Mirror of the Xen Repository (PRs not accepted see: http://wiki.xenproject.org/wiki/Submitting_Xen_Project_Patches) http://xenproject.org
  • C 91.8%
  • Python 1.7%
  • Assembly 1.7%
  • Makefile 1.1%
  • Shell 1%
  • Other 2.4%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
George Dunlap 41ddcfe808 x86/PoD: map one page at a time in p2m_pod_zero_check()
...
p2m_pod_zero_check() maps every page of its batch that passes its
checks, up to POD_SWEEP_STRIDE (16) of them, and keeps them mapped
across the p2m lookups and updates which follow, each of which maps
page-table pages of its own.  Its callers hold mappings too: the p2m
lookup which found the entry to populate still has its page-table page
mapped, and a PV mmu_update() the L1 page it is writing.

map_domain_page() cannot always provide that many at once.  It uses the
mapcache on behalf of PV vCPUs only.  The mapcache has
MAPCACHE_VCPU_ENTRIES (16) slots per vCPU of the domain, shared by its
vCPUs, and a mapping which finds no slot free or reclaimable hits the
BUG_ON() in map_domain_page(): the host crashes.

The sweep runs in the context of whichever vCPU populates a PoD entry
while the domain's PoD cache is empty.  The guest's own vCPUs, being
HVM, map through the directmap; a PV vCPU gets there when its domain
maps or copies the guest's memory: a device model in dom0 or in a stub
domain, a backend doing grant copies.  A single-vCPU PV domain, such
as a device-model stub domain or a dom0 booted with dom0_max_vcpus=1,
has 16 slots, and a sweep over 16 candidate pages needs more.

The sweep has mapped its whole batch at once since 9ad9a1609f ("PoD
memory 5/9: emergency scan"), when x86-64 reached all memory through the
directmap.  The per-vCPU budget came with the mapcache's return to
x86-64 in 4b28bf6ae9 ("x86: re-introduce map_domain_page() et al").

Map one page at a time instead, as p2m_pod_zero_check_superpage()
already does: map a page for the quick check and unmap it again, and
map it anew for the full check after the p2m update and the TLB flush.
The checks and their order are unchanged.  Each page is mapped twice,
which costs little next to scanning it, and the error paths no longer
have mappings to undo.

Fixes: 4b28bf6ae9 ("x86: re-introduce map_domain_page() et al")
Assisted-by: Claude Code:claude-opus-5-5
Signed-off-by: George Dunlap <gwd@xenproject.org>
Acked-by: Roger Pau Monné <roger@xenproject.org>
2026-10-29 09:13:29 +01:00
.github/workflows github/coverity: switch to building with json-c instead of yajl 2025-10-16 17:20:45 +02:00
automation automation/eclair: generalize the noreturn function-pointer deviation 2026-10-27 09:03:28 +01:00
config stubdom: remove build of zlib 2026-09-25 14:44:27 +01:00
docs automation/eclair: generalize the noreturn function-pointer deviation 2026-10-27 09:03:28 +01:00
LICENSES Add tools/fuzz/oss-fuzz/build.sh 2024-07-23 13:58:54 +02:00
m4 systemd: fall back to default system-sleep dir without systemd-devel 2025-12-05 18:06:19 +00:00
misc/coverity Coverity: Improve model for {,un}map_domain_page() 2020-01-06 17:22:17 +00:00
scripts get_maintainer: Add maintainers based on keyword after removing THE REST 2026-08-10 17:06:44 +02:00
stubdom stubdom: remove build of zlib 2026-09-25 14:44:27 +01:00
tools tools/ocaml: Gitlab CI test for bindings 2026-10-26 18:36:52 +00:00
xen x86/PoD: map one page at a time in p2m_pod_zero_check() 2026-10-29 09:13:29 +01:00
.b4-config Add basic b4 config file 2026-09-15 11:46:07 +02:00
.gitarchive-info git: Add metadata to the result of git archive 2016-11-04 14:08:35 +00:00
.gitattributes git: Add metadata to the result of git archive 2016-11-04 14:08:35 +00:00
.gitignore build: add compile_commands.json target 2026-08-11 11:07:16 +02:00
.gitlab-ci.yml CI: introduce BUILD_FOR_TESTS_ONLY 2026-04-23 17:39:55 +02:00
.readthedocs.yaml docs: Introduce a default .readthedocs.yaml 2025-06-23 10:35:57 +01:00
autogen.sh autoconf: xen: force a refresh with autoconf 2014-07-02 15:25:36 +01:00
CHANGELOG.md xen/arm: remove XEN_DOMCTL_CONFIG_GIC_NATIVE from the ABI 2026-10-14 16:32:32 +02:00
CODING_STYLE xen: Use auto keyword as per C23 2026-01-09 20:20:57 +00:00
config.guess autotools: Updage config.guess and config.sub 2019-05-21 11:57:05 +01:00
Config.mk Config: update Mini-OS commit id 2026-08-18 11:35:56 +02:00
config.sub autotools: Updage config.guess and config.sub 2019-05-21 11:57:05 +01:00
configure Rerun ./autogen.sh for 4.23 2026-06-29 18:06:24 +01:00
configure.ac configure: Drop --enable-githttp 2023-03-28 11:57:56 +01:00
CONTRIBUTING Remove extra copies of licenses and license headers 2022-11-11 12:19:15 -08:00
COPYING Remove extra copies of licenses and license headers 2022-11-11 12:19:15 -08:00
CREDITS CREDITS: First checkin. 2013-02-26 16:18:34 +00:00
INSTALL INSTALL: remove unsupported XEN_CONFIG_EXPERT from documentation 2026-01-22 09:13:49 +01:00
install.sh install.sh: Preserve symlinks in destination file system 2026-04-23 17:39:55 +02:00
MAINTAINERS MAINTAINERS: Add myself as RISC-V reviewer 2026-10-26 09:01:40 +01:00
Makefile stubdom: remove support for grub-pv 2026-08-13 15:11:20 +02:00
README Update Xen to 4.23 2026-06-29 18:06:23 +01:00
SUPPORT.md pygrub: security-supported only when run de-privileged 2026-07-28 12:40:10 +01:00
version.sh build: add --full to version.sh to guess $(XEN_FULLVERSION) 2021-09-29 15:29:55 +01:00

