nVMX: APICv seems to cause breakages
Hi all,
we just started a test with Jailhouse in a VM on a decently recent Intel box. It has APICv / posted interrupts support. And it breaks Jailhouse activation (L1 breakage, host seems to be fine). Loading kvm-intel with enable_apicv=0 resolves the issue. Henning started to debug from Jailhouse POV and found out it may be NMI IPI related. We will try to dig deeper, but any support is welcome regarding the APICv specialties.
Could this also explain some of the incompatibilities you found, Yang? Maybe you want to check if more hypervisor work when APICv is off.
Jan
Signature · 2 lines
Siemens AG, Corporate Technology, CT RTC ITP SES-DE Corporate Competence Center Embedded Linux
Jan Kiszka wrote on 2014-10-20:
Quoted 8 lines
Hi all,
we just started a test with Jailhouse in a VM on a decently recent Intel box. It has APICv / posted interrupts support. And it breaks Jailhouse activation (L1 breakage, host seems to be fine). Loading kvm-intel with enable_apicv=0 resolves the issue. Henning started to debug from Jailhouse POV and found out it may be NMI IPI related. We will try to dig deeper, but any support is welcome regarding the APICv specialties.
It is interesting. I will spend some time to look this issue too.
Quoted 2 lines
Could this also explain some of the incompatibilities you found, Yang?
Maybe, I will do a double check.
Quoted 4 lines
Maybe you want to check if more hypervisor work when APICv is off.
Jan
Best regards,
Yang
Quoted 11 lines · Jan Kiszka
Hi all,
we just started a test with Jailhouse in a VM on a decently recent Intel box. It has APICv / posted interrupts support. And it breaks Jailhouse activation (L1 breakage, host seems to be fine). Loading kvm-intel with enable_apicv=0 resolves the issue. Henning started to debug from Jailhouse POV and found out it may be NMI IPI related. We will try to dig deeper, but any support is welcome regarding the APICv specialties.
Could this also explain some of the incompatibilities you found, Yang? Maybe you want to check if more hypervisor work when APICv is off.
I will check it tomorrow. ;-)
Regards,
Wanpeng Li
Quoted 2 lines
Jan