On Wed, Jan 01, 2025 at 03:14:12PM +0530, Nikunj A. Dadhania wrote: > I can drop this patch, and if the admin wants to change the clock > source to kvm-clock from Secure TSC, that will be permitted. Why would the admin want that and why would we even support that? Your commit message starts with: "SecureTSC enabled guests should use TSC as the only clock source, terminate the guest with appropriate code when clock source switches to hypervisor controlled kvmclock." So what are we even doing here? You do notice that you're missing answering the "why" question on all those, which is kinda the most important one. You're adding support for something but the supported use cases are not really clear... -- Regards/Gruss, Boris. https://people.kernel.org/tglx/notes-about-netiquette