On 7/7/21 8:46 AM, Tianyu Lan wrote: > @@ -598,7 +599,7 @@ void arch_kexec_unprotect_crashkres(void) > */ > int arch_kexec_post_alloc_pages(void *vaddr, unsigned int pages, gfp_t gfp) > { > - if (sev_active()) > + if (sev_active() || hv_is_isolation_supported()) > return 0; > > /* > @@ -611,7 +612,7 @@ int arch_kexec_post_alloc_pages(void *vaddr, unsigned int pages, gfp_t gfp) > > void arch_kexec_pre_free_pages(void *vaddr, unsigned int pages) > { > - if (sev_active()) > + if (sev_active() || hv_is_isolation_supported()) > return; You might want to take a look through the "protected guest" patches. I think this series is touching a few of the same locations that TDX and recent SEV work touch. https://lore.kernel.org/lkml/20210618225755.662725-5-sathyanarayanan.kuppuswamy@xxxxxxxxxxxxxxx/