From 0bd975216e55d0a7647ff48afc14b5b99e77f7e2 Mon Sep 17 00:00:00 2001
From: Ian Kelling <iank@fsf.org>
Date: Wed, 21 Jan 2026 01:35:41 -0500
Subject: [PATCH] remove useless security to speed up vms

---
 roles/kvmhost/files/simple/usr/local/bin/create-vm | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/roles/kvmhost/files/simple/usr/local/bin/create-vm b/roles/kvmhost/files/simple/usr/local/bin/create-vm
index d205353..c4b72e2 100755
--- a/roles/kvmhost/files/simple/usr/local/bin/create-vm
+++ b/roles/kvmhost/files/simple/usr/local/bin/create-vm
@@ -380,7 +380,7 @@ mk-decrypting-grub-image() {
 
   m tee /dev/shm/grub.cfg <<EOF
 cryptomount -k /keyfile hd0
-linux (crypto0)/vmlinuz root=/dev/mapper/$dname-crypt0 ro elevator=noop console=tty0 console=ttyS0,115200 biosdevname=0 net.ifnames=0
+linux (crypto0)/vmlinuz root=/dev/mapper/$dname-crypt0 ro elevator=noop console=tty0 console=ttyS0,115200 biosdevname=0 net.ifnames=0 mitigations=off
 initrd (crypto0)/initrd.img
 boot
 EOF
-- 
2.25.1