- Spectrum Discuss - spectrum-os.org

[ANNOUNCE] cloud-hypervisor-42.0-spectrum0
by Alyssa Ross 26 Oct '24

26 Oct '24

I've updated Spectrum's Cloud Hypervisor patches (which add virtio-gpu support) to support the recently released Cloud Hypervisor 42.0. More information is available at <https://spectrum-os.org/software/cloud-hypervisor/>.

1 0

Questions About Virtio-GPU Patchset for Cloud Hypervisor
by projectmikey 25 Aug '24

25 Aug '24

Dear Spectrum Team, I hope this email finds you well. I am reaching out with a question about your patchset for Cloud Hypervisor with support for virtio-gpu [https://spectrum-os.org/software/cloud-hypervisor/] First, I want to say thanks for the work that has been done — it is much appreciated! I have successfully implemented the latest version of your patchset in my current environment. I am now curious if it can be used with multiple L2 guests, each securely utilizing different GPUs, running concurrently on an L1, and requiring that each L2 guest's resources be kept private and isolated from the others. To provide some more context, I am currently trying to achieve GPU acceleration within a nested L2 VM on GCP (L1: KVM on GCP => L2: Cloud Hypervisor). I'm using GCP rather than a bare metal environment because GCP supports nested virtualization on their affordable N1 and G2 series VMs. Since I have limited access to the GCP environment, specifically to the L0 hypervisor and L1 hypervisor layers, I am unable to modify or access BIOS settings or certain underlying configurations at those levels. I am uncertain whether my attempts to configure the environment was entirely correct. However, after extensive online research, I couldn’t find a definitive answer on whether using VFIO is possible in GCP VMs. Despite my efforts, I have not been able to bind to vfio-pci without first enabling No-IOMMU mode on the system. If secure VFIO usage cannot be achieved, I'm open to exploring alternatives like virtio or vfio-user, provided they can securely allocate GPU access within the L2s without memory or resource sharing between the VMs or other potential security issues that I'm not yet aware of. Do you know if this is possible with the current version of your patchset? If not, do you have any suggestions on how to achieve this in a nested setup like this one [https://cloud.google.com/compute/docs/instances/nested-virtualization/overv… Any other insights you could share that might point me in the right direction for accomplishing this securely would be incredibly helpful, as my knowledge in this area is limited. Thanks again. -Mike Calendo Sent with [Proton Mail](https://proton.me/) secure email.

2 1

virtio-gpu patches for Cloud Hypervisor 41.0
by Alyssa Ross 16 Aug '24

16 Aug '24

The cloud-hypervisor-40.0-spectrum0 patches seem to still apply and work, so no new release for Cloud Hypervisor 41 is necessary.

1 0

[ANNOUNCE] cloud-hypervisor-40.0-spectrum0
by Alyssa Ross 01 Jul '24

01 Jul '24

I've updated Spectrum's Cloud Hypervisor patches (which add virtio-gpu support) to support the recently released Cloud Hypervisor 40.0. More information is available at <https://spectrum-os.org/software/cloud-hypervisor/>.

1 0

[ANNOUNCE] cloud-hypervisor-39.0-spectrum1
by Alyssa Ross 20 May '24

20 May '24

I've updated Spectrum's Cloud Hypervisor patches (which add virtio-gpu support) to reflect crosvm's recent renumbering[1] of some of the non-standard vhost-user protocol messages. [1]: https://chromium.googlesource.com/crosvm/crosvm/+/e428c4ba88a26695f63929c68… More information is available at <https://spectrum-os.org/software/cloud-hypervisor/>.

1 0

[ANNOUNCE] cloud-hypervisor-39.0-spectrum0
by Alyssa Ross 29 Apr '24

29 Apr '24

I've updated Spectrum's Cloud Hypervisor patches (which add virtio-gpu support) to support the recently released Cloud Hypervisor 39.0. More information is available at <https://spectrum-os.org/software/cloud-hypervisor/>.

