KVM for x86 systems

• Secure Encrypted Virtualization (SEV)
  • Overview
  • The KVM_MEMORY_ENCRYPT_OP ioctl
  • Device attribute API
  • Firmware Management
  • References
• KVM CPUID bits
• Known limitations of CPU virtualization
  • x86
• Linux KVM Hypercall
  • KVM Hypercalls Documentation
• Intel Trust Domain Extensions (TDX)
  • Overview
  • API description
  • KVM TDX creation flow
  • References
• The x86 kvm shadow mmu
  • Acronyms
  • Virtual and real hardware supported
  • Translation
  • Memory
  • Events
  • Shadow pages
  • Reverse map
  • Synchronized and unsynchronized pages
  • Reaction to events
  • Emulating cr0.wp
  • Large pages
  • Fast invalidation of MMIO sptes
  • Further reading
• KVM-specific MSRs
  • Custom MSR list
• Nested VMX
  • Overview
  • Terminology
  • Running nested VMX
  • ABIs
  • Authors
• Running nested guests with KVM
  • Use Cases
  • Enabling “nested” (x86)
  • Additional nested-related kernel parameters (x86)
  • Starting a nested guest (x86)
  • Enabling “nested” (s390x)
  • Live migration with nested KVM
  • Reporting bugs from nested setups
• Timekeeping Virtualization for X86-Based Architectures
  • 1. Overview
  • 2. Timing Devices
  • 3. TSC Hardware
  • 4. Virtualization Problems