>> Fine. This doesn't need to change ... until you load TDX. Once you >> initialize the TDX module, no more out-of-tree VMMs for you. > > It's not just out-of-tree hypervisors, which IMO should be little more than an > afterthought. The other more important issue is that being post-VMXON blocks INIT, Does that make CPU offline a one-way process? Linux uses INIT to bring a CPU back online again. -Tony
