[PATCH] docs: kbase/launch_security_sev: QEMU 6.0+ sets iommu=on for us

Cole Robinson crobinso at redhat.com
Sat Jun 11 16:44:54 UTC 2022


Signed-off-by: Cole Robinson <crobinso at redhat.com>
---
 docs/kbase/launch_security_sev.rst | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/docs/kbase/launch_security_sev.rst b/docs/kbase/launch_security_sev.rst
index 3ebb01ad80..9f6330a1ca 100644
--- a/docs/kbase/launch_security_sev.rst
+++ b/docs/kbase/launch_security_sev.rst
@@ -295,6 +295,8 @@ In order to make virtio devices work, we need to use
 ``<driver iommu='on'/>`` inside the given device XML element in order
 to enable DMA API in the virtio driver.
 
+QEMU 6.0 and later will `set this by default <https://gitlab.com/qemu-project/qemu/-/commit/9f88a7a3df>`__. For earlier QEMU versions, you will need to explicitly enable this in the device XML:
+
 ::
 
    # virsh edit <domain>
-- 
2.36.1



More information about the libvir-list mailing list