Run PV in PVH container: Difference between revisions

From Xen
Jump to navigationJump to search
No edit summary
No edit summary
 
Line 14: Line 14:
* Shutdown VM
* Shutdown VM
* Remove any reference to <code>builder</code> (e.g., <code>builder="generic"</code>)
* Remove any reference to <code>builder</code> (e.g., <code>builder="generic"</code>)
* Add the following two lines:
* Add the following line:
type="pvh"
type="pvh"
pvshim=1
* Restart VM
* Restart VM


Latest revision as of 10:36, 15 May 2018

Xen 4.11 support running of unmodified legacy PV-only guest to be run in PVH mode. This allows users to run old, PV-only distros. This simplifies management and reduces the surface of attack significantly. This makes vulnerabilities in PV interfaces local to guests. Note that slide 15 of this presentation gives an architectural overview of PVH shim.

Converting a PV config to a PVH shim config

  • Shutdown VM
  • Remove any reference to builder (e.g., builder="generic")
  • Add the following two lines:
 type="pvh"
 pvshim=1
  • Restart VM

Converting a PV config to a PVH config

Icon Info.png If you have a kernel capable of booting PVH, then PVH mode is both faster and more secure than PV or PVH-shim mode.


  • Shutdown VM
  • Remove any reference to builder (e.g., builder="generic")
  • Add the following line:
 type="pvh"
  • Restart VM
Retrieved from "https://wiki.xenproject.org/index.php?title=Run_PV_in_PVH_container&oldid=18736"