On 2/14/23 00:57, Huang, Kai wrote: > Consider this case: > > 1) KVM does VMXON for all online cpus (a VM created) > 2) Another kernel component is calling tdx_enable() > 3) KVM does VMXOFF for all online cpus (last VM is destroyed) Doctor, it hurts when I... Then let's just call tdx_enable() from other kernel components. Kai, I'm worried that this is, again, making things more complicated than they have to be.