On 9/12/2024 10:48 PM, Paolo Bonzini wrote:
On Thu, Sep 12, 2024 at 4:45 PM Xiaoyao Li <xiaoyao.li@xxxxxxxxx> wrote:
KVM is not going to have any checks, it's only going to pass the
CPUID to the TDX module and return an error if the check fails
in the TDX module.
If so, new feature can be enabled for TDs out of KVM's control.
Is it acceptable?
It's the same as for non-TDX VMs, I think it's acceptable.
another question is for patch 24, will we keep the filtering of the
configurable CPUDIDs in KVM_TDX_CAPABILITIES with KVM_GET_SUPPORTED_CPUID?
Paolo
