From 869eca9f54b72b04ac14f3d1d03db0283b304617 Mon Sep 17 00:00:00 2001
From: Astro <astro@spaceboyz.net>
Date: Sun, 19 Jun 2022 03:08:48 +0200
Subject: [PATCH] modules/microvm: take off the brakes

---
 modules/microvm.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/modules/microvm.nix b/modules/microvm.nix
index ea4ead12..3e5f1883 100644
--- a/modules/microvm.nix
+++ b/modules/microvm.nix
@@ -64,6 +64,11 @@ in
   };
 
   config = {
+    boot.kernelParams = [
+      "preempt=none"
+      # No server/router runs any untrusted user code
+      "mitigations=off"
+    ];
     microvm = {
       hypervisor = lib.mkDefault "cloud-hypervisor";
       mem = lib.mkDefault 512;