From mboxrd@z Thu Jan 1 00:00:00 1970 From: Avi Kivity Subject: Re: Setting nx bit in virtual CPU Date: Thu, 01 Apr 2010 11:43:14 +0300 Message-ID: <4BB45CA2.5040304@redhat.com> References: <4BB126AC.8040401@huskydog.org.uk> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: kvm@vger.kernel.org To: Richard Simpson Return-path: Received: from mx1.redhat.com ([209.132.183.28]:12531 "EHLO mx1.redhat.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1758059Ab0DAQdu (ORCPT ); Thu, 1 Apr 2010 12:33:50 -0400 In-Reply-To: <4BB126AC.8040401@huskydog.org.uk> Sender: kvm-owner@vger.kernel.org List-ID: On 03/30/2010 01:16 AM, Richard Simpson wrote: > Hello, > > Summary: How can I have a virtual CPU with the nx bit set whilst > enjoying KVM acceleration? > > My Host - AMD Athlon(tm) 64 Processor 3200+ running Gentoo > My VM - KVM running hardened Gentoo > My KVM version - 0.12.3 > My Task - Implement restricted secure VM to handle services exposed to > internet. > My Command - kvm -hda /dev/mapper/vols-andrew -kernel ./bzImage -append > root=/dev/hda2 -cpu host -runas xxx -net nic -net user -m 256 -k en-gb > -vnc :1 -monitor stdio > > Are you running a 32-bit non-pae host kernel? In that case, nx is disabled both for the guest and host. Switch to a pae (or 64-bit) kernel and all should be well. -- error compiling committee.c: too many arguments to function