[RFC] secure boot: is it necessary to let qemu verify EDK2 efi file

2020-06-28 Thread Zhangbo (Oscar)
Hi all:     Secure boot for virtual machine NOWADAYS starts from edk2’s vBIOS, which verifies guest OS’s shim/grub2. Then grub2 verifies guest OS’s kernel.   From the view of the whole complete trust chain, the GUEST part is disconnected from the HOST part, as the verification of vBIOS is missing

[Qemu-devel] CC wangxiongfeng. RE: [PATCH] pcie: fix device unplug timeout

2019-07-25 Thread Zhangbo (Oscar)
>> If the linux kernel only receives an ABP event during pcie unplug, it will >> sleep 5s >> to expect a PDC event, which will cause device unplug timeout. > >My understanding is that there's no timeout. Spec says: > If present, the Power Indicator provides visual feedback to the human >oper

[Qemu-devel] CC wangxiongfeng. : RE: [PATCH] pcie: fix device hotplug failure at the meantime of VM boot

2019-07-24 Thread Zhangbo (Oscar)
>> If the PCI_EXP_LNKSTA_DLLLA capability is set by default, linux kernel will >> send >> PDC event to detect whether there is a device in pcie slot. If a device is >> pluged >> in the pcie-root-port at the same time, hot-plug device will send ABP + PDC >> events to the kernel. The VM kernel will

Re: [Qemu-devel] [PATCH] pcie: fix device hotplug failure at the meantime of VM boot

2019-07-23 Thread Zhangbo (Oscar)
>-Original Message- >From: Philippe Mathieu-Daudé [mailto:phi...@redhat.com] >Sent: Tuesday, July 23, 2019 5:18 PM >To: Zhangbo (Oscar) ; qemu-devel@nongnu.org >Cc: fangying ; dengkai (A) ; >limingwang (A) ; m...@redhat.com >Subject: Re: [Qemu-devel] [PATCH] pci

[Qemu-devel] [PATCH v2] pcie: fix device unplug timeout

2019-07-23 Thread Zhangbo (Oscar)
If the linux kernel only receives an ABP event during pcie unplug, it will sleep 5s to expect a PDC event, which will cause device unplug timeout. In the meanwhile, if the kernel only receives a PDC event during the unplug, it will wait for at least 1 second before checking card present as data

[Qemu-devel] [PATCH v2] pcie: fix device hotplug failure at the meantime of VM boot

2019-07-23 Thread Zhangbo (Oscar)
If the PCI_EXP_LNKSTA_DLLLA capability is set by default, linux kernel will send PDC event to detect whether there is a device in pcie slot. If a device is pluged in the pcie-root-port at the same time, hot-plug device will send ABP + PDC events to the kernel. The VM kernel will wrongly unplug t

[Qemu-devel] [PATCH] pcie: fix device unplug timeout

2019-07-23 Thread Zhangbo (Oscar)
If the linux kernel only receives an ABP event during pcie unplug, it will sleep 5s to expect a PDC event, which will cause device unplug timeout. In the meanwhile, if the kernel only receives a PDC event during the unplug, it will wait for at least 1 second before checking card present as data

[Qemu-devel] [PATCH] pcie: fix device hotplug failure at the meantime of VM boot

2019-07-23 Thread Zhangbo (Oscar)
If the PCI_EXP_LNKSTA_DLLLA capability is set by default, linux kernel will send PDC event to detect whether there is a device in pcie slot. If a device is pluged in the pcie-root-port at the same time, hot-plug device will send ABP + PDC events to the kernel. The VM kernel will wrongly unplug t

[Qemu-devel] Discussion: redundant process during hotplug and missed process during unplug

2019-07-18 Thread Zhangbo (Oscar)
Hi All: I have 2 questions about (un)hotplug on pcie-root-port. First Question (hotplug failure because of redundant PCI_EXP_LNKSTA_DLLLA bit set): during VM boot, qemu sets PCI_EXP_LNKSTA_DLLLA according to this process: pcie_cap_init() -> pcie_cap_v1_fill(), even if there's no p

Re: [Qemu-devel] [Qemu-block] question: Does qemu-pr-helper have its own log files?

2019-04-23 Thread Zhangbo (Oscar)
>From: Stefan Hajnoczi [mailto:stefa...@gmail.com] >Sent: Tuesday, April 23, 2019 9:57 PM >On Tue, Apr 23, 2019 at 11:12:40AM +0800, Jie Wang wrote: >>  Does qemu-pr-helper have its own log files? > >No, it does not. qemu-pr-helper uses stderr for errors and there is not >much output during normal

Re: [Qemu-devel] [libvirt] Can jobs suck like qemu-pr-helper does be transfered to libvirtd?

2019-04-01 Thread Zhangbo (Oscar)
>[...] > >> >>This does not play well with the fact that processes as the PR helper >> >>are always required. >> >> >> >>Merging them into libvirtd would make the VM stop until libvirtd is >> >>running again. Additionally if any of the operations require persistent >> >>kernel state as e.g. file de

[Qemu-devel] 'sys_rawio' selinux alarm triggered while doing SCSI reservation inside the guest

2019-01-23 Thread Zhangbo (Oscar)
When performing SCSI reservation inside the guest, 'sys_rawio' selinux alarm is triggered, shown as below: "type=AVC msg=audit(1548231520.416:8086): avc: denied { sys_rawio } for pid=30357 comm="worker" capability=17 scontext=system_u:system_r:svirt_t:s0:c72,c348 tcontext=system_u:system_r:svir

[Qemu-devel] 答复: What's the advantages of POSTCOPY over CPU-THROTTLE?

2016-01-06 Thread Zhangbo (Oscar)
ny other prices we need to pay to have postcopy? -邮件原件- 发件人: Jason J. Herne [mailto:jjhe...@linux.vnet.ibm.com] 发送时间: 2016年1月7日 3:43 收件人: Dr. David Alan Gilbert; Zhangbo (Oscar) 抄送: zhouyimin Zhou(Yimin); Zhanghailiang; Yanqiangjun; Huangpeng (Peter); qemu-devel@nongnu.org; Heron

[Qemu-devel] What's the advantages of POSTCOPY over CPU-THROTTLE?

2016-01-06 Thread Zhangbo (Oscar)
Hi all:   Postcopy is suitable for migrating guests which have large page change rates. It 1 makes the guest run at the destination ASAP. 2 makes the downtime of the guest small enough. If we don't take the 1st advantage into account, then, its benefit seems similar with CPU-THROTTLE