anchor.diff:  | Option | Details
   
   | allow_unsafe_interrupts=1
  -| Interrupt remapping is designed to provide device isolation. This workaround is for platforms without interrupt remapping support. It removes protection against link:http://invisiblethingslab.com/resources/2011/Software%20Attacks%20on%20Intel%20VT-d.pdf[MSI-based interrupt injection attacks^] by guests.  Only trusted guests and drivers should be run with this configuration.
  +| This workaround is for platforms without interrupt remapping support, which provides device isolation. It removes protection against link:http://invisiblethingslab.com/resources/2011/Software%20Attacks%20on%20Intel%20VT-d.pdf[MSI-based interrupt injection attacks^] by guests.  Only trusted guests and drivers should be run with this configuration.
   
  -| ids=*10de:1b80,10de:10f0*
  +| ids=*#10de:1b80,10de:10f0#*
   | Assign the specified GPU to the virtual pci for use in our VM.
   
   | disable_vga=1
  
positive.code: 
  = PVE: Virtualization for Work and Play (Part 3)
  :hp-alt-title: Server Virtualization Management Part3
  :hp-tags: Blog, Open_Source, Technology
  :icons: image
  :linkattrs:
  :published_at: 2017-05-03
  
negative.code: 
  |===
  
  == Update Boot Settings
  
  Configure IOMMU and VFIO to load first so that framebuffer drivers don’t grab the GPU while booting. After these changes, commit them to grub and generate a new boot image.
  
  Run `nano /etc/default/grub` and change `GRUB_CMDLINE_LINUX_DEFAULT="quiet"` as follows:
  
  `GRUB_CMDLINE_LINUX_DEFAULT="quiet amd_iommu=on kvm_amd.avic=1 rd.driver.pre=vfio-pci video=efifb:off"`
  
  