I'm on kernel 7.0.0-3-pve and stock pve-qemu (unpatched for GMET)
dmesg | grep AMD-ViAMD-Vi: Using global IVHD EFR:0x246577efa2254afa, EFR2:0x0pci 0000:00:00.2: AMD-Vi: IOMMU performance counters supportedAMD-Vi: Extended features (0x246577efa2254afa, 0x0): PPR NX GT [5] IA GA PC GA_vAPICAMD-Vi: Interrupt remapping enabledAMD-Vi: Virtual APIC enableddmesg | grep -i kvm_amdkvm_amd: TSC scaling supportedkvm_amd: Nested Virtualization enabledkvm_amd: Nested Paging enabledkvm_amd: LBR virtualization supportedkvm_amd: AVIC unsupported in CPUID but force enabled, your system might crash and burnkvm_amd: AVIC enabledkvm_amd: x2AVIC enabled (max 512 vCPUs)kvm_amd: Virtual VMLOAD VMSAVE supportedkvm_amd: Virtual GIF supportedkvm_amd: Virtual NMI enabledcpuid -l 0x8000000a -1CPU: SVM Secure Virtual Machine (0x8000000a/eax): SvmRev: SVM revision = 0x1 (1) SVM Secure Virtual Machine (0x8000000a/edx): nested paging = true LBR virtualization = true SVM lock = true NRIP save = true MSR based TSC rate control = true VMCB clean bits support = true flush by ASID = true decode assists = true PMC virtualization = true SSSE3/SSE5 opcode set disable = false pause intercept filter = true pause filter threshold = true AVIC: AMD virtual interrupt controller = false virtualized VMLOAD/VMSAVE = true virtualized global interrupt flag (GIF) = true GMET: guest mode execute trap = true X2AVIC: virtualized X2APIC = true supervisor shadow stack = true guest Spec_ctl support = true ROGPT: read-only guest page table = true host MCE override = true INVLPGB/TLBSYNC hyperv interc enable = false VNMI: NMI virtualization = true IBS virtualization = true extended LVT AVIC access changes = true guest VMCB addr check = true bus lock threshold = true idlt HLT intercept = true EXITINFO1 non-interceptible shutdown = true NASID: number of address space identifiers = 0x8000 (32768)vmx-mbec was recently added to the kernel and makes VBS in a VM feasible. Without MBEC, VBS/HVCI performance is significantly worse.nano /etc/pve/virtual-guest/cpu-models.conf/etc/pve and is replicated automatically to the other cluster nodes.custom- prefix, for example:cpu: custom-icelake-win-vbscpu-model: cascadelake-lnx
reported-model Cascadelake-Server-v5
phys-bits 46
flags +md-clear;+rfds-no;+flush-l1d;+stibp;+tsc-adjust;+ss
cpu-model: cascadelake-win
reported-model Cascadelake-Server-v5
phys-bits 46
flags +md-clear;+rfds-no;+flush-l1d;+stibp;+tsc-adjust;+ss;+hv-apicv;+hv-frequencies;+hv-tlbflush;+hv-tlbflush-ext;+hv-xmm-input
cpu-model: cascadelake-win-vbs
reported-model Cascadelake-Server-v5
phys-bits 46
flags +md-clear;+rfds-no;+flush-l1d;+stibp;+tsc-adjust;+ss;+hv-apicv;+hv-frequencies;+hv-tlbflush;+hv-tlbflush-ext;+hv-xmm-input;+hv-evmcs;+hv-emsr-bitmap;+hv-tlbflush-direct;+vmx;+vmx-mbec;+hv-reenlightenment;+hv-stimer-direct
cpu-model: icelake-lnx
reported-model Icelake-Server-v6
phys-bits 46
flags -taa-no;+sbdr-ssdp-no;+psdp-no;+md-clear;+rdctl-no;+rfds-no;+flush-l1d;+stibp;+tsc-adjust;+ss;+dtes64;+pdcm;+pmu
cpu-model: icelake-win
reported-model Icelake-Server-v6
phys-bits 46
