Hi, On 06/03/2025 22:03, Jason Andryuk wrote:
With a split hardware and control domain, the control domain may still want and xenstore access. Currently this relies on init-dom0less to seed the grants. This is problematic since we don't want hardware domain to be able to map the control domain's resources. Instead have the hypervisor see the grant table entry. The grant is then accessible as normal.
I am probably missing something, but why would run xenstored in the hardware domain rather than the control domain? Isn't xenstored more related to the VM management than HW?
Cheers, -- Julien Grall
