Debugging KVM Using Intel DCI Technology

on YouTube ↗31m

" summary

Shows that Intel DCI over a USB3 cable plus Empower System Studio replaces slow print debugging for KVM by letting a host inspect a running Ubuntu VM target: uses USB-hosted DCI (vs boundary-scan CCA), xDCI→xHCI plumbing, and a customized BIOS to enable DCI. Sets a vmx_on breakpoint, traces vcpu creation, virtual MMU, LAPIC and IO exits, and catches a reboot/panic path; proves live tracing finds root causes far faster than printf.

AI-written summary · about

" chapters (8)

1. 0:00Start
2. 0:21Self Introduction
3. 2:23The Classic Xen Architecture
4. 12:20CI = Direct Connect Interface
5. 20:12VM Microsoft Hyper-V emulation
6. 27:23PIC Emulation
7. 28:46Real Case
8. 29:50PU2 is in Panic

" related talks

• 50mProtected KVM on Arm64: A Technical Deep DiveQuentin Perret · KVM Forum 2022
• 17mStatus Update on TDX SupportIsaku Yamahata · KVM Forum 2021
• 27mIntel Trusted Domain Extensions (TDX) Host Kernel SupportKai Huang · KVM Forum 2022
• 22mHunting and Exploiting Recursive MMIO Flaws in QEMU KVMGaoning Pan, Chunming Wu, Qiuhao Li, Hui He · Black Hat Asia 2022
• 32mSeeing Through The Same Lens...Siqi Zhao, Wen Xu, Dawu Gu, Xuhua Ding · 26th USENIX Security Symposium (USENIX Security '17)
• 25mExploring I/O Support for Virtualization-Based Trusted Execution EnvironmentHao Wu · KVM Forum 2022
• 43mDebug for Bug: Crack and Hack Apple Core by ItselfMoony Li, Lilang Wu · Black Hat USA 2019
• 25mDon't Trust Your USB! How to Find Bugs in USB Device DriversRalf Spenneberg, Hendrik Schwartke, Sergej Schumilo · Black Hat Europe 2014