libvirt/tests/cputestdata/x86_64-cpuid-Xeon-E3-1225-v5-json.xml

<cpu mode='custom' match='exact'>
  <model fallback='forbid'>Skylake-Client-IBRS</model>
  <vendor>Intel</vendor>
  <feature policy='require' name='hypervisor'/>
  <feature policy='require' name='ss'/>
  <feature policy='require' name='tsc_adjust'/>
  <feature policy='require' name='mpx'/>
  <feature policy='require' name='clflushopt'/>
  <feature policy='require' name='md-clear'/>
  <feature policy='require' name='stibp'/>
  <feature policy='require' name='ssbd'/>
  <feature policy='require' name='pdpe1gb'/>
</cpu>
cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 Signed-off-by: Jiri Denemark <jdenemar@redhat.com> Reviewed-by: Daniel P. Berrangé <berrange@redhat.com> 2019-04-05 09:19:30 +00:00			`<cpu mode='custom' match='exact'>`
			`<model fallback='forbid'>Skylake-Client-IBRS</model>`
			`<vendor>Intel</vendor>`
			`<feature policy='require' name='hypervisor'/>`
cpu_map: Sort cpu features Some feature words were not sorted correctly. Signed-off-by: Tim Wiederhake <twiederh@redhat.com> Reviewed-by: Jiri Denemark <jdenemar@redhat.com> 2024-02-01 21:03:49 +00:00			`<feature policy='require' name='ss'/>`
cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 Signed-off-by: Jiri Denemark <jdenemar@redhat.com> Reviewed-by: Daniel P. Berrangé <berrange@redhat.com> 2019-04-05 09:19:30 +00:00			`<feature policy='require' name='tsc_adjust'/>`
cpu_map: Drop 'mpx' from x86 cpu models The mpx feature was removed from the corresponding qemu cpu models. With mpx in the libvirt cpu models, libvirt believes the feature to be implicitly enabled when creating qemu VMs, while in fact it is disabled. This became an issue when commit 94eacd5a5f introduced new vmx-* features, of which some are dependent on mpx (see "feature_dependencies" table in qemu target/i386/cpu.c), e.g. vmx-exit-clear-bndcfgs and vmx-entry-load-bndcfgs. These features cannot be enabled by qemu without also mpx being enabled, leading to the error message error: Failed to create domain from testdomain.xml error: operation failed: guest CPU doesn't match specification: missing features: mpx,vmx-exit-clear-bndcfgs, vmx-entry-load-bndcfgs when trying to create a VM with a "host-model" cpu on a host that does support mpx and the mentioned vmx-* features: <domain> ... <cpu mode='host-model' check='full' /> ... </domain> Resolve the issue by removing mpx from libvirt's cpu models as well. Signed-off-by: Tim Wiederhake <twiederh@redhat.com> Reviewed-by: Ján Tomko <jtomko@redhat.com> 2024-02-09 10:52:56 +00:00			`<feature policy='require' name='mpx'/>`
cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 Signed-off-by: Jiri Denemark <jdenemar@redhat.com> Reviewed-by: Daniel P. Berrangé <berrange@redhat.com> 2019-04-05 09:19:30 +00:00			`<feature policy='require' name='clflushopt'/>`
cpu_map: Define md-clear CPUID bit CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2019-11091 The bit is set when microcode provides the mechanism to invoke a flush of various exploitable CPU buffers by invoking the VERW instruction. Signed-off-by: Paolo Bonzini <pbonzini@redhat.com> Signed-off-by: Jiri Denemark <jdenemar@redhat.com> Reviewed-by: Daniel P. Berrangé <berrange@redhat.com> 2019-04-05 13:11:20 +00:00			`<feature policy='require' name='md-clear'/>`
cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 Signed-off-by: Jiri Denemark <jdenemar@redhat.com> Reviewed-by: Daniel P. Berrangé <berrange@redhat.com> 2019-04-05 09:19:30 +00:00			`<feature policy='require' name='stibp'/>`
			`<feature policy='require' name='ssbd'/>`
			`<feature policy='require' name='pdpe1gb'/>`
			`</cpu>`