Hi Jeremy, As far as I know, it means the meltdown and spectre which have already been solved. The issues do not exist with the recent cpu models.
Anyway, you can specify the cpu model (xxxx-IBRS) and add cpu features (e.g. ibrs) in the agent.properties on kvm hosts. Please refer to http://docs.cloudstack.apache.org/en/latest/installguide/hypervisor/kvm.html#configure-cpu-model-for-kvm-guest-optional -Wei On Wed, 29 Jun 2022 at 11:27, Jeremy Hansen <jer...@skidrow.la.invalid> wrote: > Enable available CPU security flaw mitigations. > > I noticed this while digging around in virt-manager. How would I enable > this as a default for all VMs in Cloudstack? > > Thanks > -jeremy > > > > >