From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by smtp.lore.kernel.org (Postfix) with ESMTP id 5BE22C00140 for ; Wed, 24 Aug 2022 09:46:46 +0000 (UTC) Received: by kanga.kvack.org (Postfix) id ED1136B0073; Wed, 24 Aug 2022 05:46:45 -0400 (EDT) Received: by kanga.kvack.org (Postfix, from userid 40) id E59516B0074; Wed, 24 Aug 2022 05:46:45 -0400 (EDT) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id CFAF7940007; Wed, 24 Aug 2022 05:46:45 -0400 (EDT) X-Delivered-To: linux-mm@kvack.org Received: from relay.hostedemail.com (smtprelay0013.hostedemail.com [216.40.44.13]) by kanga.kvack.org (Postfix) with ESMTP id BFBF36B0073 for ; Wed, 24 Aug 2022 05:46:45 -0400 (EDT) Received: from smtpin14.hostedemail.com (a10.router.float.18 [10.200.18.1]) by unirelay08.hostedemail.com (Postfix) with ESMTP id 95B1114023A for ; Wed, 24 Aug 2022 09:46:45 +0000 (UTC) X-FDA: 79834006770.14.11B4837 Received: from mga17.intel.com (mga17.intel.com [192.55.52.151]) by imf05.hostedemail.com (Postfix) with ESMTP id 8631E100043 for ; Wed, 24 Aug 2022 09:46:44 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=intel.com; i=@intel.com; q=dns/txt; s=Intel; t=1661334404; x=1692870404; h=date:from:to:cc:subject:message-id:reply-to:references: mime-version:in-reply-to; bh=8HINI0FFOmHZ98p+KrUxRjOuWiCSe4IMz6bvZat9QRk=; b=m/tMSnf8pWfNA7UbJAqZ7RVa0fUJQWtcSNeTxAR4EtC5PdLNKYWVunis iJLAIOf9gOZp4rZ3yNrgtlLyOQaCI0TxfziTHHFn6zYfD5+LNcPxVeS9H dLbkcjgNneZ+Ewz2FNz5Ppe8d/K6O/lfson1Zz/cBxGDsG9AMEkc6SGmM QvpDr8+CcyevEVpatHUaCltqAEnAc64rA8vKKqqXLSsyhKp0vRJZj+424 QLGyw7hA0aoGBBrWLjmA3JJlDGSONLyxrYJ6PMCabBkL3BQmVvynpm66A h04BdH6I7OiVlNzO9yJfLQKhe3boDyvbtXs4iaEKBiSE6pjCO3KOCUPsm A==; X-IronPort-AV: E=McAfee;i="6500,9779,10448"; a="274309329" X-IronPort-AV: E=Sophos;i="5.93,260,1654585200"; d="scan'208";a="274309329" Received: from orsmga007.jf.intel.com ([10.7.209.58]) by fmsmga107.fm.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 24 Aug 2022 02:46:43 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.93,260,1654585200"; d="scan'208";a="605977030" Received: from chaop.bj.intel.com (HELO localhost) ([10.240.193.75]) by orsmga007.jf.intel.com with ESMTP; 24 Aug 2022 02:46:32 -0700 Date: Wed, 24 Aug 2022 17:41:49 +0800 From: Chao Peng To: Sean Christopherson Cc: David Hildenbrand , Hugh Dickins , "Kirill A . Shutemov" , kvm@vger.kernel.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org, linux-fsdevel@vger.kernel.org, linux-api@vger.kernel.org, linux-doc@vger.kernel.org, qemu-devel@nongnu.org, linux-kselftest@vger.kernel.org, Paolo Bonzini , Jonathan Corbet , Vitaly Kuznetsov , Wanpeng Li , Jim Mattson , Joerg Roedel , Thomas Gleixner , Ingo Molnar , Borislav Petkov , x86@kernel.org, "H . Peter Anvin" , Jeff Layton , "J . Bruce Fields" , Andrew Morton , Shuah Khan , Mike Rapoport , Steven Price , "Maciej S . Szmigiero" , Vlastimil Babka , Vishal Annapurve , Yu Zhang , luto@kernel.org, jun.nakajima@intel.com, dave.hansen@intel.com, ak@linux.intel.com, aarcange@redhat.com, ddutile@redhat.com, dhildenb@redhat.com, Quentin Perret , Michael Roth , mhocko@suse.com, Muchun Song , "Gupta, Pankaj" Subject: Re: [PATCH v7 00/14] KVM: mm: fd-based approach for supporting KVM guest private memory Message-ID: <20220824094149.GA1383966@chaop.bj.intel.com> Reply-To: Chao Peng References: <20220706082016.2603916-1-chao.p.peng@linux.intel.com> <20220818132421.6xmjqduempmxnnu2@box> <226ab26d-9aa8-dce2-c7f0-9e3f5b65b63@google.