Re: [Qemu-devel] Do I need update the microcode of virtual machine

2018-01-18 Thread Li Qiang
2018-01-18 18:49 GMT+08:00 Daniel P. Berrange : > On Thu, Jan 18, 2018 at 06:38:57PM +0800, Li Qiang wrote: > > Hi Paolo, all, > > > > I have a question about the intel microcode update for spectre variant#2. > > From my understanding, there is no need to update the microcode of VMs > > because th

Re: [Qemu-devel] Do I need update the microcode of virtual machine

2018-01-18 Thread Paolo Bonzini
On 18/01/2018 11:48, Li Qiang wrote: > > > But upon I update the centos guest, the host kvm/qemu has been updated. > > The IBPB_ENABLED and IBRS_ENABLED are both zero if I don't update the > > microcode in the guest. If I update the guest micorcode, the are both 1. > > What do you

Re: [Qemu-devel] Do I need update the microcode of virtual machine

2018-01-18 Thread Daniel P. Berrange
On Thu, Jan 18, 2018 at 06:38:57PM +0800, Li Qiang wrote: > Hi Paolo, all, > > I have a question about the intel microcode update for spectre variant#2. > From my understanding, there is no need to update the microcode of VMs > because the kvm has expose the SPEC_CTL and PRED_CMD to the guest. > A

Re: [Qemu-devel] Do I need update the microcode of virtual machine

2018-01-18 Thread Li Qiang
2018-01-18 18:43 GMT+08:00 Paolo Bonzini : > On 18/01/2018 11:38, Li Qiang wrote: > > Hi Paolo, all, > > > > I have a question about the intel microcode update for spectre variant#2. > > From my understanding, there is no need to update the microcode of VMs > > because the kvm has expose the SPEC_

Re: [Qemu-devel] Do I need update the microcode of virtual machine

2018-01-18 Thread Paolo Bonzini
On 18/01/2018 11:38, Li Qiang wrote: > Hi Paolo, all, > > I have a question about the intel microcode update for spectre variant#2. > From my understanding, there is no need to update the microcode of VMs > because the kvm has expose the SPEC_CTL and PRED_CMD to the guest. > Also, if we need to up

[Qemu-devel] Do I need update the microcode of virtual machine

2018-01-18 Thread Li Qiang
Hi Paolo, all, I have a question about the intel microcode update for spectre variant#2. >From my understanding, there is no need to update the microcode of VMs because the kvm has expose the SPEC_CTL and PRED_CMD to the guest. Also, if we need to update the micorcode in guest, who is the vendor f