From: Isaku Yamahata <isaku.yamah...@intel.com> For TDX KVM use case, Linux guest is the most major one. It requires sept_ve_disable set. Make it default for the main use case. For other use case, it can be enabled/disabled via qemu command line.
Signed-off-by: Isaku Yamahata <isaku.yamah...@intel.com> Signed-off-by: Xiaoyao Li <xiaoyao...@intel.com> Reviewed-by: Daniel P. Berrangé <berra...@redhat.com> Reviewed-by: Zhao Liu <zhao1....@intel.com> --- target/i386/kvm/tdx.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/target/i386/kvm/tdx.c b/target/i386/kvm/tdx.c index 370bd86f2ca7..2ed40b76141a 100644 --- a/target/i386/kvm/tdx.c +++ b/target/i386/kvm/tdx.c @@ -288,7 +288,7 @@ static void tdx_guest_init(Object *obj) qemu_mutex_init(&tdx->lock); cgs->require_guest_memfd = true; - tdx->attributes = 0; + tdx->attributes = TDX_TD_ATTRIBUTES_SEPT_VE_DISABLE; object_property_add_uint64_ptr(obj, "attributes", &tdx->attributes, OBJ_PROP_FLAG_READWRITE); -- 2.43.0