Re: Xen 4.7 Headline Features (for PR)

From: Doug Goldstein <cardoe@cardoe.com>
To: George Dunlap <dunlapg@umich.edu>, Lars Kurth <lars.kurth.xen@gmail.com>
Cc: Zibby Keaton <zkeaton@linuxfoundation.org>,
	Xen-devel <xen-devel@lists.xenproject.org>,
	Wei Liu <wei.liu2@citrix.com>
Subject: Re: Xen 4.7 Headline Features (for PR)
Date: Sat, 23 Apr 2016 20:06:24 -0500	[thread overview]
Message-ID: <04145728-eafd-e87f-eb9d-b7203bb48343@cardoe.com> (raw)
In-Reply-To: <CAFLBxZbYpkfBcVSKuoZ1puU+vQa3kM8r=W63_K=hCt63zuH-QA@mail.gmail.com>

[-- Attachment #1.1.1: Type: text/plain, Size: 1666 bytes --]

On 4/22/16 9:25 AM, George Dunlap wrote:
> On Fri, Apr 22, 2016 at 3:22 PM, Lars Kurth <lars.kurth.xen@gmail.com> wrote:
>>
>>> On 22 Apr 2016, at 15:08, George Dunlap <dunlapg@umich.edu> wrote:
>>>
>>> On Fri, Apr 22, 2016 at 2:26 PM, Lars Kurth <lars.kurth.xen@gmail.com> wrote:
>>>> Folks,
>>>>
>>>> given that we have we are getting close to RC's, I would like to start to spec out the headline Features for the press release. The big items I am aware of are COLO. I am a little confused about xSplice.
>>>>
>>>> Maybe we can use this thread to start collating a short-list.
>>>
>>> hotplug disk backends (drbd, iscsi, &c) for HVM guests.
>>>
>>> hard affinity for credit2
>>>
>>> soft reset for pv guests
>>>
>>> kconfig for the hypervisor
>>
>> This is one which potentially has a big security impact and could be a Headline Feature. Just to remind me, is KCONFIG a run-time or build-time config mechanism. If the latter, distro users will not benefit from it.
> 
> Kconfig is build-time.  Distros could use it in principle, and I think
> Gentoo will (that was part of Doug's motivation for doing it, IIUC).
> But yes, I suspect most distros will keep everything in by default.
> It's more a feature for embedded / security-conscious vendors.
> 
>  -George

Not really important but I figured I'd be clear about my motivations.
For Gentoo I'll actually keep the stock settings. For Yocto I'll keep
the stock settings but expose a way to run kconfig (like the linux
kernel is in Yocto) for vendors with a security focus. I'm aware of a
handful of downstream vendors which will utilize that capability.

-- 
Doug Goldstein

[-- Attachment #1.2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 959 bytes --]

[-- Attachment #2: Type: text/plain, Size: 126 bytes --]

_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xen.org
http://lists.xen.org/xen-devel