############################################################
__  __                                _        _     _
\ \/ /___ _ __        _   _ _ __  ___| |_ __ _| |__ | | ___
 \  // _ \ '_ \ _____| | | | '_ \/ __| __/ _` | '_ \| |/ _ \
 /  \  __/ | | |_____| |_| | | | \__ \ || (_| | |_) | |  __/
/_/\_\___|_| |_|      \__,_|_| |_|___/\__\__,_|_.__/|_|\___|

############################################################

https://www.xen.org/

What is Xen?
============

Xen is a Virtual Machine Monitor (VMM) originally developed by the
Systems Research Group of the University of Cambridge Computer
Laboratory, as part of the UK-EPSRC funded XenoServers project.  Xen
is freely-distributable Open Source software, released under the GNU
GPL. Since its initial public release, Xen has grown a large
development community, spearheaded by xen.org (https://www.xen.org).

This file contains some quick-start instructions to install Xen on
your system. For more information see https://www.xen.org/ and
https://wiki.xen.org/

Quick-Start Guide
=================

First, this is just a quick-start guide. For more comprehensive
information see the INSTALL file and the Xen wiki at
https://wiki.xenproject.org and in particular
https://wiki.xenproject.org/wiki/Getting_Started.

Second, there are a number of prerequisites for building a Xen source
release. Make sure you have all the following installed, either by
visiting the project webpage or installing a pre-built package
provided by your OS distributor:
    * GNU Make v3.80 or later
    * C compiler and linker:
      - For x86:
        - GCC 5.1 or later
        - GNU Binutils 2.25 or later
        or
        - Clang/LLVM 11 or later
      - For ARM:
        - GCC 5.1 or later
        - GNU Binutils 2.25 or later
      - For RISC-V 64-bit:
        - GCC 12.2 or later
        - GNU Binutils 2.39 or later
    * POSIX compatible awk
    * Development install of zlib (e.g., zlib-dev)
    * Development install of Python 2.7 or later (e.g., python-dev)
    * Development install of curses (e.g., libncurses-dev)
    * Development install of uuid (e.g. uuid-dev)
    * Development install of json-c 0.15 or later (e.g. libjson-c-dev)
      or yajl (e.g. libyajl-dev)
    * Development install of libaio (e.g. libaio-dev) version 0.3.107 or
      greater.
    * Development install of GLib v2.0 (e.g. libglib2.0-dev)
    * Development install of Pixman (e.g. libpixman-1-dev)
    * pkg-config
    * bridge-utils package (/sbin/brctl)
    * iproute package (/sbin/ip)
    * GNU bison and GNU flex
    * ACPI ASL compiler (iasl)

In addition to the above there are a number of optional build
prerequisites. Omitting these will cause the related features to be
disabled at compile time:
    * Binary-search capable grep (if building Xen with CET support)
    * Development install of Ocaml (e.g. ocaml-nox and
      ocaml-findlib). Required to build ocaml components which
      includes the alternative ocaml xenstored.
    * cmake (if building vtpm stub domains)
    * pandoc, transfig, pod2{man,html,text} for rendering various pieces of
      documentation into alternative formats
    * figlet (for generating the traditional Xen start of day banner)
    * systemd daemon development files
    * Development install of libnl3 (e.g., libnl-3-200,
      libnl-3-dev, etc).  Required if network buffering is desired
      when using Remus with libxl.  See docs/README.remus for detailed
      information.
    * 16-bit x86 assembler, loader and compiler for rombios
      (dev86 rpm or bin86 & bcc debs)
    * Development install of liblzma for rombios
    * Development install of libbz2, liblzma, liblzo2, and libzstd for DomU
      kernel decompression.

