Thanks. Some of my kvm nodes are using fairly old cpu’s, so it may still apply.

-jeremy

> On Wednesday, Jun 29, 2022 at 4:48 AM, Wei ZHOU <[email protected] 
> (mailto:[email protected])> wrote:
> Hi Jeremy,
>
> As far as I know, it means the meltdown and spectre which have already been
> solved. The issues do not exist with the recent cpu models.
>
> Anyway, you can specify the cpu model (xxxx-IBRS) and add cpu features
> (e.g. ibrs) in the agent.properties on kvm hosts.
> Please refer to
> http://docs.cloudstack.apache.org/en/latest/installguide/hypervisor/kvm.html#configure-cpu-model-for-kvm-guest-optional
>
> -Wei
>
>
> On Wed, 29 Jun 2022 at 11:27, Jeremy Hansen <[email protected]>
> wrote:
>
> > Enable available CPU security flaw mitigations.
> >
> > I noticed this while digging around in virt-manager. How would I enable
> > this as a default for all VMs in Cloudstack?
> >
> > Thanks
> > -jeremy
> >
> >
> >
> >
> >

Attachment: signature.asc
Description: PGP signature

Reply via email to