On Thu, Sep 12, 2024 at 4:45 PM Xiaoyao Li <xiaoyao.li@xxxxxxxxx> wrote: > > KVM is not going to have any checks, it's only going to pass the > > CPUID to the TDX module and return an error if the check fails > > in the TDX module. > > If so, new feature can be enabled for TDs out of KVM's control. > > Is it acceptable? It's the same as for non-TDX VMs, I think it's acceptable. Paolo