[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [PATCH v1 26/28] docs: add coverage for svm_avic=
- To: Jan Beulich <jbeulich@xxxxxxxx>
- From: dmukhin@xxxxxxxx
- Date: Thu, 5 Nov 2026 12:22:05 -0800
- Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 205.220.161.53) smtp.rcpttodomain=lists.xenproject.org smtp.mailfrom=ford.com; dmarc=pass (p=reject sp=reject pct=100) action=none header.from=ford.com; dkim=pass (signature was verified) header.d=saarlouis.ford.com; dkim=pass (signature was verified) header.d=ford.com; arc=none (0)
- Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=ve0Ydx3Hqgjq+XMCE7y3EJ0sh0FLCsw2yxkIN7KZfw8=; b=wh57s4LmW2V7iDsLLB1VFjPTZ2Vz47thPFf3a+tJ6D9wXraf731+VMly1K9ZtybtYSYMGvHAMGeYz/CDFPk5CIiFLVeoXvbj1rn6nhctu08DTQ2c4yicj04jkFtw1BcQzxU3N13Lra0s28U0VcXP+PasKkfcFJY4hbQD7Fn742aCFXxQ9SSyd077GVgEyQEZqfyldE0/cgMd7wKUhGxsXIcrdmfRzKNeO77tBsh+oaeeImYj/zhaB+tlrKUzchtLRNbzj9giiAIyo6S+QMUU7bLt7xMONhdLUigVJS54Mvo09zyOH1EZT/bjPh+F018CM/pEfjkgx838soaiz7jLQw==
- Arc-seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=y3dNkacPb3RkpjnCsej+toBGgEV8O7eeRFIf3x5U5TYq87UruMyW6pSbIkZzrN3g4fWsHxw/IvmOkGkXP3B+PJAoH6+Zyx9bY76eT4mQOzLBndXI1dZy4SiwAzmZGvPu0VZbnQZwmFotTgB2sgEoc9i/tuvH84k9R7NcvvA8lIS3NZz7KUmlnD6R4IL/ZFei7PUgvSPbjcwE9Vzb4VZw3RmkJlZjDSZ38hw7IgJU/Jjxijz3UjvuCbLeeqlCD5w4VV3XD8ZrFU6F4AUNxJ77DXYzDFUAky96EjDdC4Q9fz60L+ldgvYmL5+eSFByu1AKjl3lHeYdJjC8rwraZy7x5A==
- Authentication-results: eu.smtp.expurgate.cloud; dkim=pass header.s=ppford header.d=ford.com header.i="@ford.com" header.h="Cc:Content-Type:Date:From:In-Reply-To:Message-ID:MIME-Version:References:Subject:To"; dkim=pass header.s=selector2-azureford-onmicrosoft-com header.d=azureford.onmicrosoft.com header.i="@azureford.onmicrosoft.com" header.h="From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck"; dkim=pass header.s=ppserprodsaar header.d=saarlouis.ford.com header.i="@saarlouis.ford.com" header.h="Cc:Content-Type:Date:From:In-Reply-To:Message-ID:MIME-Version:References:Subject:To"; dkim=pass header.s=ppfserpocford header.d=ford.com header.i="@ford.com" header.h="Cc:Content-Type:Date:From:In-Reply-To:Message-ID:MIME-Version:References:Subject:To"
- Cc: dmukhin@xxxxxxxx, andrew.cooper3@xxxxxxxxxx, jason.andryuk@xxxxxxx, roger@xxxxxxxxxxxxxx, teddy.astie@xxxxxxxxxx, xen-devel@xxxxxxxxxxxxxxxxxxxx
- Delivery-date: Thu, 05 Nov 2026 20:22:26 +0000
- List-id: Xen developer discussion <xen-devel.lists.xenproject.org>
- Pser-m365-app: SER-APP
On Thu, Nov 05, 2026 at 09:24:09AM +0100, Jan Beulich wrote:
> On 05.11.2026 02:33, dmukhin@xxxxxxxx wrote:
> > @@ -2673,6 +2673,27 @@ On Sappire and Emerald Rapids CPUs with May 2025
> > microcode or later, the
> > `ibpb-alt=` option can be used to switch to the alternative mitigation for
> > Intel SA-00982. Intel suggest that some workloads will benefit from this.
> >
> > +### svm_avic (x86)
> > +> `= true | false | nodoorbell`
> > +
> > +This option configures Advanced Virtual Interrupt Controller (AVIC), which
> > +is an extension of AMD Secure Virtual Machine (SVM) to virtualize local
> > APIC
> > +for guest VM.
> > +
> > +This parameter is experimental and for expert configuration only.
> > +
> > +Xen has mitigatations for the following AVIC hardware flaws:
>
> Nit: mitigations
>
> > + * AMD Erratum 1235. A hardware flaw affecting certain AMD Family 17h and
> > + Hygon Family 18h processors where the CPU hardware reads a stale
> > + `IsRunning=1` bit during Interrupt Control Register (ICR) write
> > emulation.
> > +
> > +Limitations:
> > +
> > + * AVIC in x2APIC mode is not supported.
> > +
> > + * AVIC in nested virtualization setup is not supported.
> > +
> > ### sync_console
> > > `= <boolean>`
>
> This wants to be part of the patch where the option is introduced. New options
I introduced 'svm_avic=nodoorbell' later in the series, after
svm_avic= appears for the first time. So my thinking was to document
all new options in one patch...
> also want to use dashes in favor of underscores. Plus the default setting of
> this option wants making explicit.
Will switch to dashes.
>
> Jan
>
|