Re: [PATCH XEN] tools: Update files examples PV&PVH with pygrub.

[Alexandre GRIVEAUX <agriveaux@xxxxxxxxxxxx>]

Le 14/01/2026 à 08:43, Jürgen Groß a écrit :

> Yes. This
>       is why I don't like the wording "inside guest", which is just not
>       
>       true. 
>

Before wasting more time for that side, there is chroot with bind-mount of DomU FS.

Rephrasing like this should be more than enough:

# Enable to use a grub2 emulation boot instead of direct kernel boot. 

>       Please be aware that we are trying to phase out pygrub, as it
>       widens the
>       
>       attack surface of dom0 from a guest. pygrub needs to look into
>       guest
>       
>       controlled file systems, so any bug in the related code (e.g.
>       failure to
>       
>       handle a corrupted or maliciously modified file system) might
>       result in
>       
>       security issues like code injection. 
>

Effectively, if pygrub is on verge of being phased out, there is not need for this patch...

But could you point me to the discussion of alternatives ? As pygrub allow a more easy management...

Should this be noted to the wiki ?

>       So I'm on the edge whether we really should make it easier to use
>       pygrub. 
>     
    Legit, Should patch subject need to be [RFC PATCH] ?
>       
>       Juergen
>       
>

Thanks.