Re: [Xen-devel] [PATCH 10/10] vpci/sriov: add support for SR-IOV capability

[Roger Pau Monné <roger.pau@xxxxxxxxxx>]

On Tue, Jul 03, 2018 at 04:56:38AM -0600, Jan Beulich wrote:
> >>> On 03.07.18 at 12:51, <roger.pau@xxxxxxxxxx> wrote:
> > I don't think we ever want to allow DomU-s to manage the SR-IOV
> > capability, so this code is always going to be Dom0 only AFAICT. In
> > fact I think I'm going to add an assert to that effect in the SR-IOV
> > init handler.
> 
> Did you consider nested virt here?

I can see this making more sense for nested virt, still it's going to
require a non-trivial amount of work to make SR-IOV safe for DomUs to
manage, not to mention that DomUs would then be able to make pci
devices (VFs) appear and disappear, and likely collide with existing
devices?

In any case, I can see about pausing the vcpu and resuming after the
timeout, doesn't seem that complex.

Thanks, Roger.

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxxx
https://lists.xenproject.org/mailman/listinfo/xen-devel