pvm

Guest kernel

guest/build.sh produces vmlinux-pvm-amd64: an uncompressed, module-free, PVH-bootable ELF kernel that Cloud Hypervisor loads via --kernel, exactly like sandbox’s standard guest kernel.

Config composition

Applied in order on the pinned tree:

  1. x86_64_defconfig + kvm_guest.config — upstream baselines
  2. configs/guest-base.config — derived from sandbox/boot/kernel/sandbox.config (kept in sync by hand): everything the boot path touches built in, no modules, the sandbox trim cuts
  3. configs/guest-pvm.config — the PVM delta: CONFIG_X86_PIE=y, CONFIG_PVM_GUEST=y, 5-level paging off

After olddefconfig the build asserts the PVM, boot- and container-critical symbols survived the merge — merge_config only warns, and a silently dropped symbol must fail the build, not ship.

Notes