← 返回 加密guest共享steal-time
v1 2026-09-16

加密guest共享steal-time · v1

在加密VMware guest中先将per-CPU steal-time存储转换为共享内存再发布GPA，并延迟设置、预检转换及失败回滚。

原始补丁链接

查看原始邮件 ↗

子 Patch（2）

1/2
percpu: Use X86_MEM_ENCRYPT for decrypted per-CPU data
On Wed, Sep 16, 2026 at 01:05:39AM -0400, Zack Rusin wrote: > Decrypted per-CPU data is gated by AMD_MEM_ENCRYPT. With > INTEL_TDX_GUEST=y and AMD_MEM_ENCRYPT=n it falls back to ordinary > per-CPU sto
2/2
x86/vmware: Decrypt steal-time storage before sharing it
VMware steal-time 加密 guest 在注册共享地址前先解密各 CPU 存储，并提前到 early initcall；转换后清零，失败回滚重加密并禁用，TDX 要求直接映射。