Wei Liu

> @liuw since I've managed to reproduce that error by invoking `cloud-hypervisor` with no disk and no kernel (as noted in [this comment](https://github.com/cloud-hypervisor/cloud-hypervisor/issues/6147#issuecomment-1933503129)), doesn't that mean it's something within `cloud-hypervisor`...

Something more to consider: we can use the new landlock LSM to ask CH to restrict itself. This is likely to require changing CH code.

> Hi, @rbradford @liuw PTAL :) I'm so sorry. I was buried in my other work. I see that Jinank had done a thorough review. If he's happy with the...

> @liuw I think you opened the bug originally - are you happy with this - does it solve the purpose you wanted in terms of generating a panic? Yes,...

I have a hunch that if the max segment becomes configurable we need to enlarge the default SmallVec size used in the block processing code. That itself is not a...

I think Vitaly's talk has a lot of useful information. https://www.youtube.com/watch?v=ZYlaDqwL9Jw&ab_channel=TheLinuxFoundation

> Would possibly an upgrade to a newer Windows guest version be relevant in this scope? Windows Server 2022 is out already, so a corresponding guest image could be added...

The slide deck listed several solutions, which one are you referring to? The model listed on slide 16 says it works for user space data path too.

> Ah yes I can see that. > > Does that mean the VMM (or the vhost-user process) would program the TAP interface to use the BPF program on behalf...

@up2wing thanks for stepping up!