Re: [RFC PATCH 00/35] SEV-ES hypervisor support

From: Paolo Bonzini
Date: Mon Nov 30 2020 - 15:26:24 EST


On 30/11/20 20:35, Sean Christopherson wrote:
Delayed interrupts are fine, since they are injected according to RVI and
the posted interrupt descriptor. I'm thinking more of events (exceptions
and interrupts) that caused an EPT violation exit and were recorded in the
IDT-vectored info field.
Ah. As is, I don't believe KVM has access to this information. TDX-Module
handles the actual EPT violation, as well as event reinjection. The EPT
violation reported by SEAMRET is synthesized, and IIRC the IDT-vectoring field
is not readable.

Regardless, is there an actual a problem with having a "pending" exception that
isn't reported to userspace? Obviously the info needs to be migrated, but that
will be taken care of by virtue of migrating the VMCS.

No problem, I suppose we would just have to get used to not being able to look into the state of migrated VMs.

Paolo