Second, you need to acquire a suitable kernel for use in domain 0. If
possible you should use a kernel provided by your OS distributor. If
no suitable kernel is available from your OS distributor then refer to
https://wiki.xen.org/wiki/XenDom0Kernels for suggestions for
suitable kernels to use.
If you are looking to compile a Dom0 kernel from source, please refer to
https://wiki.xen.org/wiki/XenParavirtOps.

[NB. Unless noted otherwise, all the following steps should be
performed with root privileges.]

1. Download and untar the source tarball file. This will be a
   file named xen-unstable-src.tgz, or xen-$version-src.tgz.
   You can also pull the current version from the git or mercurial
   repositories at https://xenbits.xen.org/

    # tar xzf xen-unstable-src.tgz

   Assuming you are using the unstable tree, this will
   untar into xen-unstable. The rest of the instructions
   use the unstable tree as an example, substitute the
   version for unstable.

2. cd to xen-unstable (or whatever you sensibly rename it to).

3. For the very first build, or if you want to destroy build trees,
   perform the following steps:

    # ./configure
    # make world
    # make install

   See the documentation in the INSTALL file for more info.

   This will create and install onto the local machine. It will build
   the xen binary (xen.gz), the tools and the documentation.

   You can override the destination for make install by setting DESTDIR
   to some value.

4. To rebuild an existing tree without modifying the config:
    # make dist

   This will build and install xen, tools, and docs into the local dist/
   directory.

   You can override the destination for make install by setting DISTDIR
   to some value.

   make install and make dist differ in that make install does the
   right things for your local machine (installing the appropriate
   version of udev scripts, for example), but make dist includes all
   versions of those scripts, so that you can copy the dist directory
   to another machine and install from that distribution.

xenstore: xenstored and oxenstored
====================================

Xen uses a configuration database called xenstore [0] to maintain configuration
and status information shared between domains. A daemon is implemented as part
of xenstore to act as an interface for access to the database for dom0 and
guests. Two xenstored daemons are supported, one written in C which we refer
to as the xenstored (sometimes referred to as cxenstored), and another written
in Ocaml called oxenstored. Details for xenstore and the different
implementations can be found on the wiki's xenstore reference guide [1] and
the xenstored [2] page. You can choose which xenstore you want to enable as
default on a system through configure:

        ./configure --with-xenstored=xenstored
        ./configure --with-xenstored=oxenstored

By default oxenstored will be used if the ocaml development tools are found.
If you enable oxenstored the xenstored will still be built and installed,
the xenstored used can be changed through the configuration file:

/etc/sysconfig/xencommons
or
/etc/default/xencommons

You can change the preferred xenstored you want to use in the configuration
but since we cannot stop the daemon a reboot will be required to make the
change take effect.

[0] https://wiki.xen.org/wiki/XenStore
[1] https://wiki.xen.org/wiki/XenStoreReference
[2] https://wiki.xen.org/wiki/Xenstored

Python Runtime Libraries
========================

Various tools, such as pygrub, have the following runtime dependencies:

    * Python 2.7 or later.
          URL:    https://www.python.org/
          Debian: python

Intel(R) Trusted Execution Technology Support
=============================================

Intel's technology for safer computing, Intel(R) Trusted Execution Technology
(Intel(R) TXT), defines platform-level enhancements that provide the building
blocks for creating trusted platforms.  For more information, see
https://www.intel.com/technology/security/.

Intel(R) TXT support is provided by the Trusted Boot (tboot) module in
conjunction with minimal logic in the Xen hypervisor.

Tboot is an open source, pre- kernel/VMM module that uses Intel(R) TXT to
perform a measured and verified launch of an OS kernel/VMM.

The Trusted Boot module is available from
http://sourceforge.net/projects/tboot.  This project hosts the code in a
mercurial repo at http://tboot.sourceforge.net/hg/tboot.hg and contains
tarballs of the source.  Instructions in the tboot README describe how
to modify grub.conf to use tboot to launch Xen.