Re: [RFC PATCH v5 00/20] VM introspection

Re: [RFC PATCH v5 00/20] VM introspection

[Konrad Rzeszutek Wilk]

On Thu, Dec 20, 2018 at 08:28:30PM +0200, Adalbert Lazăr wrote:
> This patch series proposes a VM introspection subsystem for KVM (KVMi).
> 
> The previous RFC can be read here: https://marc.info/?l=kvm&m=151362403331566
> 
> This iteration brings, mostly:
>   - an improved remote mapping (moved to the mm/ tree)
>   - single-step support for #PF events and as an workaround to unimplemented
>     instructions from the x86 emulator that may need to be handled on EPT
>     violations VMEXITS
>   - a new ioctl to allow the introspection tool to remove its hooks from
>     guest before it is suspended or live migrated

.. No mention of the libvmi tool - are you going to provide the functionality
in there as well to use these new ioctls? Would it make sense to CC the libvmi
community as well to get their input?

>   - more bugfixes and a lot of stability
> 
> Still not implemented yet (even if some are documented) are virtualized
> exceptions, EPT views and SPP (Sub Page Protection).
> 
> We're still looking forward to add kvm unit tests for this VM
> introspection system now that we've integrated it in our products and
> in our internal tests framework.

..snip..> 

>  mm/Kconfig                               |    9 +
>  mm/Makefile                              |    1 +
>  mm/gup.c                                 |    1 +
>  mm/huge_memory.c                         |    1 +
>  mm/internal.h                            |    5 -
>  mm/mempolicy.c                           |    1 +
>  mm/mmap.c                                |    1 +
>  mm/mmu_notifier.c                        |    1 +
>  mm/pgtable-generic.c                     |    1 +
>  mm/remote_mapping.c                      | 1438 ++++++++++++++
>  mm/rmap.c                                |   39 +-
>  mm/swapfile.c                            |    1 +

Please make sure to CC linux-mm@kvack.org when posting this.

In the meantime for folks on linux-mm, pls see https://www.spinics.net/lists/kvm/msg179441.html

Re: [RFC PATCH v5 00/20] VM introspection

[Mihai Donțu]

CC += Tamas, Mathieu

On Fri, 2018-12-21 at 10:39 -0500, Konrad Rzeszutek Wilk wrote:
> On Thu, Dec 20, 2018 at 08:28:30PM +0200, Adalbert Lazăr wrote:
> > This patch series proposes a VM introspection subsystem for KVM (KVMi).
> > 
> > The previous RFC can be read here: https://marc.info/?l=kvm&m=151362403331566
> > 
> > This iteration brings, mostly:
> >   - an improved remote mapping (moved to the mm/ tree)
> >   - single-step support for #PF events and as an workaround to unimplemented
> >     instructions from the x86 emulator that may need to be handled on EPT
> >     violations VMEXITS
> >   - a new ioctl to allow the introspection tool to remove its hooks from
> >     guest before it is suspended or live migrated
> 
> .. No mention of the libvmi tool - are you going to provide the functionality
> in there as well to use these new ioctls? Would it make sense to CC the libvmi
> community as well to get their input?

There is work underway to rewrite the KVM driver of LibVMI:

https://github.com/KVM-VMI/libvmi (kvmi branch)

and now that v5 has been published, another round of updates is being
prepared. There is also a dedicated kernel repository:

https://github.com/KVM-VMI/kvm (kvmi branch)

as well as a qemu one:

https://github.com/KVM-VMI/qemu (kvmi branch)

PR-s updating them are being prepared too.

> >   - more bugfixes and a lot of stability
> > 
> > Still not implemented yet (even if some are documented) are virtualized
> > exceptions, EPT views and SPP (Sub Page Protection).
> > 
> > We're still looking forward to add kvm unit tests for this VM
> > introspection system now that we've integrated it in our products and
> > in our internal tests framework.
> 
> ..snip..> 
> 
> >  mm/Kconfig                               |    9 +
> >  mm/Makefile                              |    1 +
> >  mm/gup.c                                 |    1 +
> >  mm/huge_memory.c                         |    1 +
> >  mm/internal.h                            |    5 -
> >  mm/mempolicy.c                           |    1 +
> >  mm/mmap.c                                |    1 +
> >  mm/mmu_notifier.c                        |    1 +
> >  mm/pgtable-generic.c                     |    1 +
> >  mm/remote_mapping.c                      | 1438 ++++++++++++++
> >  mm/rmap.c                                |   39 +-
> >  mm/swapfile.c                            |    1 +
> 
> Please make sure to CC linux-mm@kvack.org when posting this.
> 
> In the meantime for folks on linux-mm, pls see https://www.spinics.net/lists/kvm/msg179441.html

-- 
Mihai Donțu