文章目录
- 简介
- 如何查看是否打开了SEV
- NX
- 问题
- 原因
- commit
简介
从代码注释看,这个函数仅仅可以供SEV-ES虚拟机使用,因为这些虚拟机如果调用verify_cpu,将会导致在CPU启动的第二阶段无法处理#VC异常。其他非SEV-ES的虚拟机系统,尤其是Intel的需要执行verify_cpu,来确保NX的功能。
/** The secondary_startup_64_no_verify entry point is only used by* SEV-ES guests. In those guests the call to verify_cpu() would cause* #VC exceptions which can not be handled at this stage of secondary CPU bringup.** All non SEV-ES systems, especially Intel systems, need to execute* verify_cpu() above to make sure NX is enabled.*/
SYM_INNER_LABEL(secondary