[PATCH-SERIES qemu-server 0/2] cpu config: disable APICv for Windows 11/2022/2025 to mitigate issues with VBS

[Fiona Ebner <f.ebner@proxmox.com>]

As reported in the community forum [0] and enterprise support, Windows
with MBEC and VBS can have issues on certain Intel CPUs, leading to
guest freezes and 100% CPU usage. The detection/enabling of APICv
support in Windows was determined to be related. Disabling
vmx-apicv-vid and/or vmx-apicv-register mitigates the issue. Disable
both flags starting with a bumped 11.0+pve2 machine version for
consistency.

[0]: https://forum.proxmox.com/threads/184178


What still would be nice to check is if the issue also happens with a
non-host model with nested-virt/vmx present. Otherwise we might want
to restrict removing the flags to the host model.

qemu-server:

Fiona Ebner (2):
  cpu config: use $version_guard rather than passing $machine_version
  cpu config: disable APICv for Windows 11/2022/2025 to mitigate issues
    with VBS

 src/PVE/QemuServer.pm                         |  2 +-
 src/PVE/QemuServer/CPUConfig.pm               | 33 +++++++++++++------
 src/PVE/QemuServer/Machine.pm                 |  3 +-
 src/test/cfg2cmd/win11-host-11.0+pve2.conf    |  4 +++
 .../cfg2cmd/win11-host-11.0+pve2.conf.cmd     | 26 +++++++++++++++
 5 files changed, 56 insertions(+), 12 deletions(-)
 create mode 100644 src/test/cfg2cmd/win11-host-11.0+pve2.conf
 create mode 100644 src/test/cfg2cmd/win11-host-11.0+pve2.conf.cmd


Summary over all repositories:
  5 files changed, 56 insertions(+), 12 deletions(-)

-- 
Generated by git-murpp 0.5.0