flags -taa-no;+sbdr-ssdp-no;+psdp-no;+md-clear;+rdctl-no;+rfds-no;+flush-l1d;+stibp;+tsc-adjust;+ss;+dtes64;+pdcm;+pmu;+hv-apicv;+hv-frequencies;+hv-tlbflush;+hv-tlbflush-ext;+hv-xmm-input
cpu-model: icelake-win-vbs
reported-model Icelake-Server-v6
phys-bits 46
flags -taa-no;+sbdr-ssdp-no;+psdp-no;+md-clear;+rdctl-no;+rfds-no;+flush-l1d;+stibp;+tsc-adjust;+ss;+dtes64;+pdcm;+pmu;+hv-apicv;+hv-frequencies;+hv-tlbflush;+hv-tlbflush-ext;+hv-xmm-input;+hv-evmcs;+hv-emsr-bitmap;+hv-tlbflush-direct;+vmx;+vmx-mbec;+hv-reenlightenment;+hv-stimer-direct+vmx-mbec is the most important accelerator. With VBS/HVCI enabled, MBEC makes a major difference to guest responsiveness.+hv-evmcs also helped in my environment. Removing it made the VM slower.+hv-reenlightenment requires pinning a virtual TSC frequency for live migration. The hosts in this migration pool have nominal TSC/base frequencies of 2.5 GHz, 2.6 GHz, and 3.6 GHz. I pinned the VM TSC to 2.5 GHz, the lowest value in the pool:qm set <vmid> --args "-global cpu.tsc-frequency=2500000000"+invtsc and +hv-stimer-direct appear to be mutually exclusive for VBS guests. When both are set, the VM hangs as the Windows bootloader loads if VBS is enabled. In my testing, +invtsc and +hv-stimer-direct were similar in performance, but +hv-stimer-direct felt subjectively faster, so I stopped using +invtsc for these VBS guests. Both require TSC pinning.+pmu/+pdcm were exposed in the Cascade Lake ABI. The failure looked like this:Failed to set MSR 0x38f to 0x7000000ff+pmu/+pdcm in a Cascade Lake cpu model. PMU MSR state can break live migration.+fb-clear in my testing, so I do not add +fb-clear to any custom CPU model that needs to migrate there.-taa-no. Removing it caused some VMs to fail to boot. My understanding is that Intel partially disabledTSX behavior on Ice Lake, and exposing taa-no incorrectly can break things.qm showcmd showed the expected base flags such as:hv_relaxed
hv_reset
hv_runtime
hv_spinlocks=0x1fff
hv_stimer
hv_synic
hv_time
hv_vapic
hv_vpindex
hv_ipi+hv-evmcs
+hv-emsr-bitmap
+hv-tlbflush-direct
+hv-reenlightenment
+hv-stimer-direct
+vmx
+vmx-mbec+vmx-mbec+hv-evmcs+hv-stimer-direct+hv-reenlightenmentcpu.tsc-frequency+invtsc together with +hv-stimer-direct+fb-clear for Emerald Rapids compatibility+pmu/+pdcm in Cascade Lake migration ABIs-taa-no on the Ice Lake Server model
echo 0 > /sys/module/kvm/parameters/halt_poll_ns, echo 8 > /sys/kernel/debug/pmc_core/ltr_ignore - this is because something disables LTR on this device when the VM is booted and then it is never reverted back until the entire host is rebooted; anyway, not related).KeMinimumIncrement came. For some reason, in this VM it is set to 0.5ms, and by just increasing it to 15.6ms, the problem goes away. First, launch this on host: turbostat --interval 5 --show Pkg%pc2,Pkg%pc6,PkgWatt, and then, to adjust the minimum in Windows, do so from WinDbg kernel debugger, on a fresh boot, when you have reached the desktop:ed nt!KeMinimumIncrement 000186a0
g VM-EXIT Samples Samples% Time% Min Time Max Time Avg time
MSR_WRITE 3304 36.49% 27.39% 1.29us 58660.68us 780.72us ( +- 9.33% )
HLT 2933 32.39% 70.88% 0.99us 59354.54us 2275.92us ( +- 3.09% )
EOI_INDUCED 2486 27.46% 1.02% 0.82us 36253.94us 38.75us ( +- 47.78% )
