From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by smtp.lore.kernel.org (Postfix) with ESMTP id EE4EBC43334 for ; Wed, 6 Jul 2022 22:30:14 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S234048AbiGFWaN (ORCPT ); Wed, 6 Jul 2022 18:30:13 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:36094 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S233999AbiGFWaM (ORCPT ); Wed, 6 Jul 2022 18:30:12 -0400 Received: from mail-pf1-x42c.google.com (mail-pf1-x42c.google.com [IPv6:2607:f8b0:4864:20::42c]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 4C58624964 for ; Wed, 6 Jul 2022 15:30:11 -0700 (PDT) Received: by mail-pf1-x42c.google.com with SMTP id j3so3034137pfb.6 for ; Wed, 06 Jul 2022 15:30:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20210112; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:in-reply-to; bh=iKA8akOzbkf4tNDc6jfn4CUsITOKN9yZnmEgDBs/SyQ=; b=q6a3Irt0falLmlOdgWGFnxHk8Agc+WjZBDzCqkjggQvyzWvyJRYgbbruahzFU3UMAO rijRQsr2J25PLeGwnp+Nykv+fu5KZ8KAIRn2Q00ZTduG2VN33D6+E27CZ57cDZdylV07 NGSStd34KnxDkaHKTrMxnFoF4CUspgWJjmiE4D/WBVxvDyAjl2H1FZ6p2AbC8JZY1oYF erHmqIE7H/fr1T38eniUYrxC2g1AMIk390+P4dpRtGWvxFy6wzItDj0zY+M4iJdkYYRY ypV3OPyDukfxEG109qbDOAESZ4G9jHLj7AoAPelNTdiXLGhTOATvm5xkVn0zI6l2OrF3 uABQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to; bh=iKA8akOzbkf4tNDc6jfn4CUsITOKN9yZnmEgDBs/SyQ=; b=J+FOK7xLiFcOh9gkWUFDV0Sg72MwqbDOv5l2V2FSVOeUbNUXve09T79Xvzew+E/8n0 VQp0DugG04RB00PBxfyOKmk0/ZS254drTjJaM/phM0oicRL57nTdSnFIZnqopi8luy33 eno1FoN+3qIcGe1nXB8H4E4m1NXwh6ihmHPVmAgDOlzeTbfHuNDOLg/vMcv3HRJxf1ou 1mDARz6P85WJxmg05SyONqU0vYuptgE/FHi2KXa/nKX8JdMS06E5hf84Dl2EtVul051R NEwotn1Cp3hialVHp2W0JHD4fw/HWq9U4gPb5FtSG1xVlEfauvFb/5GdZBMt+hr7yy7e naWA== X-Gm-Message-State: AJIora/ecqNG3P6LwJoc8TxknGWzTgci5l/BoyT8hWPb2zmiVBF8ME2l dg8aWRoNFoO40IQ237mySaQ/eA== X-Google-Smtp-Source: AGRyM1sLT1U7pR8GVCabA1hqq2+btL+DQYe73v4JeLKC365avmWaP7/FZnlh9V7Qy3kZGK00OgD8og== X-Received: by 2002:a17:902:dad1:b0:16a:75cb:5d97 with SMTP id q17-20020a170902dad100b0016a75cb5d97mr49535733plx.64.1657146610443; Wed, 06 Jul 2022 15:30:10 -0700 (PDT) Received: from google.com (123.65.230.35.bc.googleusercontent.com. [35.230.65.123]) by smtp.gmail.com with ESMTPSA id n11-20020a170902968b00b0016a11b9aeb3sm26092000plp.224.2022.07.06.15.30.09 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 06 Jul 2022 15:30:09 -0700 (PDT) Date: Wed, 6 Jul 2022 22:30:05 +0000 From: Sean Christopherson To: Jim Mattson Cc: Vitaly Kuznetsov , Paolo Bonzini , Anirudh Rayabharam , kvm@vger.kernel.org, Wanpeng Li , Maxim Levitsky , linux-hyperv@vger.kernel.org, linux-kernel@vger.kernel.org Subject: Re: [PATCH 00/14] KVM: nVMX: Use vmcs_config for setting up nested VMX MSRs Message-ID: References: <20220627160440.31857-1-vkuznets@redhat.com> <87y1xgubot.fsf@redhat.com> <87letgu68x.fsf@redhat.com> <87czeru9cp.fsf@redhat.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Wed, Jun 29, 2022, Jim Mattson wrote: > On Wed, Jun 29, 2022 at 2:06 AM Vitaly Kuznetsov wrote: > > > For PERF_GLOBAL_CTRL errata: > > - We can move the filtering to vmx_vmexit_ctrl()/vmx_vmentry_ctrl() > > preserving the status quo: KVM doesn't use the feature but it is exposed > > to L1 hypervisor (and L1 hypervisor presumably has the same check and > > doesn't use the feature. FWIW, the workaround was added in 2011 and the > > erratas it references appeared in 2010, this means that the affected > > CPUs are quite old, modern proprietary hypervisors won't likely boot > > there). > Sadly, Nehalem and Westmere are well-supported by KVM today, and we > will probably still continue to support them for at least another > decade. They both have EPT, unrestricted guest, and other VT-x2 > features that KVM still considers optional. Nehalem doesn't have unrestricted guest. Nehalem is the only generation with EPT but not unrestricted guest.