Hello Hongbo,
Yes we would certainly be looking for Real-Time performance, am wondering if I can slightly modify and use following configuration:
1. SOS (Ubuntu 18.04) + Windows (Win10 LTS)
2. GVT-d (GPU passthrough) to Guest Windows.

Please advise..

Hello Hongbo,
Yes we would certainly be looking for Real-Time performance, am wondering if I can slightly modify and use following configuration:
1. SOS (Ubuntu 18.04) + Windows (Win10 LTS)
2. GVT-d (GPU passthrough) to Guest Windows.

Please advise..

Hello Geoffroy,
Am using release 2.2 for ACRN loading Ubuntu 18.04 as SOS.

Following all the steps listed here with the only exception is that I am using different hardware.
https://projectacrn.github.io/latest/getting-started/rt_industry_ubuntu.html

I have attached my hardware specific board.xml file, CPUid.txt and 40_custom file indicating my boot parameters.
I have also uploaded output from lshw detailing hardware information for my platform.

Please let me know if any additional details are required.

I also do not have serial port so can't interact with ACRN hypervisor.

Thanks in advance for helping..

Thanks SIMING

So I added following boot arguments
i915.enable_gvt=1 i915.nuclear_pageflip=1 i915.avail_planes_per_pipe=0x010101 i915.domain_plane_owners=0x011100001111 i915.enable_guc=0

I do not get any GVT initialization failures but now am getting TPM initialization errors..
I have attached TPM_InitFailed and output from lshw for your reference. Wondering how can I debug this further..

Thanks

Hello,
On my custom platform I installed Ubunutu 18.04 as service VM following instructions located here ..
https://projectacrn.github.io/1.6.1/getting-started/rt_industry.html

After I boot in my service vm am trying to installing windows as a Guest OS on 18.04 Ubuntu service VM.

Followed instructions located here..
https://projectacrn.github.io/1.6.1/tutorials/using_windows_as_uos.html

I believe I configured shell script correctly as per instructions and now am getting GVT: init failed error. 
I have attached logs and install_win.sh script for the reference. 
Wondering if I need to boot with any special flags for service VMs or am I missing something very basic.

Thanks..

-----Original Message-----
From: acrn-users@... <acrn-users@...>
On Behalf Of Geoffroy Van Cutsem via lists.projectacrn.org
Sent: 10. lokakuutata 2020 2:38
To: acrn-users@...
Subject: Re: [acrn-users] Logical partition scenario and GFX sharing

Hi Mikko,

Thanks for confirming these points (both about RT and FuSa).

I have added a few comments in-line below.

Cheers,
Geoffroy

-----Original Message-----
From: acrn-users@...
<acrn-users@...>
On Behalf Of Mikko Kovanen
Sent: Friday, October 9, 2020 7:32 AM
To: acrn-users@...
Subject: Re: [acrn-users] Logical partition scenario and GFX sharing


Hi Geoffroy,

thanks for answering and confirming my assumption. You are correct,
RT or FUSA is not required.
For security we are currently mainly focused on requirement that
Android display data should be protected from other VMs, and at the
same time the security related development, evaluation, maintenance,
attestation and monitoring efforts should be kept reasonably low (i.e.
the virtualized environment should not significantly increase the
security scope). For that a logical partition scenario with GVT-g would have

been pretty good match.

I agree, this sounded like the most promising option. Do you need much
graphics performance for your Windows VM? If we can find a way to have
the Windows VM display output transferred (over a network? Shared
memory?) to the Android VM and let it manage it, would that help you?
(Note that I'm kind of thinking aloud here so far 😊)

Since that is not possible I guess the next options would be:

a. Integrating ACRN DM in Android
- Some development effort needed
- Only slight increase for security efforts since Android itself is
already in security scope

I am not aware that this has ever been done. But China is on holiday at the
moment, where many ACRN developers are located. They'll be back next
week and perhaps can tell if anyone ever tried this.

b. Using as simple service VM as possible
- Significant increase for development effort since service VM would
need to be self-made (e.g. from Yocto)

Are you aware of "meta-acrn"
[https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgith
ub.com%2Fintel%2Fmeta-
acrn%2F&amp;data=02%7C01%7C%7Ccd63baec916c4f985e7808d86cac5b98%
7Cf89be375dd3f4314b40fdbdd01f05029%7C0%7C0%7C637378834822198569&
amp;sdata=GXnjTwvVnbG5sNyrX5oRPm0Mxi3XczUVAnKedH8QiPo%3D&am
p;reserved=0]? It provides a layer with recipes for building a Service VM OS
for ACRN (as well as a Linux Guest OS, but you don't need this part). It's a
pretty basic OS at this stage so unless you really need to trim it down, this
may be a very good starting point and save you quite some effort.

- Even with simple service VM the security scope would increase
significantly because there likely is no way to exclude the service VM
from security evaluation, maintenance, attestation and monitoring

Best regards,
Mikko


From: acrn-users@...
<acrn-users@...>
On Behalf Of Geoffroy Van Cutsem via lists.projectacrn.org
Sent: 8. lokakuutata 2020 17:33
To: acrn-users@...
Subject: Re: [acrn-users] Logical partition scenario and GFX sharing

Hi Mikko,

You are correct, resources cannot be shared between VMs in the logical
partition scenario. It sounds from the brief description of your
use-case that you do not need hard realtime or Functional Safety
certification, is that correct?

One thing that may be possible, but I don't know if anyone has tried
it yet is to run Android in a Docker container directly in the Service
VM. See this page for more info on how to run Android in a Docker

container:

https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2F01.o

r
g%2Fprojectceladon%2Fdocumentation%2Fgetting-started%2Fon-

container&data=02%7C01%7C%7Cf3cb452693e04d400e6f08d86b970f6a%7Cf8

9be375dd3f4314b40fdbdd01f05029%7C0%7C0%7C637377644732701761&sdat

a=IumOvztJpjgUapq4h0XZTvLqm%2BX1E0lv01%2B%2BbefNZfQ%3D&reserve

d=0

Would that help you keep the surface attack of your system reasonably
contained?

Thanks,
Geoffroy

From: mailto:acrn-users@... <mailto:acrn-
users@...> On Behalf Of Mikko Kovanen
Sent: Tuesday, October 6, 2020 3:19 PM
To: mailto:acrn-users@...
Subject: [acrn-users] Logical partition scenario and GFX sharing


  Hi,

  I'm pretty sure it is not possible but just in case I have missed
something crucial, is it possible to use GFX sharing (for example with
GVT-g) in logical partition scenario? The usage scenario we are
investigating is such that it would have Android running on one user
VM and Windows on another, both would need at least reasonable GFX
performance, and it would be beneficial to not have a service VM to

decrease security scope.

Best regards,
Mikko Kovanen

Senior Specialist, SW
Mobile: +358 40 779 7528

https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.

aavamobile.com%2F&data=02%7C01%7C%7Cf3cb452693e04d400e6f08d86b9

70f6a%7Cf89be375dd3f4314b40fdbdd01f05029%7C0%7C0%7C6373776447327

01761&sdata=HIVUJGOloR9S6ma7TRiWDuouiJbfrQl5KXHdBembMEk%3D&re

served=0



Aava Mobile Oy
Nahkatehtaankatu 2  |   90130 Oulu, Finland