From: Chenyi Qiang <chenyi.qiang@intel.com>
To: Paolo Bonzini <pbonzini@redhat.com>,
Marcelo Tosatti <mtosatti@redhat.com>,
Richard Henderson <richard.henderson@linaro.org>,
Eduardo Habkost <eduardo@habkost.net>,
Peter Xu <peterx@redhat.com>, Xiaoyao Li <xiaoyao.li@intel.com>
Cc: qemu-devel@nongnu.org, kvm@vger.kernel.org
Subject: Re: [PATCH v8 0/4] Enable notify VM exit
Date: Fri, 30 Sep 2022 08:42:39 +0800 [thread overview]
Message-ID: <13f628d5-3ac7-3ddb-d151-d9b22085fde0@intel.com> (raw)
In-Reply-To: <d20d8f67-2ad9-7b87-71f6-011aab7b6ba5@redhat.com>
On 9/30/2022 1:28 AM, Paolo Bonzini wrote:
> On 9/29/22 09:03, Chenyi Qiang wrote:
>> Notify VM exit is introduced to mitigate the potential DOS attach from
>> malicious VM. This series is the userspace part to enable this feature
>> through a new KVM capability KVM_CAP_X86_NOTIFY_VMEXIT. The detailed
>> info can be seen in Patch 4.
>>
>> The corresponding KVM support can be found in linux 6.0-rc:
>> (2f4073e08f4c KVM: VMX: Enable Notify VM exit)
>
> Thanks, I will queue this in my next pull request.
>
> Paolo
>
Thanks Paolo!
Please take the resend version at
https://lore.kernel.org/qemu-devel/20220929072014.20705-1-chenyi.qiang@intel.com/
There's a minor compile issue in this one.
Chenyi
>> ---
>> Change logs:
>> v7 -> v8
>> - Add triple_fault_pending field transmission on migration (Paolo)
>> - Change the notify-vmexit and notify-window to the accelerator
>> property. Add it as
>> a x86-specific property. (Paolo)
>> - Add a preparation patch to expose struct KVMState in order to add
>> target-specific property.
>> - Define three option for notify-vmexit. Make it on by default. (Paolo)
>> - Raise a KVM internal error instead of triple fault if invalid
>> context of guest VMCS detected.
>> - v7:
>> https://lore.kernel.org/qemu-devel/20220923073333.23381-1-chenyi.qiang@intel.com/
>>
>> v6 -> v7
>> - Add a warning message when exiting to userspace (Peter Xu)
>> - v6:
>> https://lore.kernel.org/all/20220915092839.5518-1-chenyi.qiang@intel.com/
>>
>> v5 -> v6
>> - Add some info related to the valid range of notify_window in patch
>> 2. (Peter Xu)
>> - Add the doc in qemu-options.hx. (Peter Xu)
>> - v5:
>> https://lore.kernel.org/qemu-devel/20220817020845.21855-1-chenyi.qiang@intel.com/
>>
>> ---
>>
>> Chenyi Qiang (3):
>> i386: kvm: extend kvm_{get, put}_vcpu_events to support pending triple
>> fault
>> kvm: expose struct KVMState
>> i386: add notify VM exit support
>>
>> Paolo Bonzini (1):
>> kvm: allow target-specific accelerator properties
>>
>> accel/kvm/kvm-all.c | 78 ++-----------------------
>> include/sysemu/kvm.h | 2 +
>> include/sysemu/kvm_int.h | 75 ++++++++++++++++++++++++
>> qapi/run-state.json | 17 ++++++
>> qemu-options.hx | 11 ++++
>> target/arm/kvm.c | 4 ++
>> target/i386/cpu.c | 1 +
>> target/i386/cpu.h | 1 +
>> target/i386/kvm/kvm.c | 121 +++++++++++++++++++++++++++++++++++++++
>> target/i386/machine.c | 20 +++++++
>> target/mips/kvm.c | 4 ++
>> target/ppc/kvm.c | 4 ++
>> target/riscv/kvm.c | 4 ++
>> target/s390x/kvm/kvm.c | 4 ++
>> 14 files changed, 272 insertions(+), 74 deletions(-)
>>
>
prev parent reply other threads:[~2022-09-30 0:48 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2022-09-29 7:03 [PATCH v8 0/4] Enable notify VM exit Chenyi Qiang
2022-09-29 7:03 ` [PATCH v8 1/4] i386: kvm: extend kvm_{get, put}_vcpu_events to support pending triple fault Chenyi Qiang
2022-09-29 7:03 ` [PATCH v8 2/4] kvm: allow target-specific accelerator properties Chenyi Qiang
2022-09-29 7:03 ` [PATCH v8 3/4] kvm: expose struct KVMState Chenyi Qiang
2022-09-29 7:03 ` [PATCH v8 4/4] i386: add notify VM exit support Chenyi Qiang
2022-09-29 17:28 ` [PATCH v8 0/4] Enable notify VM exit Paolo Bonzini
2022-09-30 0:42 ` Chenyi Qiang [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=13f628d5-3ac7-3ddb-d151-d9b22085fde0@intel.com \
--to=chenyi.qiang@intel.com \
--cc=eduardo@habkost.net \
--cc=kvm@vger.kernel.org \
--cc=mtosatti@redhat.com \
--cc=pbonzini@redhat.com \
--cc=peterx@redhat.com \
--cc=qemu-devel@nongnu.org \
--cc=richard.henderson@linaro.org \
--cc=xiaoyao.li@intel.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).