf+wQcN fRAIUrNlatj9TxwivQrKnC9aIFFHEy/0mAgtrQShcMRmMgVlRoOA5B8RTulRLCmkafvwuhs6 dCxN0GNAORIVVFxjx9Vn7OqYPgwiofZ6SbEl0hgPyWBQvE85klFLZLoj7p+joDY1XNQztmfA rnJ9x+YV4igjWImINAZSlmEcYtd+xy3Li/8oeYDAqrsnrOjb+WvGhCykJk4urBog2LNtcyCj kTs7F+WeXGUo0NDhbd3Z6AyFfqeF7uJ3D5hlpX2nI9no/ugPrrTVoVZAgrrnNz0iZG2DVx46 x913pVKHl5mlYQARAQABwsFfBBgBAgAJBQJafgNKAhsMAAoJELKItV//nCLBwNIP/AiIHE8b oIqReFQyaMzxq6lE4YZCZNj65B/nkDOvodSiwfwjjVVE2V3iEzxMHbgyTCGA67+Bo/d5aQGj gn0TPtsGzelyQHipaUzEyrsceUGWYoKXYyVWKEfyh0cDfnd9diAm3VeNqchtcMpoehETH8fr RHnJdBcjf112PzQSdKC6kqU0Q196c4Vp5HDOQfNiDnTf7gZSj0BraHOByy9LEDCLhQiCmr+2 E0rW4tBtDAn2HkT9uf32ZGqJCn1O+2uVfFhGu6vPE5qkqrbSE8TG+03H8ecU2q50zgHWPdHM OBvy3EhzfAh2VmOSTcRK+tSUe/u3wdLRDPwv/DTzGI36Kgky9MsDC5gpIwNbOJP2G/q1wT1o Gkw4IXfWv2ufWiXqJ+k7HEi2N1sree7Dy9KBCqb+ca1vFhYPDJfhP75I/VnzHVssZ/rYZ9+5 1yDoUABoNdJNSGUYl+Yh9Pw9pE3Kt4EFzUlFZWbE4xKL/NPno+z4J9aWemLLszcYz/u3XnbO vUSQHSrmfOzX3cV4yfmjM5lewgSstoxGyTx2M8enslgdXhPthZlDnTnOT+C+OTsh8+m5tos8 HQjaPM01MKBiAqdPgksm1wu2DrrwUi6ChRVTUBcj6+/9IJ81H2P2gJk3Ls3AVIxIffLoY34E +MYSfkEjBz0E8CLOcAw7JIwAaeBT Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="------------QO0gevjSZi4nSb4i04j50d10" Received-SPF: pass client-ip=2607:f8b0:4864:20::1131; envelope-from=demiobenour@gmail.com; helo=mail-yw1-x1131.google.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: qemu-devel@nongnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: qemu development List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: qemu-devel-bounces+qemu-devel=archiver.kernel.org@nongnu.org Sender: qemu-devel-bounces+qemu-devel=archiver.kernel.org@nongnu.org This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------QO0gevjSZi4nSb4i04j50d10 Content-Type: multipart/mixed; boundary="------------4M1ZxfF0mO0jpR8FOg9JRcIn"; protected-headers="v1"; hp="clear" Message-ID: Date: Fri, 24 Jul 2026 20:15:51 -0400 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird From: Demi Marie Obenour Subject: Re: [PATCH RFC 00/15] vhost-user: isolated memory To: ConKite , qemu-devel@nongnu.org Cc: "Michael S. Tsirkin" , Stefano Garzarella , =?UTF-8?Q?Alex_Benn=C3=A9e?= , Viresh Kumar , Gerd Hoffmann , Mathieu Poirier , Manos Pitsidianakis , Haixu Cui , Raphael Norwitz , Kevin Wolf , Hanna Reitz , =?UTF-8?Q?Marc-Andr=C3=A9_Lureau?= , Paolo Bonzini , Fam Zheng , Stefan Hajnoczi , Milan Zamazal , Akihiko Odaki , Dmitry Osipenko , qemu-block@nongnu.org, virtio-fs@lists.linux.dev, "Gonglei (Arei)" , zhenwei pi , =?UTF-8?Q?Daniel_P=2E_Berrang=C3=A9?= , Eric Blake , Markus Armbruster , Jason Wang , Peter Xu , =?UTF-8?Q?Eugenio_P=C3=A9rez?= , Alyssa Ross References: <20260723-vhost-user-isolated-memory-v1-0-6b97c439eb28@gmail.com> Content-Language: en-US In-Reply-To: <20260723-vhost-user-isolated-memory-v1-0-6b97c439eb28@gmail.com> Autocrypt: addr=demiobenour@gmail.com; keydata= xsFNBFp+A0oBEADffj6anl9/BHhUSxGTICeVl2tob7hPDdhHNgPR4C8xlYt5q49yB+l2nipd aq+4Gk6FZfqC825TKl7eRpUjMriwle4r3R0ydSIGcy4M6eb0IcxmuPYfbWpr/si88QKgyGSV Z7GeNW1UnzTdhYHuFlk8dBSmB1fzhEYEk0RcJqg4AKoq6/3/UorR+FaSuVwT7rqzGrTlscnT DlPWgRzrQ3jssesI7sZLm82E3pJSgaUoCdCOlL7MMPCJwI8JpPlBedRpe9tfVyfu3euTPLPx wcV3L/cfWPGSL4PofBtB8NUU6QwYiQ9Hzx4xOyn67zW73/G0Q2vPPRst8LBDqlxLjbtx/WLR 6h3nBc3eyuZ+q62HS1pJ5EvUT1vjyJ1ySrqtUXWQ4XlZyoEFUfpJxJoN0A9HCxmHGVckzTRl 5FMWo8TCniHynNXsBtDQbabt7aNEOaAJdE7to0AH3T/Bvwzcp0ZJtBk0EM6YeMLtotUut7h2 Bkg1b//r6bTBswMBXVJ5H44Qf0+eKeUg7whSC9qpYOzzrm7+0r9F5u3qF8ZTx55TJc2g656C 9a1P1MYVysLvkLvS4H+crmxA/i08Tc1h+x9RRvqba4lSzZ6/Tmt60DPM5Sc4R0nSm9BBff0N m0bSNRS8InXdO1Aq3362QKX2NOwcL5YaStwODNyZUqF7izjK4QARAQABzTxEZW1pIE1hcmll IE9iZW5vdXIgKGxvdmVyIG9mIGNvZGluZykgPGRlbWlvYmVub3VyQGdtYWlsLmNvbT7CwXgE EwECACIFAlp+A0oCGwMGCwkIBwMCBhUIAgkKCwQWAgMBAh4BAheAAAoJELKItV//nCLBhr8Q AK/xrb4wyi71xII2hkFBpT59ObLN+32FQT7R3lbZRjVFjc6yMUjOb1H/hJVxx+yo5gsSj5LS 9AwggioUSrcUKldfA/PKKai2mzTlUDxTcF3vKx6iMXKA6AqwAw4B57ZEJoMM6egm57TV19kz PMc879NV2nc6+elaKl+/kbVeD3qvBuEwsTe2Do3HAAdrfUG/j9erwIk6gha/Hp9yZlCnPTX+ VK+xifQqt8RtMqS5R/S8z0msJMI/ajNU03kFjOpqrYziv6OZLJ5cuKb3bZU5aoaRQRDzkFIR 6aqtFLTohTo20QywXwRa39uFaOT/0YMpNyel0kdOszFOykTEGI2u+kja35g9TkH90kkBTG+a EWttIht0Hy6YFmwjcAxisSakBuHnHuMSOiyRQLu43ej2+mDWgItLZ48Mu0C3IG1seeQDjEYP tqvyZ6bGkf2Vj+L6wLoLLIhRZxQOedqArIk/Sb2SzQYuxN44IDRt+3ZcDqsPppoKcxSyd1Ny 2tpvjYJXlfKmOYLhTWs8nwlAlSHX/c/jz/ywwf7eSvGknToo1Y0VpRtoxMaKW1nvH0OeCSVJ itfRP7YbiRVc2aNqWPCSgtqHAuVraBRbAFLKh9d2rKFB3BmynTUpc1BQLJP8+D5oNyb8Ts4x Xd3iV/uD8JLGJfYZIR7oGWFLP4uZ3tkneDfYzsFNBFp+A0oBEAC9ynZI9LU+uJkMeEJeJyQ/ 