On 03/10/2018 19:39, Jim Mattson wrote: > On Wed, Oct 3, 2018 at 9:54 AM, Paolo Bonzini <pbonzini@xxxxxxxxxx> wrote: >> But it's not clear, are you suggesting to use nested virtualization >> (using "intercept" makes me think of nested)? That also introduces the >> possible bugs (and hidden bugs) from nesting, so it is worse than the >> module parameter. > > No, not at all. I'm suggesting adopting a convention where all RDMSRs > of IA32_VMX_PROCBASED_CTLS2 are done through a single function that > can mock up an older CPU based on module parameters. Similarly for > VMLAUNCH/VMRESUME. Oh I see. Yeah, that would be nice. Paolo
