diff --git a/global/baremetal/bootactions/nested-virt.yaml b/global/baremetal/bootactions/nested-virt.yaml
new file mode 100644
index 000000000..fb6193410
--- /dev/null
+++ b/global/baremetal/bootactions/nested-virt.yaml
@@ -0,0 +1,23 @@
+---
+schema: 'drydock/BootAction/v1'
+metadata:
+  schema: 'metadata/Document/v1'
+  name: nested-virt
+  labels:
+    name: nested-virt-global
+    application: 'drydock'
+  layeringDefinition:
+    abstract: false
+    layer: global
+  storagePolicy: 'cleartext'
+data:
+  signaling: false
+  assets:
+    - path: /etc/modprobe.d/nested-virt.conf
+      type: file
+      permissions: '644'
+      data_pipeline:
+        - utf8_decode
+      data: |
+        options kvm-intel nested=y
+...
diff --git a/global/software/charts/osh/openstack-compute-kit/nova.yaml b/global/software/charts/osh/openstack-compute-kit/nova.yaml
index b50d1b4ae..ea27c55cb 100644
--- a/global/software/charts/osh/openstack-compute-kit/nova.yaml
+++ b/global/software/charts/osh/openstack-compute-kit/nova.yaml
@@ -337,6 +337,10 @@ data:
       configmap: tenant-ceph-etc
       user_secret_name: pvc-tceph-client-key
     conf:
+      nova:
+        libvirt:
+          cpu_mode: 'host-passthrough'
+          virt_type: kvm
       logging:
         loggers:
           keys: