ISOLATED GUEST CREATION IN VLRTUALIZED COMPUTING SYSTEM

摘要

This disclosure is directed to isolated guest creation in a virtualized computing system. A memory in a computing device may be divided into isolated execution environments, allowing some software (e.g., guests) to be isolated in a high privilege execution environment. A virtual machine manager (VMM) of a low privilege execution environment may issue commands to a VMM of the high privilege execution environment to, for example, cause a guest loaded in the low privileged execution environment to be placed into the high privilege execution environment, to interact with the guest in the high privilege execution environment, to cause the guest to be removed from the high privilege execution environment, etc. The guest may include attributes configured to control guest behavior such as, for example, when to perform activities, how to respond to stop commands received from the VMM of the high privilege execution environment, etc.