8VFkCJQPQZEsIGzOTlPnwvVna0AS86n2Z+rK7R/usYs5iJCZ55/JISWd8xD57ue0eB47bcJv VqGlObI2DEG8TwaW0O0duRhDgzMEL4t1KdRAepIESBEA/iPpI4gfUbVEIEQuqdqQyO4GAe+M kD0Hy5JH/0qgFmbaSegNTdQg5iqYjRZ3ttiswalql1/iSyv1WYeC1OAs+2BLOAT2NEggSiVO txEfgewsQtCWi8H1SoirakIfo45Hz0tk/Ad9ZWh2PvOGt97Ka85o4TLJxgJJqGEnqcFUZnJJ riwoaRIS8N2C8/nEM53jb1sH0gYddMU3QxY7dYNLIUrRKQeNkF30dK7V6JRH7pleRlf+wQcN fRAIUrNlatj9TxwivQrKnC9aIFFHEy/0mAgtrQShcMRmMgVlRoOA5B8RTulRLCmkafvwuhs6 dCxN0GNAORIVVFxjx9Vn7OqYPgwiofZ6SbEl0hgPyWBQvE85klFLZLoj7p+joDY1XNQztmfA rnJ9x+YV4igjWImINAZSlmEcYtd+xy3Li/8oeYDAqrsnrOjb+WvGhCykJk4urBog2LNtcyCj kTs7F+WeXGUo0NDhbd3Z6AyFfqeF7uJ3D5hlpX2nI9no/ugPrrTVoVZAgrrnNz0iZG2DVx46 x913pVKHl5mlYQARAQABwsFfBBgBAgAJBQJafgNKAhsMAAoJELKItV//nCLBwNIP/AiIHE8b oIqReFQyaMzxq6lE4YZCZNj65B/nkDOvodSiwfwjjVVE2V3iEzxMHbgyTCGA67+Bo/d5aQGj gn0TPtsGzelyQHipaUzEyrsceUGWYoKXYyVWKEfyh0cDfnd9diAm3VeNqchtcMpoehETH8fr RHnJdBcjf112PzQSdKC6kqU0Q196c4Vp5HDOQfNiDnTf7gZSj0BraHOByy9LEDCLhQiCmr+2 E0rW4tBtDAn2HkT9uf32ZGqJCn1O+2uVfFhGu6vPE5qkqrbSE8TG+03H8ecU2q50zgHWPdHM OBvy3EhzfAh2VmOSTcRK+tSUe/u3wdLRDPwv/DTzGI36Kgky9MsDC5gpIwNbOJP2G/q1wT1o Gkw4IXfWv2ufWiXqJ+k7HEi2N1sree7Dy9KBCqb+ca1vFhYPDJfhP75I/VnzHVssZ/rYZ9+5 1yDoUABoNdJNSGUYl+Yh9Pw9pE3Kt4EFzUlFZWbE4xKL/NPno+z4J9aWemLLszcYz/u3XnbO vUSQHSrmfOzX3cV4yfmjM5lewgSstoxGyTx2M8enslgdXhPthZlDnTnOT+C+OTsh8+m5tos8 HQjaPM01MKBiAqdPgksm1wu2DrrwUi6ChRVTUBcj6+/9IJ81H2P2gJk3Ls3AVIxIffLoY34E +MYSfkEjBz0E8CLOcAw7JIwAaeBT --------------4M1ZxfF0mO0jpR8FOg9JRcIn Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable On 7/23/26 18:29, ConKite wrote: > This patch series implements a memory isolation mode in vhost-user. The= > purpose of this mode is to provide the option of additional security by= > eliminating direct access of guest memory by vhost-user devices. > At a high level this works by: >=20 > 1. Adding qdev and qapi properties required to enable isolation mode fo= r > various devices. > 2. Allocating an isolation memory region in an anonymous file and mappi= ng it > to host memory. This isolation region will hold the bounce buffers = and > vrings necessary to move data. > 3. Using a vhost-iova-tree to allocate and track the mapping between > guest regions and their corresponding bounce buffers in the isolatio= n > memory. > 4. Creating