Machine type for pfsense pass through?

[blueduckdock]

Read the docs and a couple guides but no joy yet. Just looking to pass through my dual port Intel NIC to my proxmox. I have iommu working and all that but the only hangup is that the machine type (q35) done in accordance with the proxmox docs is not passing through to my 2.3.2 pfsense VM.

http://hwarf.com/blog/pfsense-pci-passthrough-proxmox

Checked that too but it's an unrecognized machine type. Not sure what command I'm supposed to run with man to get the -machine type parameter so I can see what works. Just looking to set that right so both can be seen and configured properly.

 

[wolfgang]

Hi,

can you send your vm.conf
it is located in /etc/pve/qemu-server/<vmid>.conf

 

[blueduckdock]

bootdisk: ide0
cores: 2
ide0: local:115/vm-115-disk-1.qcow2,size=34G
ide2: none,media=cdrom
machine: q35
memory: 2048
name: pfsense
numa: 0
onboot: 1
ostype: other
smbios1: uuid=416b260d-f5ab-47b7-baf7-75ff6d3cac84
sockets: 1
startup: order=1

Edit- well that's odd. Not sure where my hostpci passthrough went. Gonna add that back and check it.

 

[blueduckdock]

Now I'm getting "iommu group can not be found- the file or folder doesn't exist"

Now if I do the

# find /sys/kernel/iommu_groups/ -type l

I do not have anything there. Been through a couple reboots but no joy. Do I need to modify the kernel in any way? I thought I remember reading that the changes went upstream and were in kernel 4.4 and beyond.

 

[mir]

What does the following produce?
dmesg |grep -i iommu

You need either intel_iommu=on or amd_iommu=on as boot parameter to the kernel.
/etc/default/grub in the line: GRUB_CMDLINE_LINUX_DEFAULT

 

[blueduckdock]

What does the following produce?
dmesg |grep -i iommu

You need either intel_iommu=on or amd_iommu=on as boot parameter to the kernel.
/etc/default/grub in the line: GRUB_CMDLINE_LINUX_DEFAULT

Much appreciated. Pro tip people- don't forget the underscore between intel and iommu (literally the only mistake.)

But now I'm getting

()
kvm: -device vfio-pci,host=03:00.0,id=hostpci0.0,bus=pci.0,addr=0x10.0,multifunction=on: vfio: failed to set iommu for container: Operation not permitted
kvm: -device vfio-pci,host=03:00.0,id=hostpci0.0,bus=pci.0,addr=0x10.0,multifunction=on: vfio: failed to setup container for group 12
kvm: -device vfio-pci,host=03:00.0,id=hostpci0.0,bus=pci.0,addr=0x10.0,multifunction=on: vfio: failed to get group 12
kvm: -device vfio-pci,host=03:00.0,id=hostpci0.0,bus=pci.0,addr=0x10.0,multifunction=on: Device initialization failed

Looking into it but open to ideas if anyone has experienced this before.

Also- for anyone who finds this...you can use

kvm -machine help

to get supported machine types.

 

[blueduckdock]

Making progress-
Add this little magic to your conf (changing for your case)

hostpci0: 03:00.0,pcie=1,driver=vfio
hostpci1: 03:00.1,pcie=1,driver=vfio

Thanks to all for the help. Just not seeing the interfaces in pfsense now. Not sure why.