Messages in this thread | | | Subject | Re: [PATCH 00/12] SEV Live Migration Patchset. | From | Paolo Bonzini <> | Date | Thu, 19 Mar 2020 14:05:21 +0100 |
| |
On 17/02/20 20:49, Ashish Kalra wrote: >> Also, you're making guest-side and host-side changes. What ensures >> that you don't try to migrate a guest that doesn't support the >> hypercall for encryption state tracking? > This is a good question and it is still an open-ended question. There > are two possibilities here: guest does not have any unencrypted pages > (for e.g booting 32-bit) and so it does not make any hypercalls, and > the other possibility is that the guest does not have support for > the newer hypercall. > > In the first case, all the guest pages are then assumed to be > encrypted and live migration happens as such. > > For the second case, we have been discussing this internally, > and one option is to extend the KVM capabilites/feature bits to check for this ?
You could extend the hypercall to completely block live migration (e.g. a0=a1=~0, a2=0 to unblock or 1 to block). The KVM_GET_PAGE_ENC_BITMAP ioctl can also return the blocked/unblocked state.
Paolo
| |