Received: by 2002:a6b:fb09:0:0:0:0:0 with SMTP id h9csp611254iog; Fri, 24 Jun 2022 10:11:21 -0700 (PDT) X-Google-Smtp-Source: AGRyM1tqTyEN5xv/GQ7DRNl+kPjg0vhS95D79tftkLuJShKpf0LZSCmj0l+tv+Q4gS3+3mGS4bJL X-Received: by 2002:a17:902:bcc8:b0:16a:5da8:4288 with SMTP id o8-20020a170902bcc800b0016a5da84288mr70409pls.25.1656090681203; Fri, 24 Jun 2022 10:11:21 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1656090681; cv=none; d=google.com; s=arc-20160816; b=kr5RwZVb/p5r+J6Mdfz7HR2RhpUjUQzr2z5DEVbW/atyQmwJerpP90fqcgHSJh3rJs 9rUO/93uXqfKuf9a68qCF/niDEcXPMwC1yhcFv8tvYUh2GLcWJP7bOKMKwS2cTlcQcqo /EVD3gQJC5nKMcVr7wKvMmZNBc0HGx082sBB5ik48yOcRN9bNRqlprjTKX/audSh4f1p ACZXVYrJfqekZDKjMBqojUa/czWKw1/K7i82t5sNUvMXRNDXP9V4jB+qAwypoCaTysIb i+9LkWu5+G394ulkZR5iAYMEoI5Zw96gZJuyL6ZxvvZfrr10copzEM060K4kdUwmXK9f NhPw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:content-transfer-encoding:in-reply-to:from :references:cc:to:content-language:subject:user-agent:mime-version :date:message-id:dkim-signature; bh=PNb2d4BiRWa2c4m89aQRa7KjeX9awPfQRNnY1KLRrFk=; b=ElNuuGvozm4oKuB+Pi0jMfncgA9g/llenHAmMy9R3bZuKyXPsmqTqrGWllDNLgn1Ie bwZgn0VH0JQn5SK48HUGfgifhiZIsHGxazsHwnqXaXcxm6m7XqtUAL6DV/QJPXEKbmyD bu5POu1FX28VesXb8swv+zRmSC6B+t1H5QKkUL0PPvYVxw4kHTRuwhg49wivY5TnExUH SZzEqr3YiOBDVOa4eQZEwvFDI6cqN9G6/PMgOhfzhzX8ujqJ1h9II/jdcd/6p86HPmZu wIJh+zGtENcy924fJQB+OynGfwNlsNPOKUDEI8xHHXLN9yV6iG2lYamjWdtyHGn4hjpQ H+HQ== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@intel.com header.s=Intel header.b=eqKfB7CQ; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=intel.com Return-Path: Received: from out1.vger.email (out1.vger.email. [2620:137:e000::1:20]) by mx.google.com with ESMTP id y6-20020a170902b48600b00163efcfadedsi3445307plr.255.2022.06.24.10.11.00; Fri, 24 Jun 2022 10:11:21 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20; Authentication-Results: mx.google.com; dkim=pass header.i=@intel.com header.s=Intel header.b=eqKfB7CQ; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=intel.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S231888AbiFXRKD (ORCPT + 99 others); Fri, 24 Jun 2022 13:10:03 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:32954 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S231833AbiFXRKB (ORCPT ); Fri, 24 Jun 2022 13:10:01 -0400 Received: from mga17.intel.com (mga17.intel.com [192.55.52.151]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id CF42951E7E; Fri, 24 Jun 2022 10:10:00 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=intel.com; i=@intel.com; q=dns/txt; s=Intel; t=1656090600; x=1687626600; h=message-id:date:mime-version:subject:to:cc:references: from:in-reply-to:content-transfer-encoding; bh=bgbQFlCVdpCMNcHSrhnw0vtteZ74+vzwjmr94U9FKJs=; b=eqKfB7CQnG4RNgSwzJIoVcZwNm2i1chrqdILFZOemMrsLUNW9Z4xODT9 flbWCJR+vsvBDSeXSeKCMf6Lw14iT203WAf+mJdTjy1ghADJqXy2u7OfX dSU3HOYEBIEFznRzrClIsUByMdKFasv2FpDrlDdMsqOkEalKGlzoiEG78 ZYM9iD+IlDcld/oD35Waq8cJT0yN3FdUe/TrcJLe/n67loM0vf9KLY7i1 VCJqBZ8w/LQlpJrLwcXQZZMufBumG0swcYQFrIJNBLe8/5lEsDtYC7T1Q YcBMWKjopM1OmpXcwXuN0kFXbpEs3JNyjO72xMdk2h/7sehHj3CP8FyqM w==; X-IronPort-AV: E=McAfee;i="6400,9594,10388"; a="261468653" X-IronPort-AV: E=Sophos;i="5.92,218,1650956400"; d="scan'208";a="261468653" Received: from fmsmga001.fm.intel.com ([10.253.24.23]) by fmsmga107.fm.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 24 Jun 2022 10:10:00 -0700 X-IronPort-AV: E=Sophos;i="5.92,218,1650956400"; d="scan'208";a="731398263" Received: from mdedeogl-mobl.amr.corp.intel.com (HELO [10.209.126.186]) ([10.209.126.186]) by fmsmga001-auth.fm.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 24 Jun 2022 10:09:59 -0700 Message-ID: Date: Fri, 24 Jun 2022 10:09:24 -0700 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Thunderbird/91.9.1 Subject: Re: [PATCHv7 00/14] mm, x86/cc: Implement support for unaccepted memory Content-Language: en-US To: Marc Orr Cc: Peter Gonda , "Kirill A. Shutemov" , Borislav Petkov , Andy Lutomirski , Sean Christopherson , Andrew Morton , Joerg Roedel , Ard Biesheuvel , Andi Kleen , Kuppuswamy Sathyanarayanan , David Rientjes , Vlastimil Babka , Tom Lendacky , Thomas Gleixner , Peter Zijlstra , Paolo Bonzini , Ingo Molnar , Varad Gautam , Dario Faggioli , Mike Rapoport , David Hildenbrand , Marcelo , tim.gardner@canonical.com, Khalid ElMously , philip.cox@canonical.com, the arch/x86 maintainers , linux-mm@kvack.org, linux-coco@lists.linux.dev, linux-efi@vger.kernel.org, LKML References: <20220614120231.48165-1-kirill.shutemov@linux.intel.com> <5af19000-4482-7eb9-f158-0a461891f087@intel.com> From: Dave Hansen In-Reply-To: Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-Spam-Status: No, score=-5.0 required=5.0 tests=BAYES_00,DKIMWL_WL_HIGH, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,NICE_REPLY_A, RCVD_IN_DNSWL_MED,SPF_HELO_NONE,SPF_NONE,T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On 6/24/22 10:06, Marc Orr wrote: > I think Peter's point is a little more nuanced than that. Once lazy > accept goes into the guest firmware -- without the feature negotiation > that Peter is suggesting -- cloud providers now have a bookkeeping > problem. Which images have kernels that can boot from a guest firmware > that doesn't pre-validate all the guest memory? Hold on a sec though... Is this a matter of can boot from a guest firmware that doesn't pre-validate all the guest memory? or can boot from a guest firmware that doesn't pre-validate all the guest memory ... with access to all of that guest's RAM? In other words, are we talking about "fails to boot" or "can't see all the RAM"?