[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[PATCH v1 26/28] docs: add coverage for svm_avic=
- To: xen-devel@xxxxxxxxxxxxxxxxxxxx
- From: dmukhin@xxxxxxxx
- Date: Wed, 4 Nov 2026 17:33:43 -0800
- Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 148.163.138.245) smtp.rcpttodomain=lists.xenproject.org smtp.mailfrom=ford.com; dmarc=pass (p=reject sp=reject pct=100) action=none header.from=ford.com; dkim=pass (signature was verified) header.d=saarlouis.ford.com; dkim=pass (signature was verified) header.d=ford.com; arc=none (0)
- Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=TYMocsRux56pcfeS2Q+gOlkmmV23pRJGzYNFKN2hxR8=; b=fkwjDicHCakl0KfVBW1f6gg03iknaIbjdvblPgBP56wy8RbCcjmrqSAK99Vr/Umx6+8KB0u3fRFopgJRwMOcUheGgptR/Cc1YkHWcfNZSZGaVuDyqqUZuleAvfGODrLEMWffqDzrMyOF+dA+ymeTDEA0jgj9+RTmvzbZBdM9g6MlLgX6mevgDx3y1GV5lRG/qnfBcb0tKAorChonME+yYi/qdSiMKUms0QQSI0M2K+CVBlCaMqf8xqer4esKTIlBkPNYcQKgzo+BbRSIGMGyXKYPXJZ5dKgtxY3htFkp5F2qxBPfyig3pbz0eWSi5TVTVS+x+xvsMRAroVB6AyNpAg==
- Arc-seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=g2UG5NCll6yirxJNEgOtM9c30RRgGZmruJEAgDpLIH7exQKSvTo0dmZoxwAbPqMrzz3DTQYfidyHEdkO3SrBVPT20GxmJJkDgXz5x2s4IwzZr5DvrPHkO2NER1QclPTBxj86oApM3Q3iRBWBGUS2aGtGEYD2OAwxkC+fqUX1P1Aish4Yyi7QobgmAQJkSnb6DfCp5+V4t9SapsymvZ+UsqnwXaoVMMSYnPhRKEWhfWOXlIufa0Sl2wA3UHWM2nEOUGyPnvkswV050iqh/9kbdCHjocfM7szKEWppxCcsxgwc+iRqMeMX3yiSEQ3R7hto99DKsvPyVRX+ajtPBZ8PpQ==
- Authentication-results: eu.smtp.expurgate.cloud; dkim=pass header.s=ppford header.d=ford.com header.i="@ford.com" header.h="Cc:Content-Transfer-Encoding:Content-Type:Date:From:In-Reply-To:Message-ID:MIME-Version:References:Subject:To"; dkim=pass header.s=selector2-azureford-onmicrosoft-com header.d=azureford.onmicrosoft.com header.i="@azureford.onmicrosoft.com" header.h="From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck"; dkim=pass header.s=ppserprodsaar header.d=saarlouis.ford.com header.i="@saarlouis.ford.com" header.h="Cc:Content-Transfer-Encoding:Date:From:In-Reply-To:Message-ID:MIME-Version:References:Subject:To"; dkim=pass header.s=ppfserpocford header.d=ford.com header.i="@ford.com" header.h="Cc:Content-Transfer-Encoding:Date:From:In-Reply-To:Message-ID:MIME-Version:References:Subject:To"
- Cc: andrew.cooper3@xxxxxxxxxx, jason.andryuk@xxxxxxx, jbeulich@xxxxxxxx, roger@xxxxxxxxxxxxxx, teddy.astie@xxxxxxxxxx, dmukhin@xxxxxxx, Denis Mukhin <dmukhin@xxxxxxxx>
- Delivery-date: Thu, 05 Nov 2026 01:35:20 +0000
- List-id: Xen developer discussion <xen-devel.lists.xenproject.org>
- Pser-m365-app: SER-APP
From: Denis Mukhin <dmukhin@xxxxxxxx>
Document new command line switch to enable/disable SVM AVIC driver
in the hypervisor.
Signed-off-by: Denis Mukhin <dmukhin@xxxxxxxx>
---
docs/misc/xen-command-line.pandoc | 23 ++++++++++++++++++++++-
1 file changed, 22 insertions(+), 1 deletion(-)
diff --git a/docs/misc/xen-command-line.pandoc
b/docs/misc/xen-command-line.pandoc
index a6f08463d177..e810f8836fe7 100644
--- a/docs/misc/xen-command-line.pandoc
+++ b/docs/misc/xen-command-line.pandoc
@@ -1623,7 +1623,7 @@ boolean (e.g. `iommu=no`) can override this and leave the
IOMMUs disabled.
This option depends on `intremap`, and is disabled by default due to some
corner cases in the implementation which have yet to be resolved.
- This option is only valid on x86, and only builds of Xen with HVM support.
+ This option is only valid on Intel x86, and only builds of Xen with HVM
support.
* The `crash-disable` boolean controls disabling IOMMU functionality
(DMAR/IR/QI)
before switching to a crash kernel. This option is inactive by default and
@@ -2673,6 +2673,27 @@ On Sappire and Emerald Rapids CPUs with May 2025
microcode or later, the
`ibpb-alt=` option can be used to switch to the alternative mitigation for
Intel SA-00982. Intel suggest that some workloads will benefit from this.
+### svm_avic (x86)
+> `= true | false | nodoorbell`
+
+This option configures Advanced Virtual Interrupt Controller (AVIC), which
+is an extension of AMD Secure Virtual Machine (SVM) to virtualize local APIC
+for guest VM.
+
+This parameter is experimental and for expert configuration only.
+
+Xen has mitigatations for the following AVIC hardware flaws:
+
+ * AMD Erratum 1235. A hardware flaw affecting certain AMD Family 17h and
+ Hygon Family 18h processors where the CPU hardware reads a stale
+ `IsRunning=1` bit during Interrupt Control Register (ICR) write emulation.
+
+Limitations:
+
+ * AVIC in x2APIC mode is not supported.
+
+ * AVIC in nested virtualization setup is not supported.
+
### sync_console
> `= <boolean>`
--
2.55.0
|