shadow virtqueues to intercept request notifications. As > kick and call events are received by an svq, it copies buffer > contents and descriptors between isolation and guest memory before > notifying the backend or guest. =20 >=20 > Note: This project is currently in a partially functional state. For > example, in testing vhost-user-input and a keyboard, keystrokes may > register correctly or be double counted depending on the combination > of backend daemon and guest OS used. However, the desire is to make > this work public at this stage for comment on the overall > approach. Thank you so much for the work! I'm very excited about it. I do have a few questions: 1. Is this dependent on the specific vhost-user device type? In other words, does this code need to be specific to vhost-user-blk/net/etc devices? 2. What kind of performance penalty is there for isolation? The use of shadow virtqueues seems relatively complex. 3. Does it make sense to have device-type-specific code to validate data sent back by the server? This could protect drivers that trust virtio devices.=20 --=20 Sincerely, Demi Marie Obenour (she/her/hers) --------------4M1ZxfF0mO0jpR8FOg9JRcIn-- --------------QO0gevjSZi4nSb4i04j50d10 Content-Type: application/pgp-signature; name="OpenPGP_signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="OpenPGP_signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEopQtqVJW1aeuo9/sszaHOrMp8lMFAmpkADgACgkQszaHOrMp 8lPfBg/+Kf7ty+9TeveppA/nsZtuUXa0efXsct2J1f0nM5fJIgjD8k4b9YNPOny2 6pP7vuBJcGtv3OH9oKfR5bXJpa9ceGK61wiTcDeZbh++DYlw8YZI9FzkVa6sDO6f yekRqZinDnU3vFkG3RAF1eE3hWpIhARI6IBEDo6EmOjpD1utxXUkWpbJtS5cWgPr Xo1znWq/tg/r2OxO5AjARF/s1LxpGtuZeV2qXV8mTi3vzlcsuz8KzDpKq8tbtzE6 eSpCREwIj/dJYbXsQ9A6cp41/XCvYnHvMb7fhZxL7wxR9MUcobLYRBVpNs18uHOs tgUqCDiY+hxnVdXKyZP1y2vA1Nywb82qmBxaxSNJf8+dnX58Ziyb9VKMr8t8Q8kS 6ykc6eBF5cl2erNiJB9wvO4Td9yuJh6e6LyxRNlwGmkdpuHYhoknONV0d0ZqO2MF XxDWcOqcYnCu7ySTGDT5gOvysH3kOX6S5jr2uUZJxrJOaTdUPPx+3X2KgR8gHu83 1Hy95OiUNwIJNSQBaS/THqFWUEEm/scJkKhuKmPVoYNq2rllGlLbCcD/TS/Iu7c/ QJsgRj+UAurWuJ3IQLqGosh4N/ysFur9jf979fbzVGbNlo1JEqq7anlSg2kYHPuy 4VQMwVBKp0MLVs4f4Nz2c8Su9LtqLEvmEac5z92xV4vi2zNbLFI= =iiNx -----END PGP SIGNATURE----- --------------QO0gevjSZi4nSb4i04j50d10--