VMCALL 220 2.43% 0.39% 1.62us 23145.27us 168.79us ( +- 71.21% )
EXTERNAL_INTERRUPT 86 0.95% 0.24% 2.49us 21929.36us 265.32us ( +- 96.06% )
IO_INSTRUCTION 21 0.23% 0.07% 17.28us 6245.37us 326.76us ( +- 90.57% )
EPT_MISCONFIG 4 0.04% 0.00% 7.89us 19.04us 11.70us ( +- 21.71% ) VM-EXIT Samples Samples% Time% Min Time Max Time Avg time
EOI_INDUCED 950 46.64% 0.03% 1.01us 39.53us 5.14us ( +- 2.49% )
HLT 940 46.15% 97.62% 186.04us 62462.74us 15069.58us ( +- 0.61% )
EXTERNAL_INTERRUPT 65 3.19% 0.01% 6.88us 51.68us 23.80us ( +- 5.04% )
MSR_READ 44 2.16% 1.51% 1.51us 62507.30us 4965.37us ( +- 45.38% )
EPT_MISCONFIG 21 1.03% 0.64% 6.95us 92747.53us 4427.60us ( +- 99.74% )
IO_INSTRUCTION 15 0.74% 0.19% 4.93us 27776.22us 1869.92us ( +- 98.96% )
CPUID 1 0.05% 0.00% 2.43us 2.43us 2.43us ( +- 0.00% )
PAUSE_INSTRUCTION 1 0.05% 0.00% 5.24us 5.24us 5.24us ( +- 0.00% )Pkg%pc2 Pkg%pc6 PkgWatt
0.00 0.00 8.48
0.00 0.00 8.48Pkg%pc2 Pkg%pc6 PkgWatt
9.65 55.13 4.19
9.65 55.13 4.19KeMinimumIncrement and patches like we did from WinDbg. It works, doesn't seem to break other stuff, but yeah, has to be tested in the field so to say. I had it include plenty of debugging info into it, so you can see what it is doing. Call it like python3 fix-tick.py console, where fix-tick.py is its filename, and console the domain for which you want to apply this. It uses that and gets the PID of the respective qemu process, you can hardcode PID for quick testing.#!/usr/bin/env python3
import os, re, struct, subprocess, sys, time
WANT = 0x2625a
EXPECT = 0x1388
SYM = b"KeQueryTimeIncrement"
DELTA = 0x9c # KeMinimumIncrement - KeMaximumIncrement
WINDOW = 0x400
def log(msg):
print(f"[{time.strftime('%H:%M:%S')}] {msg}", flush=True)
def qemu_pid(dom):
pid = subprocess.check_output(["pgrep", "-f", f"guest={dom},"]).decode().split()[0]
log(f"domain {dom!r} -> qemu pid {pid}")
return pid
def ram_regions(pid):
out = []
for line in open(f"/proc/{pid}/maps"):
m = re.match(r"([0-9a-f]+)-([0-9a-f]+) rw-[sp]", line)
if not m:
continue
a, b = int(m.group(1), 16), int(m.group(2), 16)
if b - a >= 512 << 20:
out.append((a, b - a))
log(f" candidate RAM region {a:#014x} size {(b-a)>>20} MiB")
if not out:
log(" NO RAM REGIONS FOUND (>=512 MiB rw mapping) -- wrong pid?")
return out
def rd(fd, off, n):
os.lseek(fd, off, os.SEEK_SET)
return os.read(fd, n)
def parse_pe(fd, base):
try:
hdr = rd(fd, base, 0x1000)
if len(hdr) < 0x1000 or hdr[:2] != b"MZ":
return None
e = struct.unpack_from("<I", hdr, 0x3c)[0]
if e > 0xf00 or hdr[e:e + 4] != b"PE\0\0":
return None
if struct.unpack_from("<H", hdr, e + 24)[0] != 0x20b:
return None
edir = struct.unpack_from("<I", hdr, e + 24 + 112)[0]
if not edir:
return None
ed = rd(fd, base + edir, 40)
nrva = struct.unpack_from("<I", ed, 12)[0]
name = rd(fd, base + nrva, 16).split(b"\0")[0]
if not name.lower().startswith(b"ntoskrnl.exe"):
return None
log(f" PE64 at {base:#014x} export name {name!r}")
log(" -> ntoskrnl.exe MATCH")
return ed
except OSError:
return None
def find_sym(fd, base, ed):
nfun, nnam = struct.unpack_from("<II", ed, 20)
afun, anam, aord = struct.unpack_from("<III", ed, 28)
log(f" export dir: {nfun} functions, {nnam} names")
