Constraints
Application Constraints
The hardware server must be equipped with the Kunpeng 950 processor.
SMT
Enabling CPU simultaneous multi-threading (SMT) may introduce side-channel attacks and other risks affecting confidential computing workloads. It is therefore recommended to deploy confidential computing workloads on systems with SMT disabled. To disable SMT, see Disabling SMT.
Overcommitment
CPU or memory overcommitment is not supported.
Commands Supported by libvirt
Commands Supported by libvirt lists the libvirt commands for cVMs:
virsh Subcommand |
Description |
Option |
Supported on cVMs |
Supported on Other VMs |
|---|---|---|---|---|
define |
Defines a VM domain from a specified XML file. |
--validate |
√ |
√ |
undefine |
Destroys a VM domain. |
--managed-save |
x |
√ |
--storage |
√ |
√ |
||
--remove-all-storage |
√ |
√ |
||
--delete-storage-volume-snapshots |
x |
√ |
||
--wipe-storage |
√ |
√ |
||
--snapshots-metadata |
x |
√ |
||
--checkpoints-metadata |
x |
√ |
||
--nvram |
x |
√ |
||
--keep-nvram |
x |
√ |
||
--tpm |
x |
√ |
||
--keep-tpm |
x |
√ |
||
start |
Starts a defined VM. |
--console |
√ |
√ |
--paused |
x |
√ |
||
--autodestroy |
√ |
√ |
||
--bypass-cache |
√ |
√ |
||
--force-boot |
x |
√ |
||
--pass-fds |
x |
√ |
||
--reset-nvram |
x |
√ |
||
destroy |
Destroys a running VM. |
--graceful |
√ |
√ |
--remove-logs |
√ |
√ |
||
console |
Logs in to a VM through the serial port. |
--devname |
√ |
√ |
--force |
√ |
√ |
||
--resume |
x |
√ |
||
--safe |
√ |
√ |
||
create |
Creates and starts a VM from a specified XML file. |
--console |
√ |
√ |
--paused |
x |
√ |
||
--autodestroy |
√ |
√ |
||
--pass-fds |
x |
√ |
||
--validate |
√ |
√ |
||
--reset-nvram |
x |
√ |
||
√: Supported by cVMs or common VMs. x: Not supported by cVMs or common VMs. |
||||