Messages in this thread | | | Date | Wed, 25 Jan 2023 12:47:47 -0500 | From | "Michael S. Tsirkin" <> | Subject | Re: Linux guest kernel threat model for Confidential Computing |
| |
On Wed, Jan 25, 2023 at 07:02:03PM +0300, Kirill A. Shutemov wrote: > On Wed, Jan 25, 2023 at 10:45:48AM -0500, Michael S. Tsirkin wrote: > > On Wed, Jan 25, 2023 at 04:16:02PM +0100, Greg Kroah-Hartman wrote: > > > Everyone wants a subset, different from other's subset, which means you > > > need them all. Sorry. > > > > Well if there's a very popular system (virtual in this case) that needs > > a specific config to work well, then I guess > > arch/x86/configs/ccguest.config or whatever might be acceptable, no? > > Lots of precedent here. > > OS vendors want the single kernel that fits all sizes: it should be > possible (and secure) to run a generic disto kernel within TDX/SEV guest.
If they want that, sure. But it then becomes this distro's responsibility to configure things in a sane way. At least if there's a known good config that's a place to document what is known to work well. No?
-- MST
| |