names = struct.unpack("<%dI" % nnam, rd(fd, base + anam, 4 * nnam))
for i, nrva in enumerate(names):
if rd(fd, base + nrva, len(SYM) + 1) == SYM + b"\0":
o = struct.unpack_from("<H", rd(fd, base + aord + 2 * i, 2))[0]
rva = struct.unpack_from("<I", rd(fd, base + afun + 4 * o, 4))[0]
log(f" {SYM.decode()} name index {i} ordinal {o} rva {rva:#x}")
return rva
log(f" {SYM.decode()} NOT in export table")
return None
def attempt(fd, pid, n):
log(f"--- pass {n} ---")
scanned = 0
for start, size in ram_regions(pid):
for off in range(start, start + size, 0x1000):
scanned += 1
ed = parse_pe(fd, off)
if not ed:
continue
rva = find_sym(fd, off, ed)
if not rva:
continue
code = rd(fd, off + rva, 16)
log(f" KeQueryTimeIncrement bytes {code[:8].hex()}")
if code[0:2] != b"\x8b\x05":
log(" unexpected prologue, cannot derive KeMaximumIncrement")
continue
disp = struct.unpack_from("<i", code, 2)[0]
maxr = rva + 6 + disp
log(f" KeMaximumIncrement rva {maxr:#x} = "
f"{struct.unpack('<I', rd(fd, off + maxr, 4))[0]:#x}")
minr = maxr + DELTA
if struct.unpack("<I", rd(fd, off + minr, 4))[0] != EXPECT:
log(f" +{DELTA:#x} not {EXPECT:#x}, scanning +/-{WINDOW:#x}")
blob = rd(fd, off + maxr - WINDOW, 2 * WINDOW)
hits = [i for i in range(0, len(blob) - 3, 4)
if struct.unpack_from("<I", blob, i)[0] == EXPECT]
if len(hits) != 1:
log(f" {len(hits)} candidates, ambiguous -- aborting")
continue
minr = maxr - WINDOW + hits[0]
log(f" unique match at rva {minr:#x}")
addr = off + minr
cur = struct.unpack("<I", rd(fd, addr, 4))[0]
log(f" host addr {addr:#014x} currently {cur:#x} ({cur/10000:.2f} ms)")
if cur != EXPECT:
log(f" MISMATCH: expected {EXPECT:#x}; not writing (image may not be "
f"physically contiguous, or already patched)")
continue
os.lseek(fd, addr, os.SEEK_SET)
os.write(fd, struct.pack("<I", WANT))
back = struct.unpack("<I", rd(fd, addr, 4))[0]
if back != WANT:
log(f" WRITE FAILED: reads back {back:#x}")
return False
log(f" PATCHED {cur:#x} -> {WANT:#x} ({WANT/10000:.2f} ms) verified")
return True
log(f" scanned {scanned} pages, no ntoskrnl yet (guest still booting?)")
return False
dom = sys.argv[1]
log(f"start: target {SYM.decode()} {EXPECT:#x} -> {WANT:#x}")
pid = qemu_pid(dom)
fd = os.open(f"/proc/{pid}/mem", os.O_RDWR)
try:
for n in range(1, 61):
if attempt(fd, pid, n):
log("done")
sys.exit(0)
time.sleep(10)
finally:
os.close(fd)
log("TIMED OUT after 10 minutes")
sys.exit(1)<domain type='kvm' id='2' xmlns:qemu='http://libvirt.org/schemas/domain/qemu/1.0'>
<name>console</name>
<uuid>837730e7-258a-4357-865b-375fe422825f</uuid>
<memory unit='KiB'>33554432</memory>
<currentMemory unit='KiB'>33554432</currentMemory>
<vcpu placement='static'>16</vcpu>
<iothreads>1</iothreads>
<cputune>
<vcpupin vcpu='0' cpuset='0'/>
<vcpupin vcpu='1' cpuset='1'/>
<vcpupin vcpu='2' cpuset='2'/>
<vcpupin vcpu='3' cpuset='3'/>
<vcpupin vcpu='4' cpuset='4'/>
<vcpupin vcpu='5' cpuset='5'/>
<vcpupin vcpu='6' cpuset='6'/>
<vcpupin vcpu='7' cpuset='7'/>
<vcpupin vcpu='8' cpuset='8'/>
<vcpupin vcpu='9' cpuset='9'/>
<vcpupin vcpu='10' cpuset='10'/>
<vcpupin vcpu='11' cpuset='11'/>
<vcpupin vcpu='12' cpuset='12'/>
<vcpupin vcpu='13' cpuset='13'/>
