Kernel KVM virtualization development
 help / color / mirror / Atom feed
From: Sean Christopherson <seanjc@google.com>
To: Rick P Edgecombe <rick.p.edgecombe@intel.com>
Cc: "pbonzini@redhat.com" <pbonzini@redhat.com>,
	Dave Hansen <dave.hansen@intel.com>,
	 "kas@kernel.org" <kas@kernel.org>,
	"kvm@vger.kernel.org" <kvm@vger.kernel.org>,
	"x86@kernel.org" <x86@kernel.org>
Subject: Re: Process for doing early internal type review on the list
Date: Thu, 27 Aug 2026 12:02:52 -0700	[thread overview]
Message-ID: <apCJ3B8zlVImTiaV@google.com> (raw)
In-Reply-To: <575b25a59231cfb7bc5fbaf4bbe45bfedad1e3a9.camel@intel.com>

On Thu, Aug 27, 2026, Rick P Edgecombe wrote:
> Arg, fix Kiryl's email address.
> 
> On Wed, 2026-08-26 at 16:59 -0700, Rick Edgecombe wrote:
> > Sean has long been pushing TDX developers to review less internally and capture
> > everything on the list. For several reasons:
> >  - Avoid thrash by hashing out things internally that are just overturned later.
> >  - Capture all the design decisions in lore history.
> >  - Help developers grow by getting comfortable working and making mistakes in   
> >    public.
> >  - A strong personal conviction that through some confluence of intangibles,
> >    working in public produces better outcomes for the kernel?

As evidence, I submit the myriad historical KVM commits with godawful changelogs
and no meaningful on-list review/discussion.  When things go wrong, knowing the
intent and being able to retroactively assess the review process that yielded the
final commit is extremely valuable.

E.g. KVM added 600+ lines of code to (very poorly) virtualize MTRR memtypes, and
carried it for more than 15 years, all because of misdiagnosed #MC issues that
showed up in early EPT + VTd enabling.

Even with the few breadcrumbs provided by on-list review, it took me for freaking
ever to piece together what happened[*].  If all of the review had been done in
private, and all we saw was the final result, then it's entirely possible we'd
still be carrying the MTRR virtualization horrors.

Another way to look at it: would anyone (seriously) argue that changelogs are a
waste of time?  People can read the code, why do we need to explain what it does
and why?  Because anytime future developers are forced to make assumptions or
guesses due to lack of information, the probability of a mistake being and/or a
bug being introduced goes up.  And has been proven a hilarious number of times
this year by AI, humans make a lot of mistakes, and the more information that's
available, the easier it is to decipher and remedy those mistakes.

"Documenting" mistakes is also extremely valuable for helping others avoid those
same mistakes.  E.g. look at all the bajlilion edge cases and wrinkles Sashiko is
pointing out.  Having a public record of exactly what can go wrong, or what sharp
edges exist, is a huge benefit to future developers.  How many times have folks
ended up on Stack Overflow trying to figure out how to do some obsurce thing with
e.g. inline asm?  This is the same thing, just specific to the kernel.  It's a
public, searchable record of potential/common issues and in many cases, the cures
for those issues.

[*] https://lore.kernel.org/all/20240309010929.1403984-2-seanjc@google.com

  reply	other threads:[~2026-08-27 19:02 UTC|newest]

Thread overview: 4+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2026-08-26 23:59 Process for doing early internal type review on the list Edgecombe, Rick P
2026-08-27  0:54 ` Edgecombe, Rick P
2026-08-27 19:02   ` Sean Christopherson [this message]
2026-08-27 19:09     ` Borislav Petkov

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=apCJ3B8zlVImTiaV@google.com \
    --to=seanjc@google.com \
    --cc=dave.hansen@intel.com \
    --cc=kas@kernel.org \
    --cc=kvm@vger.kernel.org \
    --cc=pbonzini@redhat.com \
    --cc=rick.p.edgecombe@intel.com \
    --cc=x86@kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox