← 返回 加密guest共享steal-time
v1 2026-09-17

加密guest共享steal-time · v1

VMware 加密 guest steal-time：先转换各 CPU per-CPU 存储再注册 GPA，TDX 因 __pa() 拒绝 vmalloc per-CPU。

原始补丁链接

查看原始邮件 ↗ 查看原始邮件 ↗ 查看原始邮件 ↗

子 Patch（2）

1/2
percpu: Use X86_MEM_ENCRYPT for decrypted per-CPU data
On Wed, Sep 16, 2026 at 01:05:39AM -0400, Zack Rusin wrote: > Decrypted per-CPU data is gated by AMD_MEM_ENCRYPT. With > INTEL_TDX_GUEST=y and AMD_MEM_ENCRYPT=n it falls back to ordinary > per-CPU sto
2/2
x86/vmware: Decrypt steal-time storage before sharing it
VMware steal-time 加密 guest 在注册共享地址前先解密各 CPU 存储，并提前到 early initcall；转换后清零，失败回滚重加密并禁用，TDX 要求直接映射。