Re: [RFC PATCH 06/15] virt: tdx-guest: Support TDI bind and unbind operations

[Edgecombe, Rick P]

On Wed, 2026-11-04 at 08:59 +0000, Duan, Zhenzhong wrote:
> > I'm not clear whose fault this is.
> 
> Host side fault, e.g., a malicious VMM does nothing in UNBIND TDCM hypercall.

If the host *can* always handle this, but just doesn't, then I wonder how much
effort we should spend to on handling it. We can't protect against TD DOS by the
host, so don't try. So this seems similar.

> 
> > 
> > >   or TDCM hypercall polling timeout(e.g., heavy load in host).
> > 
> > Heavy load in the host leads to broken flag being set? This is pretty
> > similar to
> > the issues around the BUSY errors. You really need to think through how
> > this is
> > all going to work.
> 
> Hmm, yes, my timeout example was too vague to justify a broken state, it's
> recoverable with retry in this case.