KVM for x86 systems¶
- Secure Encrypted Virtualization (SEV)
- KVM CPUID bits
- Known limitations of CPU virtualization
- Linux KVM Hypercall
- Intel Trust Domain Extensions (TDX)
- The x86 kvm shadow mmu
- KVM-specific MSRs
- Nested VMX
- Running nested guests with KVM
- Design of TDP MMU for TDX support
- Background of TDX
- The basic idea for TDX support
- Tracking private EPT page
- The conversion of private GPA and shared GPA
- The original TDP MMU and race condition
- Co-existing with unmapping guest private memory
- Optimizing TLB flush
- Restrictions or future work
- Timekeeping Virtualization for X86-Based Architectures