<vcpupin vcpu='14' cpuset='14'/>
<vcpupin vcpu='15' cpuset='15'/>
<emulatorpin cpuset='14-15'/>
</cputune>
<resource>
<partition>/machine</partition>
</resource>
<os firmware='efi'>
<type arch='x86_64' machine='pc-q35-10.0'>hvm</type>
<firmware>
<feature enabled='no' name='enrolled-keys'/>
<feature enabled='no' name='secure-boot'/>
</firmware>
<loader readonly='yes' type='pflash' format='raw'>/usr/share/OVMF/OVMF_CODE_4M.fd</loader>
<nvram template='/usr/share/OVMF/OVMF_VARS_4M.fd' templateFormat='raw' format='raw'>/var/lib/libvirt/qemu/nvram/console_VARS.fd</nvram>
<boot dev='hd'/>
<smbios mode='sysinfo'/>
</os>
<features>
<acpi/>
<apic/>
<hyperv mode='custom'>
</hyperv>
<smm state='on'/>
</features>
<cpu mode='host-passthrough' check='none' migratable='on'>
<topology sockets='1' dies='1' clusters='1' cores='16' threads='1'/>
<maxphysaddr mode='passthrough' limit='42'/>
</cpu>
<clock offset='localtime'>
<timer name='rtc' tickpolicy='catchup'/>
<timer name='pit' tickpolicy='delay'/>
<timer name='hpet' present='no'/>
<timer name='hypervclock' present='yes'/>
</clock>
<on_poweroff>destroy</on_poweroff>
<on_reboot>restart</on_reboot>
<on_crash>destroy</on_crash>
<devices>
<emulator>/usr/bin/qemu-system-x86_64</emulator>
<disk type='file' device='cdrom'>
<driver name='qemu' discard='unmap'/>
<target dev='sda' bus='sata'/>
<readonly/>
<alias name='sata0-0-0'/>
<address type='drive' controller='0' bus='0' target='0' unit='0'/>
</disk>
<controller type='pci' index='0' model='pcie-root'>
<alias name='pcie.0'/>
</controller>
<controller type='pci' index='1' model='pcie-root-port'>
<model name='pcie-root-port'/>
<target chassis='1' port='0x10'/>
<alias name='pci.1'/>
<address type='pci' domain='0x0000' bus='0x00' slot='0x04' function='0x0'/>
</controller>
<controller type='pci' index='2' model='pcie-root-port'>
<model name='pcie-root-port'/>
<target chassis='2' port='0x8'/>
<alias name='pci.2'/>
<address type='pci' domain='0x0000' bus='0x00' slot='0x01' function='0x0' multifunction='on'/>
</controller>
<controller type='pci' index='3' model='pcie-root-port'>
<model name='pcie-root-port'/>
<target chassis='3' port='0x9'/>
<alias name='pci.3'/>
<address type='pci' domain='0x0000' bus='0x00' slot='0x01' function='0x1'/>
</controller>
<controller type='pci' index='4' model='pcie-root-port'>
<model name='pcie-root-port'/>
<target chassis='4' port='0xa'/>
<alias name='pci.4'/>
<address type='pci' domain='0x0000' bus='0x00' slot='0x01' function='0x2'/>
</controller>
<controller type='pci' index='5' model='pcie-root-port'>
<model name='pcie-root-port'/>
<target chassis='5' port='0xb'/>
<alias name='pci.5'/>
<address type='pci' domain='0x0000' bus='0x00' slot='0x01' function='0x3'/>
</controller>
<controller type='pci' index='6' model='pcie-to-pci-bridge'>
<model name='pcie-pci-bridge'/>
<alias name='pci.6'/>
<address type='pci' domain='0x0000' bus='0x01' slot='0x00' function='0x0'/>
</controller>
<controller type='pci' index='7' model='pcie-root-port'>
<model name='pcie-root-port'/>
<target chassis='7' port='0xc'/>
<alias name='pci.7'/>
<address type='pci' domain='0x0000' bus='0x00' slot='0x01' function='0x4'/>
</controller>
