I agree that its much nicer for mgmt tools if svm/vmx CPU flags can just be
toggled in the normal manner. Might we also want to have a enable/disable
nesting flag, so we can mirror the way real hardware lets you disable virt
in the BIOS even when the CPU(s) have the vmx/svm flags set ?
I don't see how that's useful. We don't model anything like this in the kvm
kernel module, so whatever we expose in user space would not be useful for
detection testing. Also I'm fairly sure you either want nesting or you don't
:). And if you want nesting, you probably want -cpu host too, since you lose
migration anyways.