Methods and Apparatus for Handling Errors Involving Virtual Machines

• US 20090144579A1
• Filed: 12/04/2007
• Published: 06/04/2009
• Est. Priority Date: 12/04/2007
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: SWANSON, ROBERT C.
• Granted Patent: US 7,865,762 B2
• Time in Patent Office: Days
• US Class Current: 714/3
• CPC Class Codes: G06F 11/0712 in a virtual computing platform, e.g. logically partitioned systems
• CPC Class Codes: G06F 11/076 by exceeding a count or rate limit, e.g. word- or bit count limit
• CPC Class Codes: G06F 11/0793 Remedial or corrective actions recovery from an exception in an instruction pipeline G06F9/3861; by retry G06F11/1402; for recovering from a failure of a protocol instance or entity H04L69/40
• CPC Class Codes: G06F 11/0796 Safety measures, i.e. ensuring safe condition in the event of error, e.g. for controlling element

Abstract

A virtual machine monitor (VMM) in a data processing system handles errors involving virtual machines (VMs) in the processing system. For instance, an error manager in the VMM may detect an uncorrectable error in involving a component associated with a first VM in the processing system. In response to detection of that error, the error manager may terminate the first VM, while allowing a second VM in the processing system to continue operating. In one embodiment, the error manager automatically determines which VM is affected by the uncorrectable error, in response to detecting the uncorrectable error. The error manager may also automatically spawn a new VM to replace the first VM, if the processing system has sufficient resources to support the new VM. Other embodiments are described and claimed.

Claims

1. A method comprising:

detecting an uncorrectable error in a processing system having first and second virtual machines (VMs), the uncorrectable error involving a component associated with the first VM; and

in response to detection of the uncorrectable error, terminating the first VM, and allowing the second VM to continue operating.

2. A method according to claim 1, comprising:

in response to detecting the uncorrectable error, automatically determining which VM is affected by the uncorrectable error, and

terminating the first VM in response to a determination that the VM affected by the uncorrectable error is the first VM.

3. A method according to claim 1, further comprising:

in response to detecting the uncorrectable error, automatically determining whether the processing system has sufficient resources to support a new VM; and

in response to determining that the processing system has sufficient resources to support the new VM, spawning the new VM.

4. A method according to claim 1, further comprising:

in response to detecting the uncorrectable error, automatically spawning a new VM; and

launching software in the new VM to support a function formerly served by the first VM.

5. A method according to claim 1, further comprising:

configuring an interrupt select register for a basic input/output system (BIOS) in the processing system to not issue a system management interrupt (SMI) in response to a machine check exception.

6. A method according to claim 1, wherein the uncorrectable error involving the component associated with the first VM comprises:

a memory error in a memory module used by the first VM.

7. A method according to claim 1, wherein the uncorrectable error involving the component associated with the first VM comprises:

a data error in a processing unit used by the first VM.

8. An apparatus comprising:

a tangible, machine-accessible medium; and

instruction in the machine-accessible medium, wherein the instructions, when executed by a processing system having first and second virtual machines (VMs), cause the processing system to perform operations comprising;

detecting an uncorrectable error involving a component associated with the first VM; and

in response to detection of the uncorrectable error, terminating the first VM, and allowing the second VM to continue operating.

9. An apparatus according to claim 8, wherein the operations comprise:

in response to detecting the uncorrectable error, automatically determining which VM is affected by the uncorrectable error, and

terminating the first VM in response to a determination that the VM affected by the uncorrectable error is the first VM.

10. An apparatus according to claim 8, wherein the operations comprise:

in response to detecting the uncorrectable error, automatically determining whether the processing system has sufficient resources to support a new VM; and

in response to determining that the processing system has sufficient resources to support the new VM, spawning the new VM.

11. An apparatus according to claim 8, wherein the operations comprise:

in response to detecting the uncorrectable error, automatically spawning a new VM; and

launching software in the new VM to support a function formerly served by the first VM.

12. An apparatus according to claim 8, wherein the operations comprise:

configuring an interrupt select register for a basic input/output system (BIOS) in the processing system to not issue a system management interrupt (SMI) in response to a machine check exception.

13. An apparatus according to claim 8, wherein the uncorrectable error involving the component associated with the first VM comprises:

a memory error in a memory module used by the first VM.

14. An apparatus according to claim 8, wherein the uncorrectable error involving the component associated with the first VM comprises:

a data error in a processing unit used by the first VM.

15. A processing system comprising:

first and second processing units;

a first memory controller associated with the first processing unit;

a second memory controller associated with the second processing unit;

a first memory module responsive to the first memory controller;

a second memory module responsive to the second memory controller;

a machine-accessible medium; and

a virtual machine error manager stored in the machine-accessible medium, the virtual machine error manager including control logic to perform operations comprising;

detecting an uncorrectable error involving a component associated with a first VM in the processing system; and

in response to detection of the uncorrectable error, terminating the first VM, while allowing a second VM in the processing system to continue operating.

16. A processing system according to claim 15, wherein the virtual machine error manager comprises part of a virtual machine manager (VMM).

17. A processing system according to claim 16, wherein the VMM comprises a hypervisor.

18. A processing system according to claim 15, wherein the virtual machine error manager comprises control logic to perform operations comprising:

in response to detecting the uncorrectable error, automatically determining which VM is affected by the uncorrectable error, and

terminating the first VM in response to a determination that the VM affected by the uncorrectable error is the first VM.

19. A processing system according to claim 15, wherein the virtual machine error manager comprises control logic to perform operations comprising:

in response to detecting the uncorrectable error, automatically determining whether the processing system has sufficient resources to support a new VM; and

in response to determining that the processing system has sufficient resources to support the new VM, spawning the new VM.

20. A processing system according to claim 15, wherein the virtual machine error manager comprises control logic to perform operations comprising:

in response to detecting the uncorrectable error, automatically spawning a new VM; and

launching software in the new VM to support a function formerly served by the first VM.

21. A processing system according to claim 15, wherein the virtual machine error manager comprises control logic to perform operations comprising:

configuring an interrupt select register for a basic input/output system (BIOS) in the processing system to not issue a system management interrupt (SMI) in response to a machine check exception.

22. A processing system according to claim 15, wherein the uncorrectable error involving the component associated with the first VM comprises an error selected from the group consisting of:

a memory error in a memory module used by the first VM; and

a data error in a processing unit used by the first VM.