From 39861af1bbbb9938ddbd6fa6b8ac55d6183f933f Mon Sep 17 00:00:00 2001
From: Lars Wirzenius <liw@liw.fi>
Date: Sat, 22 Feb 2020 10:40:06 +0200
Subject: Change: enable nested KVM on vmhost

---
 ansible/roles/vmhost/files/kvm-nested.conf | 4 ++++
 ansible/roles/vmhost/tasks/main.yml        | 5 +++++
 2 files changed, 9 insertions(+)
 create mode 100644 ansible/roles/vmhost/files/kvm-nested.conf

(limited to 'ansible/roles/vmhost')

diff --git a/ansible/roles/vmhost/files/kvm-nested.conf b/ansible/roles/vmhost/files/kvm-nested.conf
new file mode 100644
index 0000000..42261eb
--- /dev/null
+++ b/ansible/roles/vmhost/files/kvm-nested.conf
@@ -0,0 +1,4 @@
+options kvm-intel nested=1
+options kvm-intel enable_shadow_vmcs=1
+options kvm-intel enable_apicv=1
+options kvm-intel ept=1
diff --git a/ansible/roles/vmhost/tasks/main.yml b/ansible/roles/vmhost/tasks/main.yml
index cb8e6d1..e3dc288 100644
--- a/ansible/roles/vmhost/tasks/main.yml
+++ b/ansible/roles/vmhost/tasks/main.yml
@@ -6,3 +6,8 @@
     - virt-manager
     - libvirt-daemon-system
     - libvirt-clients
+
+- name: "enable nested KVM if possible"
+  copy:
+    src: kvm-nested.conf
+    dest: /etc/modprobe.d/kvm-nested.conf
-- 
cgit v1.2.1