> > Description > > ---------------------------------------------------------------------- > > IOMMU subsystem may contain state that is in gigabytes. Majority of that > > state is iommu page tables. Yet, there is currently, no way to observe > > how much memory is actually used by the iommu subsystem. > > > > This patch series solves this problem by adding both observability to > > all pages that are allocated by IOMMU, and also accountability, so > > admins can limit the amount if via cgroups. > > > > The system-wide observability is using /proc/meminfo: > > SecPageTables: 438176 kB > > > > Contains IOMMU and KVM memory. > > Can you please clarify what does KVM memory refers to here ? > Does it mean the VFIO map / virtio-iommu invoked ones for a guest VM? This means that nested page tables that are managed by KVM, and device page tables that are managed by IOMMU are all accounted in SecPageTables (secondary page tables). The decision to account them both in one field of meminfo was made at LPC'23. Pasha
