On Mon, Apr 27, 2020 at 12:13:33PM +0000, Tian, Kevin wrote: > Then back to this context. Almost every newly-born Linux VMM > (firecracker, crosvm, cloud hypervisor, and some proprietary > implementations) support only two types of devices: virtio and > vfio, because they want to be simple and slim. For security. Moving all the sketchy emulation code into the kernel seems like a worse security posture over all :( Jason
