[PATCH-SERIES qemu-server v2 0/3] cpu config: disable APICv for Windows 11/2022/2025 to mitigate issues with VBS

[Fiona Ebner <f.ebner@proxmox.com>]

Changes in v2:
* Disable MBEC by default for machine versions < 11.0 for backwards
  compat with older kernel and QEMU.

As reported in the community forum [0] and enterprise support, Windows
with MBEC and VBS can have issues on certain Intel CPUs, leading to
guest freezes and 100% CPU usage. The detection/enabling of APICv
support in Windows was determined to be related. Disabling
vmx-apicv-vid and/or vmx-apicv-register mitigates the issue. Disable
both flags starting with a bumped 11.0+pve2 machine version for
consistency.

[0]: https://forum.proxmox.com/threads/184178

qemu-server:

Fiona Ebner (3):
  cpu config: disable vmx-mbec flag for machine versions < 11.0
  cpu config: use $version_guard rather than passing $machine_version
  cpu config: disable APICv for Windows 11/2022/2025 to mitigate issues
    with VBS

 src/PVE/QemuServer.pm                         |  2 +-
 src/PVE/QemuServer/CPUConfig.pm               | 46 +++++++++++++++----
 src/PVE/QemuServer/Machine.pm                 |  3 +-
 src/test/cfg2cmd/cpu-level.conf.cmd           |  2 +-
 src/test/cfg2cmd/win11-host-11.0+pve2.conf    |  4 ++
 .../cfg2cmd/win11-host-11.0+pve2.conf.cmd     | 26 +++++++++++
 6 files changed, 70 insertions(+), 13 deletions(-)
 create mode 100644 src/test/cfg2cmd/win11-host-11.0+pve2.conf
 create mode 100644 src/test/cfg2cmd/win11-host-11.0+pve2.conf.cmd


Summary over all repositories:
  6 files changed, 70 insertions(+), 13 deletions(-)

-- 
Generated by git-murpp 0.5.0