07:54 <qyliss> Yeah, cloud-hypervisor is definitely using multiple memfds for guest memory

07:54 <qyliss> Another thing I was just thinking was that maybe it would be good if the main part of guest memory wasn't fd-backed at all (and just an anonymous mmap), because that way you couldn't even accidentally share it with another process

07:55 <qyliss> (the rust-vmm vm-memory crate, which cloud-hypervisor (and maybe also Firecracker) uses, does this by default, but I think cloud-hypervisor always passes it memfds anyway)