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: ARC-Seal: i=1; s=arc-20220608; d=hostedemail.com; t=1661334405; a=rsa-sha256; cv=none; b=lNKmSHeXbMmVK0DXTwKE0lZQMZFsOdyoFJB2uvRH6aP+G86X/UQ7DToaGM46+tZ0PonumA bqysSSLTUvqmNvLcAYM+88L9ANYwaKjJy1IlLxPKzECduXMn+YujA+dGAVBCa0pTnWiJpR Gj+tnjriasAF0scM34kL7Lx2a2qRLRY= ARC-Authentication-Results: i=1; imf05.hostedemail.com; dkim=none ("invalid DKIM record") header.d=intel.com header.s=Intel header.b="m/tMSnf8"; dmarc=fail reason="No valid SPF" header.from=intel.com (policy=none); spf=none (imf05.hostedemail.com: domain of chao.p.peng@linux.intel.com has no SPF policy when checking 192.55.52.151) smtp.mailfrom=chao.p.peng@linux.intel.com ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=hostedemail.com; s=arc-20220608; t=1661334405; h=from:from:sender:reply-to:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=iaroswkRF0d68oEYh9DnzQWgAmZpLUS5eZ6k43VKjkI=; b=rdXbG0VNevFvtMnf02Na4YuWj5h1QKRpHCMDfZCm3taaESKx1xeoahlYd0AKfhRX3GpzL+ FTAlopkHlA4ESXNB3wWjrN1VeqAGpvHjk19wxAeV4nP9QBVAh6G7Iw9DNGeuNvDldP+IoY Kddx1j7hPWjjE1X6J+WYPdJOdrX2W88= X-Rspamd-Server: rspam02 X-Rspamd-Queue-Id: 8631E100043 X-Rspam-User: Authentication-Results: imf05.hostedemail.com; dkim=none ("invalid DKIM record") header.d=intel.com header.s=Intel header.b="m/tMSnf8"; dmarc=fail reason="No valid SPF" header.from=intel.com (policy=none); spf=none (imf05.hostedemail.com: domain of chao.p.peng@linux.intel.com has no SPF policy when checking 192.55.52.151) smtp.mailfrom=chao.p.peng@linux.intel.com X-Stat-Signature: 9eugfbf4qhye8wf4q9oupjmcub48myzy X-HE-Tag: 1661334404-956181 X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: On Tue, Aug 23, 2022 at 04:05:27PM +0000, Sean Christopherson wrote: > On Tue, Aug 23, 2022, David Hildenbrand wrote: > > On 19.08.22 05:38, Hugh Dickins wrote: > > > On Fri, 19 Aug 2022, Sean Christopherson wrote: > > >> On Thu, Aug 18, 2022, Kirill A . Shutemov wrote: > > >>> On Wed, Aug 17, 2022 at 10:40:12PM -0700, Hugh Dickins wrote: > > >>>> On Wed, 6 Jul 2022, Chao Peng wrote: > > >>>> But since then, TDX in particular has forced an effort into preventing > > >>>> (by flags, seals, notifiers) almost everything that makes it shmem/tmpfs. > > >>>> > > >>>> Are any of the shmem.c mods useful to existing users of shmem.c? No. > > >>>> Is MFD_INACCESSIBLE useful or comprehensible to memfd_create() users? No. > > >> > > >> But QEMU and other VMMs are users of shmem and memfd. The new features certainly > > >> aren't useful for _all_ existing users, but I don't think it's fair to say that > > >> they're not useful for _any_ existing users. > > > > > > Okay, I stand corrected: there exist some users of memfd_create() > > > who will also have use for "INACCESSIBLE" memory. > > > > As raised in reply to the relevant patch, I'm not sure if we really have > > to/want to expose MFD_INACCESSIBLE to user space. I feel like this is a > > requirement of specific memfd_notifer (memfile_notifier) implementations > > -- such as TDX that will convert the memory and MCE-kill the machine on > > ordinary write access. We might be able to set/enforce this when > > registering a notifier internally instead, and fail notifier > > registration if a condition isn't met (e.g., existing mmap). > > > > So I'd be curious, which other users of shmem/memfd would benefit from > > (MMU)-"INACCESSIBLE" memory obtained via memfd_create()? > > I agree that there's no need to expose the inaccessible behavior via uAPI. Making > it a kernel-internal thing that's negotiated/resolved when KVM binds to the fd > would align INACCESSIBLE with the UNMOVABLE and UNRECLAIMABLE flags (and any other > flags that get added in the future). > > AFAICT, the user-visible flag is a holdover from the early RFCs and doesn't provide > any unique functionality. That's also what I'm thinking. And I don't see problem immediately if user has populated the fd at the binding time. Actually that looks an advantage for previously discussed guest payload pre-loading. > > If we go that route, we might want to have shmem/memfd require INACCESSIBLE to be > set for the initial implementation. I.e. disallow binding without INACCESSIBLE > until there's a use case. I can do that. Chao