Re: [PATCHv6 07/30] x86/traps: Add #VE support for TDX guest
From: Kirill A. Shutemov
Date: Fri Mar 18 2022 - 09:03:12 EST
On Fri, Mar 18, 2022 at 11:55:11AM +0100, Peter Zijlstra wrote:
> On Thu, Mar 17, 2022 at 01:32:07PM -0700, Dave Hansen wrote:
>
> > The TDX rules are *much* nicer than SEV. They're also a lot nicer on
> > TDX _now_ than they used to be. There are a few stubborn people at
> > Intel who managed to add some drops of sanity to the architecture.
>
> Right; that is saner than it used to be. I have definite memories that
> pages could be taken back by the TDX thing and would need
> re-authentication. A pool of 'fixed' pages was talked about. I'm glad to
> hear all that is gone.
Right, VMM can still pull memory form the guest at any point, but
reference of such memory from the guest would lead not to #VE as before,
but to TD termination.
--
Kirill A. Shutemov