[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [RFC PATCH] xen/kconfig: allow LATE_HWDOM config for ARM
- To: "Daniel P. Smith" <dpsmith@xxxxxxxxxxxxxxxxxxxx>, Julien Grall <julien@xxxxxxx>, Sergiy Kibrik <Sergiy_Kibrik@xxxxxxxx>, <xen-devel@xxxxxxxxxxxxxxxxxxxx>
- From: Michal Orzel <michal.orzel@xxxxxxx>
- Date: Wed, 18 Dec 2024 12:04:14 +0100
- Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 165.204.84.17) smtp.rcpttodomain=apertussolutions.com smtp.mailfrom=amd.com; dmarc=pass (p=quarantine sp=quarantine pct=100) action=none header.from=amd.com; dkim=none (message not signed); arc=none (0)
- Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=W6oyg3UAEEoS6KmfSIKZS/ox7qYB9qUdjW8ynVgWaGw=; b=bjtTvmyUnxrslL0ovYAC0L0liGA86qLET3++KgpmCZdVnQ8AXp7ZhDP8L10UFOFW/gp2OrtxRuVCUZW+oS3BWi5tLtZQM8f8JVJLluxT5pK9cwvBIwF/VaBnrXhM30zd71B6E0VWEY7nJxUIR/6+cExUlEMxVJhLZAWQxqyxddc6bKfXm71ByTpW3cRaGRw7djjnlP8X4/yQFQKdvfPI17svu5kJ/9vCn0yPyBi5XhnQvqWz+1ua9xnNHbgQhDBsdbGgsmpx+450nDm8ZtQVNaLVkxnK9ywuWQhlhF3mtqpZYtHhGTsRF4d92Mc/q27QWyG2AiaaO18B77ssICDX1Q==
- Arc-seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=vgxgkXDHz27Eb2cY8rrFXLoxjTElOKMZFgWLOj4/h5uHXla+RE4+KT5P0rVWpNb+RXkZnEsWArEtAEHsOhxXu65/7tjGQIwTP+uFrKeLuhtuxQVlMRCMNV7/5jvIgcqxQYYCi7MbcMXrRm3NG/npUGfZZKifFGUskIswWnPyYI2WvtRBjWEeV4o7TIXKe1oMWroL/MmPfsMdP4JdgrKUT+lBNgongav/ie3aB3SEkORBRFH+w6jOMmIbCUklIEHRHkkSjJCYAmoo6LjZHXIyYi55gju/L5N9Jmh8fUZk4Rstpthp2n2gnqvFuNi6Lxq00LNRVfDDag7xXqWNNKMX1w==
- Cc: Andrew Cooper <andrew.cooper3@xxxxxxxxxx>, Anthony PERARD <anthony.perard@xxxxxxxxxx>, Jan Beulich <jbeulich@xxxxxxxx>, Roger Pau Monné <roger.pau@xxxxxxxxxx>, Stefano Stabellini <sstabellini@xxxxxxxxxx>
- Delivery-date: Wed, 18 Dec 2024 11:04:40 +0000
- List-id: Xen developer discussion <xen-devel.lists.xenproject.org>
Hi Daniel,
On 18/12/2024 02:17, Daniel P. Smith wrote:
>
>
>> On 17/12/2024 11:47, Sergiy Kibrik wrote:
>>> Allow to build ARM configuration with support for initializing
>>> hardware domain.
>>> On ARM it is only possible to start hardware domain in multiboot mode, so
>>> dom0less support is required. This is reflected by dependency on
>>> DOM0LESS_BOOT
>>> instead of directly depending on ARM config option.
>
>
> Just to make sure my assumption is correct, you are looking to do a
> multi-domain construction at boot time, with at least two domains. One
> of those two domains is the "control domain" and one is the "hardware
> domain", aka late hwdom except it's not constructed "late".
>
> If you want such a configuration, I would highly recommend you first
> enable setting flask labels via dom0less (assuming it is not there)
Speaking about dom0less and FLASK. A year ago, I did sent you (privately,
through
AMD hyperlaunch collab) my attempt to add minimal steps to enable setting FLASK
policy
for dom0less domUs. You then told me that you have a slightly different vision
on how it
should be done. Any update with that regard? TBH I though that you're going to
add this
support together with other hyperlaunch patches.
For others reference, I attach my patch created back then allowing to specify
FLASK labels
for boot-time domUs, which I used to assign different FLASK roles for them.
~Michal
Attachment:
dom0less-flask-support.patch
Description: Text document
|