From bc8defc9d1f4e07685d4535ae47659aae8f29aed Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Marek=20Marczykowski-G=C3=B3recki?= Date: Fri, 19 Oct 2018 08:02:12 +0200 Subject: [PATCH] anaconda: disable iommu for IGFX MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Many Intel processors (and BIOSes) have invalid IOMMU configuration for IGFX, which cause multiple problems - from screen glitches, to system hang. Since IGFX currently is still in dom0 (isn't isolated from other system components), disabling IOMMU for it doesn't lower overall security. When GUI domain will be implemented, we need to re-enable IOMMU here and hope hardware manufacturers will fix it in the meantime. Fixes QubesOS/qubes-issues#2836 Signed-off-by: Frédéric Pierret --- pyanaconda/bootloader.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pyanaconda/bootloader.py b/pyanaconda/bootloader.py index 26a48fc7a..b0db4a087 100644 --- a/pyanaconda/bootloader.py +++ b/pyanaconda/bootloader.py @@ -1504,7 +1504,7 @@ class GRUB2(GRUB): # boot arguments log.info("bootloader.py: used boot args: %s ", self.boot_args) defaults.write("GRUB_CMDLINE_LINUX=\"%s\"\n" % self.boot_args) - defaults.write("GRUB_CMDLINE_XEN_DEFAULT=\"console=none dom0_mem=min:1024M dom0_mem=max:4096M\"\n") + defaults.write("GRUB_CMDLINE_XEN_DEFAULT=\"console=none dom0_mem=min:1024M dom0_mem=max:4096M iommu=no-igfx\"\n") defaults.write("GRUB_DISABLE_RECOVERY=\"true\"\n") defaults.write("GRUB_THEME=\"/boot/grub2/themes/system/theme.txt\"\n") defaults.close() @@ -1885,7 +1885,7 @@ class XenEFI(EFIGRUB): for image in self.images: config.write("\n") config.write("[{}]\n".format(image.version)) - config.write("options=loglvl=all dom0_mem=min:1024M dom0_mem=max:4096M\n") + config.write("options=loglvl=all dom0_mem=min:1024M dom0_mem=max:4096M iommu=no-igfx\n") config.write("kernel={} root={} {}\n".format( image.kernel, image.device.fstab_spec, -- 2.14.4