[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [RFC PATCH] xen/kconfig: allow LATE_HWDOM config for ARM


  • To: "Daniel P. Smith" <dpsmith@xxxxxxxxxxxxxxxxxxxx>, Julien Grall <julien@xxxxxxx>, Sergiy Kibrik <Sergiy_Kibrik@xxxxxxxx>, <xen-devel@xxxxxxxxxxxxxxxxxxxx>
  • From: Michal Orzel <michal.orzel@xxxxxxx>
  • Date: Wed, 18 Dec 2024 12:04:14 +0100
  • Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 165.204.84.17) smtp.rcpttodomain=apertussolutions.com smtp.mailfrom=amd.com; dmarc=pass (p=quarantine sp=quarantine pct=100) action=none header.from=amd.com; dkim=none (message not signed); arc=none (0)
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=W6oyg3UAEEoS6KmfSIKZS/ox7qYB9qUdjW8ynVgWaGw=; b=bjtTvmyUnxrslL0ovYAC0L0liGA86qLET3++KgpmCZdVnQ8AXp7ZhDP8L10UFOFW/gp2OrtxRuVCUZW+oS3BWi5tLtZQM8f8JVJLluxT5pK9cwvBIwF/VaBnrXhM30zd71B6E0VWEY7nJxUIR/6+cExUlEMxVJhLZAWQxqyxddc6bKfXm71ByTpW3cRaGRw7djjnlP8X4/yQFQKdvfPI17svu5kJ/9vCn0yPyBi5XhnQvqWz+1ua9xnNHbgQhDBsdbGgsmpx+450nDm8ZtQVNaLVkxnK9ywuWQhlhF3mtqpZYtHhGTsRF4d92Mc/q27QWyG2AiaaO18B77ssICDX1Q==
  • Arc-seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=vgxgkXDHz27Eb2cY8rrFXLoxjTElOKMZFgWLOj4/h5uHXla+RE4+KT5P0rVWpNb+RXkZnEsWArEtAEHsOhxXu65/7tjGQIwTP+uFrKeLuhtuxQVlMRCMNV7/5jvIgcqxQYYCi7MbcMXrRm3NG/npUGfZZKifFGUskIswWnPyYI2WvtRBjWEeV4o7TIXKe1oMWroL/MmPfsMdP4JdgrKUT+lBNgongav/ie3aB3SEkORBRFH+w6jOMmIbCUklIEHRHkkSjJCYAmoo6LjZHXIyYi55gju/L5N9Jmh8fUZk4Rstpthp2n2gnqvFuNi6Lxq00LNRVfDDag7xXqWNNKMX1w==
  • Cc: Andrew Cooper <andrew.cooper3@xxxxxxxxxx>, Anthony PERARD <anthony.perard@xxxxxxxxxx>, Jan Beulich <jbeulich@xxxxxxxx>, Roger Pau Monné <roger.pau@xxxxxxxxxx>, Stefano Stabellini <sstabellini@xxxxxxxxxx>
  • Delivery-date: Wed, 18 Dec 2024 11:04:40 +0000
  • List-id: Xen developer discussion <xen-devel.lists.xenproject.org>

Hi Daniel,

On 18/12/2024 02:17, Daniel P. Smith wrote:
> 
> 
>> On 17/12/2024 11:47, Sergiy Kibrik wrote:
>>> Allow to build ARM configuration with support for initializing
>>> hardware domain.
>>> On ARM it is only possible to start hardware domain in multiboot mode, so
>>> dom0less support is required. This is reflected by dependency on
>>> DOM0LESS_BOOT
>>> instead of directly depending on ARM config option.
> 
> 
> Just to make sure my assumption is correct, you are looking to do a
> multi-domain construction at boot time, with at least two domains. One
> of those two domains is the "control domain" and one is the "hardware
> domain", aka late hwdom except it's not constructed "late".
> 
> If you want such a configuration, I would highly recommend you first
> enable setting flask labels via dom0less (assuming it is not there)
Speaking about dom0less and FLASK. A year ago, I did sent you (privately, 
through
AMD hyperlaunch collab) my attempt to add minimal steps to enable setting FLASK 
policy
for dom0less domUs. You then told me that you have a slightly different vision 
on how it
should be done. Any update with that regard? TBH I though that you're going to 
add this
support together with other hyperlaunch patches.

For others reference, I attach my patch created back then allowing to specify 
FLASK labels
for boot-time domUs, which I used to assign different FLASK roles for them.

~Michal

Attachment: dom0less-flask-support.patch
Description: Text document


 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.