virgil/vfio

hosts/virgil/configuration.nix

@@ -29,12 +29,7 @@
       listen_addresses = ["127.0.0.1:53" "[::1]:53"];
     };
   };
-  virtualisation = {
-    libvirtd = {
-      enable = true;
-      qemuOvmf = true;
-    };
-  };
+
   services.zapret = {
     enable = true;
     params = [
@@ -65,9 +60,16 @@
   users.users.tulg = {
     isNormalUser = true;
     description = "Tulga";
-    extraGroups = ["networkmanager" "wheel"];
+    extraGroups = ["networkmanager" "wheel" "libvirtd"];
     packages = with pkgs; [];
   };
+  programs.virt-manager.enable = true;
+  virtualisation.libvirtd = {
+    enable = true;
+    qemuRunAsRoot = false;
+    onBoot = "ignore";
+    onShutdown = "shutdown";
+  };
 
   # Allow unfree packages
   nixpkgs.config.allowUnfree = true;

hosts/virgil/vfio.nix

@@ -3,7 +3,7 @@
   pkgs,
   ...
 }: {
-  boot.kernelparams = ["amd_iommu=on"];
+  boot.kernelParams = ["amd_iommu=on"];
   boot.blacklistedKernelModules = ["nvidia" "nouveau"];
   boot.kernelModules = ["vfio_virqfd" "vfio_pci" "vfio_iommu_type1" "vfio"];
   boot.extraModprobeConfig = "options vfio-pci ids=10de:2705,10de:22bb";