Re: [Qemu-devel] [PATCH] vfio/pci: Hide SR-IOV capability

2016-06-28 Thread Laszlo Ersek
On 06/21/16 00:04, Alex Williamson wrote: > The kernel currently exposes the SR-IOV capability as read-only > through vfio-pci. This is sufficient to protect the host kernel, but > has the potential to confuse guests without further virtualization. > In particular, OVMF tries to size the VF BARs a

Re: [Qemu-devel] [PATCH] vfio/pci: Hide SR-IOV capability

2016-06-28 Thread Laszlo Ersek
On 06/21/16 00:04, Alex Williamson wrote: > The kernel currently exposes the SR-IOV capability as read-only > through vfio-pci. This is sufficient to protect the host kernel, but > has the potential to confuse guests without further virtualization. > In particular, OVMF tries to size the VF BARs a

Re: [Qemu-devel] [PATCH] vfio/pci: Hide SR-IOV capability

2016-06-20 Thread Alex Williamson
On Tue, 21 Jun 2016 02:15:23 +0200 Laszlo Ersek wrote: > On 06/21/16 00:04, Alex Williamson wrote: > > The kernel currently exposes the SR-IOV capability as read-only > > through vfio-pci. This is sufficient to protect the host kernel, but > > has the potential to confuse guests without further

Re: [Qemu-devel] [PATCH] vfio/pci: Hide SR-IOV capability

2016-06-20 Thread Laszlo Ersek
On 06/21/16 00:04, Alex Williamson wrote: > The kernel currently exposes the SR-IOV capability as read-only > through vfio-pci. This is sufficient to protect the host kernel, but > has the potential to confuse guests without further virtualization. > In particular, OVMF tries to size the VF BARs a

Re: [Qemu-devel] [PATCH] vfio/pci: Hide SR-IOV capability

2016-06-20 Thread Alex Williamson
On Mon, 20 Jun 2016 16:23:07 -0600 Eric Blake wrote: > On 06/20/2016 04:04 PM, Alex Williamson wrote: > > The kernel currently exposes the SR-IOV capability as read-only > > through vfio-pci. This is sufficient to protect the host kernel, but > > has the potential to confuse guests without furth

Re: [Qemu-devel] [PATCH] vfio/pci: Hide SR-IOV capability

2016-06-20 Thread Eric Blake
On 06/20/2016 04:04 PM, Alex Williamson wrote: > The kernel currently exposes the SR-IOV capability as read-only > through vfio-pci. This is sufficient to protect the host kernel, but > has the potential to confuse guests without further virtualization. > In particular, OVMF tries to size the VF B

[Qemu-devel] [PATCH] vfio/pci: Hide SR-IOV capability

2016-06-20 Thread Alex Williamson
The kernel currently exposes the SR-IOV capability as read-only through vfio-pci. This is sufficient to protect the host kernel, but has the potential to confuse guests without further virtualization. In particular, OVMF tries to size the VF BARs and comes up with absurd results, ending with an as