1 0

[ANNOUNCE] cloud-hypervisor-38.0-spectrum0
by Alyssa Ross 19 Feb '24

19 Feb '24

I've updated Spectrum's Cloud Hypervisor patches (which add virtio-gpu support) to support the recently released Cloud Hypervisor 38.0. Also new in this release: • Support for adding GPU devices using Cloud Hypervisor's optional D-Bus API. • ch-remote now has an add-gpu subcommand. • GPU support in the API is now documented in the OpenAPI definition. More information is available at <https://spectrum-os.org/software/cloud-hypervisor/>. (I'm still not sure what the right place to announce these updates is…)

1 0

Development streams
by Alyssa Ross 16 Jan '24

16 Jan '24

Hi all, When we had an informal compartmentalization dinner at NixCon, one thing that we talked about a lot was how to communicate the ongoing work happening in Spectrum, make it easier for people to get familiar with how the project works etc. And the suggestion that really seemed to vibe with people there was development streams / videos, which have worked well for projects like Serenity OS and Asahi Linux. It’s been a while since then, but in the background myself and some collaborators have been working on setting everything up to be able to do consistent, high quality Spectrum development streams. I’ve done three so far this year, and I plan to keep going at that sort of pace. So far, on stream I’ve been working on implementing support for sharing files with VMs using the XDG File Chooser Portal. Streams are broadcast on https://live.qyliss.net/ And recordings are available at https://diode.zone/c/spectrum/ Currently, there’s no schedule, as it’s usually hard for me to stick to that sort of thing, and I want to get into the rythym of just streaming frequently when I can before I even attempt that. But I’ll try to do some scheduled streams in future if I can, because I know that would make it easier for people to join in. For now, you can be notified when streams start via browser notifications or ActivityPub. Thanks to everbody who suggested this and helped me get set up for it, and I hope this and other things I’m doing (like a proper release of the Cloud Hypervisor patches) make the project seem more alive and vibrant in 2024. :) Alyssa

1 0

[ANNOUNCE] Cloud Hypervisor with virtio-gpu support
by Alyssa Ross 16 Jan '24

16 Jan '24

Hi, For the past while, I've been maintaining a patchset for Cloud Hypervisor that makes it possible to use crosvm’s virtio-gpu implementation over vhost-user to provide a virtual GPU device to Cloud Hypervisor guests. It’s likely not upstreamable, especially as-is, but given there’s demand for this[1][2], and some other people have already started using my patches, I figured it was worth releasing them properly. The patches, along with more information, are available at: https://spectrum-os.org/software/cloud-hypervisor I’ve been keeping them up to date with new releases of Cloud Hypervisor, and expect to continue to do that. The patchset is developed and maintained as part of Spectrum[3], a project to create a compartmentalized desktop operating system. I’m not sure where the best place will be to announce updated versions of the patchset yet. Spectrum Discuss mailing list? Cloud Hypervisor list? A new one? Feedback very welcome. Get in touch if you have any questions, Alyssa

1 0

Action required from Matrix users in #spectrum:libera.chat
by Alyssa Ross 21 Jul '23

21 Jul '23

Some time in the next week, the #spectrum:libera.chat Matrix room is going to stop working, as a result of a dispute between Libera.Chat and matrix.org[1]. So, unfortunately, if you want to keep using Matrix to participate in the Spectrum chat, you need to take some action: 1. Leave #spectrum:libera.chat 2. Join #spectrum:fairydust.space It's very important to do it in that order, because otherwise the bridge gets confused and bad things happen. If something goes wrong, rejoin either channel, ask for help, and we'll figure it out. On the positive side, the new Matrix room is controlled by me, rather than by the administrators of the Matrix-Libera bridge. This means we can have nice things like room history, and if something like this happens again (needing to use a different bridge, moving IRC network, etc.), I should be able to use my room admin powers to change the setup transparently, without any action being required from individual Matrix users. So this is hopefully the last time I'm going to have to ask Matrix users to join a new room. [1]: https://libera.chat/news/matrix-deportalling

1 0