How to disable Spectre , Meltdown , ... kernel patches

[tincboy]

For better Ceph performance, I need to disable all kind of kernel protections for CPU vulnerabilities,
Is there any guide on how to ask kernel in Proxmox to do so?
Servers are being used only for Ceph so I have no security concerns regarding disabling CPU vulnerabilities.

 

[ramrot]

There are a lot of guides on internet to accomplish what you are asking, but most of times CPU is not the bottleneck. Would you like to elaborate more on what is the issue you encounter and maybe some metrics?

 

[tincboy]

In latest versions of kernel 5.2+ we can disable mitigations by "mitigation=off" kernel command, but as Proxmox 6 is using kernel 5.0 I've disabled them by using this grub config

GRUB_CMDLINE_LINUX="net.ifnames=0 biosdevname=0 pti=off spectre_v2=off nospec_store_bypass_disable  mds=off"