lkml.org 
[lkml]   [2021]   [Mar]   [26]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    SubjectRe: [PATCH v3 05/25] x86/sgx: Introduce virtual EPC for use by KVM guests
    From
    Date
    On 3/26/21 8:29 AM, Borislav Petkov wrote:
    > On Fri, Mar 26, 2021 at 08:17:38AM -0700, Dave Hansen wrote:
    >> We're working on a cgroup controller just for enclave pages that will
    >> apply to guest use and bare metal. It would have been nice to have up
    >> front, but we're trying to do things incrementally. A cgroup controller
    >> should solve he vast majority of these issues where users are quarreling
    >> about who gets enclave memory.
    > Maybe I'm missing something but why do you need a cgroup controller
    > instead of controlling that resource sharing in the sgx core? Or the
    > cgroup thing has additional functionality which is good to have anyway?

    We could do it in the SGX core, but I think what we end up with will end
    up looking a lot like a cgroup controller. It seems like overkill, but
    I think there's enough infrastructure to leverage that it's simpler to
    do it with cgroups versus anything else.

    \
     
     \ /
      Last update: 2021-03-26 16:37    [W:4.313 / U:0.308 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site