From mboxrd@z Thu Jan  1 00:00:00 1970
From: Paolo Bonzini <pbonzini@redhat.com>
Subject: Re: nested EPT
Date: Thu, 16 Jan 2014 18:09:45 +0100
Message-ID: <52D81259.3010808@redhat.com>
References: <CAH0m6MCf44kamL2PDpsDkLFX6t-txFevhrfME8jvg84Y0H0_Aw@mail.gmail.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Cc: kvm@vger.kernel.org
To: duy hai nguyen <haind93@gmail.com>
Return-path: <kvm-owner@vger.kernel.org>
Received: from mail-qa0-f47.google.com ([209.85.216.47]:50943 "EHLO
	mail-qa0-f47.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org
	with ESMTP id S1752389AbaAPRJw (ORCPT <rfc822;kvm@vger.kernel.org>);
	Thu, 16 Jan 2014 12:09:52 -0500
Received: by mail-qa0-f47.google.com with SMTP id j5so2361562qaq.34
        for <kvm@vger.kernel.org>; Thu, 16 Jan 2014 09:09:51 -0800 (PST)
In-Reply-To: <CAH0m6MCf44kamL2PDpsDkLFX6t-txFevhrfME8jvg84Y0H0_Aw@mail.gmail.com>
Sender: kvm-owner@vger.kernel.org
List-ID: <kvm.vger.kernel.org>

Il 16/01/2014 17:10, duy hai nguyen ha scritto:
> Dear All,
> 
> I am having a problem with using nested EPT in my system: In L0
> hypervisor CPUs support vmx and ept; however, L1 hypervisor's CPUs do
> not have ept capability. Flag 'ept' appears in /proc/cpuinfo of L0 but
> does not show in that of L1.
> 
> - 'Nested' and 'EPT' are enabled in L0:
> 
> $cat /sys/module/kvm_intel/parameters/nested
> Y
> 
> $cat /sys/module/kvm_intel/parameters/ept
> Y
> 
> - The libvirt xml file used in L0 has this cpu configuration:
> 
> <cpu mode='host-passthrough'/>
> 
> - The kernel version I am using for both L0 and L1 is 3.9.11

Nested EPT was added in 3.12.  You need that version in L0.

Paolo