<controller type='pci' index='8' model='pcie-root-port'>
<model name='pcie-root-port'/>
<target chassis='8' port='0xd'/>
<alias name='pci.8'/>
<address type='pci' domain='0x0000' bus='0x00' slot='0x01' function='0x5'/>
</controller>
<controller type='pci' index='9' model='pcie-root-port'>
<model name='pcie-root-port'/>
<target chassis='9' port='0xe'/>
<alias name='pci.9'/>
<address type='pci' domain='0x0000' bus='0x00' slot='0x01' function='0x6'/>
</controller>
<controller type='sata' index='0'>
<alias name='ide'/>
<address type='pci' domain='0x0000' bus='0x00' slot='0x1f' function='0x2'/>
</controller>
<controller type='usb' index='0' model='qemu-xhci'>
<alias name='usb'/>
<address type='pci' domain='0x0000' bus='0x02' slot='0x00' function='0x0'/>
</controller>
<interface type='network'>
<mac address='52:54:00:dd:6d:9c'/>
<source network='default' portid='66704f91-cef2-4eff-b2b4-b3939822f4aa' bridge='virbr0'/>
<target dev='vnet1'/>
<model type='virtio'/>
<alias name='net0'/>
<address type='pci' domain='0x0000' bus='0x04' slot='0x00' function='0x0'/>
</interface>
<serial type='pty'>
<source path='/dev/pts/1'/>
<target type='isa-serial' port='0'>
<model name='isa-serial'/>
</target>
<alias name='serial0'/>
</serial>
<serial type='tcp'>
<source mode='bind' host='0.0.0.0' service='4445' tls='no'/>
<protocol type='raw'/>
<target type='isa-serial' port='1'>
<model name='isa-serial'/>
</target>
<alias name='serial1'/>
</serial>
<console type='pty' tty='/dev/pts/1'>
<source path='/dev/pts/1'/>
<target type='serial' port='0'/>
<alias name='serial0'/>
</console>
<input type='evdev'>
<source dev='/dev/input/vmpointer'/>
<alias name='input0'/>
</input>
<input type='evdev'>
<source dev='/dev/input/vmkeys'/>
<alias name='input1'/>
</input>
<input type='evdev'>
<source dev='/dev/input/by-path/platform-i8042-serio-0-event-kbd' grab='all' grabToggle='ctrl-ctrl' repeat='on'/>
<alias name='input2'/>
</input>
<input type='evdev'>
<source dev='/dev/input/by-path/platform-i8042-serio-1-event-mouse'/>
<alias name='input3'/>
</input>
<input type='mouse' bus='ps2'>
<alias name='input4'/>
</input>
<input type='keyboard' bus='ps2'>
<alias name='input5'/>
</input>
<audio id='1' type='none'/>
<video>
<model type='none'/>
<alias name='video0'/>
</video>
<hostdev mode='subsystem' type='pci' managed='yes'>
<driver name='vfio'/>
<source>
<address domain='0x0000' bus='0x00' slot='0x02' function='0x0'/>
</source>
<alias name='ua-igd'/>
<rom bar='on' file='/igd2.rom'/>
<address type='pci' domain='0x0000' bus='0x00' slot='0x02' function='0x0'/>
</hostdev>
<hostdev mode='subsystem' type='pci' managed='yes'>
<driver name='vfio'/>
<source>
<address domain='0x0000' bus='0x04' slot='0x00' function='0x0'/>
</source>
<alias name='hostdev0'/>
<address type='pci' domain='0x0000' bus='0x03' slot='0x00' function='0x0'/>
</hostdev>
<hostdev mode='subsystem' type='pci' managed='yes'>
<driver name='vfio'/>
<source>
<address domain='0x0000' bus='0x00' slot='0x14' function='0x3'/>
</source>
<alias name='hostdev1'/>
<address type='pci' domain='0x0000' bus='0x07' slot='0x00' function='0x0'/>
</hostdev>
<watchdog model='itco' action='reset'>
<alias name='watchdog0'/>
