<html>
  <head>
    <meta content="text/html; charset=utf-8" http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <br>
    <br>
    <div class="moz-cite-prefix">On 2016-04-12 18:32, Alex Williamson
      wrote:<br>
    </div>
    <blockquote
cite="mid:CAEMbtcLOCwTNy1+v_QfwUuYkMetzpXp9Mjneg=wzu7TOF2gQ7w@mail.gmail.com"
      type="cite">
      <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
      <div dir="ltr">
        <div class="gmail_extra">
          <div class="gmail_quote">
            <blockquote class="gmail_quote" style="margin:0px 0px 0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
              <div bgcolor="#FFFFFF" text="#000000">
                <div><span class="">
                    <div>On 2016-04-12 17:24, Alex Williamson wrote:<br>
                    </div>
                  </span>
                  <blockquote type="cite">
                    <div dir="ltr">
                      <div class="gmail_extra">
                        <div class="gmail_quote"><span class="">On Tue,
                            Apr 12, 2016 at 2:30 PM, Bronek Kozicki <span
                              dir="ltr"><<a moz-do-not-send="true"
                                href="mailto:brok@spamcop.net"
                                target="_blank">brok@spamcop.net</a>></span>
                            wrote:<br>
                            <div> </div>
                          </span><span class="">
                            <blockquote class="gmail_quote"
                              style="margin:0px 0px 0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
                              2. does PCI bridge have to be in a
                              separate IOMMU group than passed-through
                              device?<br>
                            </blockquote>
                            <div><br>
                            </div>
                            <div>No.  Blank is mostly correct on this,
                              newer kernel remove the pcieport driver
                              test and presumes any driver attached to a
                              bridge device is ok.</div>
                          </span></div>
                      </div>
                    </div>
                  </blockquote>
                  Really? From what I understood reading your IOMMU
                  article, plus from the issues I had getting my own GPU
                  to work on the CPU-based PCIe slot on my E3-1200, I
                  thought having a PCIe root port grouped with a PCI
                  device made the GPU unsuited for passthrougs. What
                  reccomendations should I give <a
                    moz-do-not-send="true"
href="https://wiki.archlinux.org/index.php/PCI_passthrough_via_OVMF#Plugging_your_guest_GPU_in_an_unisolated_CPU-based_PCIe_slot"
                    target="_blank">here</a>, then?<br>
                </div>
              </div>
            </blockquote>
            <div><br>
            </div>
            <div>The statement "(there's generally only one)" is
              completely incorrect regarding processor based root port
              slots.  That $30k PC that LinuxTechTips did has 7
              processor based root ports between the 2 sockets.</div>
          </div>
        </div>
      </div>
    </blockquote>
    You're right, I shouldn't have extrapolated from the fact that most
    of the consumer hardware I have access to works that way, I'll
    remove that line on my next edit.<br>
    <blockquote
cite="mid:CAEMbtcLOCwTNy1+v_QfwUuYkMetzpXp9Mjneg=wzu7TOF2gQ7w@mail.gmail.com"
      type="cite">
      <div dir="ltr">
        <div class="gmail_extra">
          <div class="gmail_quote">
            <div>IOMMU group isolation requires that a group is never
              shared between host and guest or between different
              guests.  However we assume that bridge devices only do DMA
              on behalf of the devices downstream of them, so we allow
              the bridge to be managed by a host driver.  So in your
              example, it's possible that the bridge could do
              redirections, but the only affected party would be the VM
              itself.  The same is true for a multi-function device like
              the GPU itself, internal routing may allow the devices to
              perform peer-to-peer internally.  So it's not ideal when
              the bridge is part of the group, but it generally works
              and is allowed because it can't interfere with anyone
              else.  </div>
          </div>
        </div>
      </div>
    </blockquote>
    Ah, I see. I suppose the issues i was having with my 970 were due to
    something else, then. Now that I look back at it, it's probably
    because my CPU-based PCIe slot was <a
href="https://www.redhat.com/archives/vfio-users/2015-October/msg00005.html">the
      only one that could be set as a boot GPU</a>. I'll try to rework
    that part and mention that it adresses a much more specific case
    than what I iniaially thought, then.<br>
    <blockquote
cite="mid:CAEMbtcLOCwTNy1+v_QfwUuYkMetzpXp9Mjneg=wzu7TOF2gQ7w@mail.gmail.com"
      type="cite">
      <div dir="ltr">
        <div class="gmail_extra">
          <div class="gmail_quote">
            <div>I have the identical setup on my E3-1245v2 and haven't
              had any problems.</div>
          </div>
        </div>
      </div>
    </blockquote>
    The line is actually copy-pasted from your IOMMU blog-articles,
    since my own machine no longer follows that configuration and I
    needed a snippet for that specific exemple.<br>
    <br>
    <div class="moz-cite-prefix">On 2016-04-12 18:57, Alex Williamson
      wrote:<br>
    </div>
    <blockquote
cite="mid:CAEMbtcK4+tCGFd_qcFPkE3JijmkzPhTsuNEzTSoUwWm1bzjr6Q@mail.gmail.com"
      type="cite">
      <div dir="ltr">
        <div class="gmail_extra">Skimming...</div>
        <div class="gmail_extra"><br>
        </div>
        <div class="gmail_extra">Most of those AMD CPUs in the <a
            moz-do-not-send="true" href="http://amd.com">amd.com</a>
          link do not support AMD-Vi</div>
      </div>
    </blockquote>
    I should have double-checked, I was under the impression that RVI
    and AMD-Vi were the same thing. The fact that AMD doesn't really
    maintain any sort of public centralized database like Intel ARK
    makes it really complicated to give advices on this.<br>
    <blockquote
cite="mid:CAEMbtcK4+tCGFd_qcFPkE3JijmkzPhTsuNEzTSoUwWm1bzjr6Q@mail.gmail.com"
      type="cite">
      <div dir="ltr">
        <div class="gmail_extra">User-level access to devices... No,
          don't do this.  System mode libvirt manages device
          permissions.  If you want unprivileged, session mode libvirt
          you need a whole other wiki page.<br>
        </div>
        <div class="gmail_extra"><br>
        </div>
        <div class="gmail_extra">Binding to VFIO... Gosh I wish those
          vfio-bind scripts would die.  Just use libvirt, virsh
          nodedev-detach<br>
        </div>
        <div class="gmail_extra"><br>
        </div>
        <div class="gmail_extra">QEMU permissions... WRONG!  Don't touch
          any of this.<br>
        </div>
        <div class="gmail_extra"><br>
        </div>
        <div class="gmail_extra">Complete example for QEMU with
          libvirtd... No, qemu:args are the worst.  This hides the
          assigned device from libvirt and is what causes you to need to
          do the QEMU permissions hacks that are completely wrong.  Use
          a wrapper script!<br>
        </div>
        <div class="gmail_extra"><br>
        </div>
        <div class="gmail_extra">As others have said, ignore_msrs makes
          lots of things work, not just GeForce Experience</div>
      </div>
    </blockquote>
    Yeah, I think you're starting to see why a rewrite is in order here.
    ;)<br>
  </body>
</html>