XCP-ng
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login
    1. Home
    2. Chuckz
    C
    Online
    • Profile
    • Following 0
    • Followers 0
    • Topics 0
    • Posts 2
    • Groups 0

    Chuckz

    @Chuckz

    0
    Reputation
    1
    Profile views
    2
    Posts
    0
    Followers
    0
    Following
    Joined
    Last Online

    Chuckz Unfollow Follow

    Latest posts made by Chuckz

    • RE: Nested Virtualization of Windows Hyper-V on XCP-ng

      @planedrop said:

      @Chuckz Yeah it would be a nice feature to see. I think the issue though is how much work it takes when it's not something anyone should be using in production. It's really just a heavy homelab feature.

      I want it to work, don't get me wrong, but no big org should be doing nested virt, it's just not a good idea and even Hyper-V recommends against it.

      For now, I think you are right except for Windows-centric shops. Going forward, there is no doubt that running Windows will be only on Hyper-V unless third party hypervisors can maintain support for the increasing number of features in Windows that rely on NV support. For example, important security features in Windows 11 such as core isolation do work on my Windows 11 guests, I suspect also because of lack of NV support in Xen. I also think over time this NV feature will become important also for other platforms that depend more on Linux than Windows does.

      Has anyone here seen Windows 11 core isolation working on XCP-ng? One can check on a Windows 11 XCP-ng guest by looking at Windows Security -> Device Security -> Core Isolation -> Core Isolation Details in the Windows guest. I bet in every case it reports that it does not work. When I try to enable it, it successfully enables it and notifies me I need to reboot for the new setting to take effect, but when I reboot the core isolation feature is disabled again.

      Apparently Windows virtualization, while important, is not important enough for deep-pocketed customers to push for this feature in XCP-ng and Xen upstream. The question I raise is, can a group of XCP-ng users, perhaps working in their home labs, get the ball rolling in upstream Xen without deep-pocket customers asking them to add the NV feature to Xen? I am hoping yes, because I think the Xen upstream developers really want to add this feature (Vates too, because it is a big negative for XCP-ng compared to other options that do support these Windows features that depend on NV).

      But the Xen developers do not have the time to work on NV without deep-pocket customers asking for the feature. We can greatly improve the probability that the Xen developers will work on NV if we can do some of the work for them. I think there are some things we can do to help the Xen developers support NV. This is what I am proposing.

      posted in Compute
      C
      Chuckz
    • RE: Nested Virtualization of Windows Hyper-V on XCP-ng

      @XCP-ng-JustGreat said:

      Serious movement appears to be happening with respect to NV. See videos below cross-posted from this forum thread:

      https://xcp-ng.org/forum/topic/8932/hardware-assisted-virtualization-is-not-enabled-on-this-host-even-though-platform-exp-nested-hvm-true-is-set/52

      ...
      @XCP-ng-JustGreat Well after over a year and a half and AFAICT not much progress from upstream on NV support for Windows/Hyper-V in Xen and XCP-ng. It is discouraging that support from upstream for this feature has not come yet. So I think we, as users of XCP-ng and Xen who are interested in this feature could roll up our sleeves and start working on the problem again and hopefully jump start the process of getting this feature working in upstream Xen and XCP-ng. I will follow up with another post to propose what users of Xen and XCP-ng can do to help.

      posted in Compute
      C
      Chuckz