</watchdog>
<memballoon model='virtio'>
<alias name='balloon0'/>
<address type='pci' domain='0x0000' bus='0x05' slot='0x00' function='0x0'/>
</memballoon>
</devices>
<seclabel type='dynamic' model='dac' relabel='yes'>
<label>+0:+0</label>
<imagelabel>+0:+0</imagelabel>
</seclabel>
<qemu:commandline>
<qemu:arg value='-cpu'/>
<qemu:arg value='+vmx,+kvm_pv_eoi,+kvm_pv_unhalt,hv-relaxed,hv-vapic,hv-time,hv-synic,hv-stimer,hv-vpindex,hv-ipi,hv-runtime,hv-reset,hv-crash,hv-spinlocks=0xfff,hv-tlbflush,hv-tlbflush-ext,hv-tlbflush-direct,hv-stimer-direct,hv-apicv,hv-avic,hv-evmcs,hv-xmm-input,hv-emsr-bitmap,host-cache-info=on,l3-cache=on,hv-frequencies,hv-reenlightenment'/>
<qemu:arg value='-device'/>
<qemu:arg value='{'driver':'acpi-cppc','processors':['0:0:85:35:29:1','1:1:85:35:29:1','2:2:85:35:29:1','3:3:85:35:29:1','4:4:85:35:29:1','5:5:85:35:29:1','6:6:63:23:19:1','7:7:63:23:19:1','8:8:63:23:19:1','9:9:63:23:19:1','10:10:63:23:19:1','11:11:63:23:19:1','12:12:63:23:19:1','13:13:63:23:19:1','14:14:25:7:700:1','15:15:25:7:700:1']}'/>
<qemu:arg value='-overcommit'/>
<qemu:arg value='x-cpu-perf=on'/>
<qemu:arg value='-cpu'/>
<qemu:arg value='hv-no-nonarch-coresharing=on'/>
<qemu:arg value='-device'/>
<qemu:arg value='battery'/>
<qemu:arg value='-qmp'/>
<qemu:arg value='unix:/tmp/qmp.sock,server=on,wait=off'/>
<qemu:arg value='-device'/>
<qemu:arg value='acad'/>
<qemu:arg value='-qmp'/>
<qemu:arg value='unix:/tmp/qmp.sock,server=on,wait=off'/>
<qemu:arg value='-device'/>
<qemu:arg value='button'/>
<qemu:arg value='-qmp'/>
<qemu:arg value='unix:/tmp/qmp.sock,server=on,wait=off'/>
</qemu:commandline>
<qemu:override>
<qemu:device alias='ua-igd'>
<qemu:frontend>
<qemu:property name='x-igd-opregion' type='bool' value='true'/>
<qemu:property name='x-igd-lpc' type='bool' value='true'/>
</qemu:frontend>
</qemu:device>
</qemu:override>
</domain>From d4e88b70f045cc26d7698c200c238839e355cba0 Mon Sep 17 00:00:00 2001
From: Valentin Radu <valentin.radu@valinet.ro>
Date: Sun, 23 Aug 2026 09:41:40 +0300
Subject: [PATCH] igd-lpc support for q35
---
hw/vfio/igd.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/hw/vfio/igd.c b/hw/vfio/igd.c
index 6aacf27..d92fc24 100644
--- a/hw/vfio/igd.c
+++ b/hw/vfio/igd.c
@@ -371,7 +371,7 @@ static bool vfio_pci_igd_setup_lpc_bridge(VFIOPCIDevice *vdev, Error **errp)
*/
lpc_bridge = pci_find_device(pci_device_root_bus(pdev),
0, PCI_DEVFN(0x1f, 0));
- if (lpc_bridge && !object_dynamic_cast(OBJECT(lpc_bridge),
+ if (lpc_bridge && object_dynamic_cast(OBJECT(lpc_bridge),
"vfio-pci-igd-lpc-bridge")) {
error_setg(errp,
"Cannot create LPC bridge due to existing device at 1f.0");
--
2.47.3Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\kernel]
"EnablePerCpuClockTickScheduling"=dword:00000002Pkg%pc2 Pkg%pc3 Pkg%pc6 Pk%pc10 PkgWatt
3.44 0.00 80.54 0.00 2.53
3.44 0.00 80.54 0.00 2.53
Pkg%pc2 Pkg%pc3 Pkg%pc6 Pk%pc10 PkgWatt
4.77 0.00 71.89 0.00 2.63
4.77 0.00 71.89 0.00 2.63upower -i /org/freedesktop/UPower/devices/battery_BAT0updated: Tue Aug 25 20:34:30 2026
energy: 84.04 Wh
energy-rate: 3.055 W
percentage: 94%updated: Tue Aug 25 22:38:35 2026
energy: 78.5 Wh
energy-rate: 2.854 W
percentage: 87%