> > Sorry? Do you mean your VM needs 5 minute to boot? What is your configuration? > > > yes. the VM needs 5 minutes to boot when I forced enable_unrestricted_guest=0 in kvm. > > > VMX unrestricted guest has been supported on all Intel platforms since years > > ago. I do not see any reason to disable it. > > > yes. just for test purpose. > To study the impact to the mode enable_unrestricted_guest=0, > since in this mode, cr0, cr4 causes lots of vmexit. one correction. actually with enable_unrestricted_guest=0, it has less number of kvm_set_cr0(), but more kvm_mmu_reset_context() called from kvm_set_cr0(). ___________________________________________________________________ | | #cr0 |#reset_context from cr0| #cr4| | ---------------------------|--------|-----------------------|-----| |enable_unrestricted_guest=0 | 627405 | 313704 | 13 | |----------------------------|--------|-----------------------|-----| |enable_unrestricted_guest=1 |2092493 | 5 | 13 | --------------------------------------------------------------------