From c43d69c5d8a1be9c9e2069fd84a8c205b2eeb39a Mon Sep 17 00:00:00 2001
From: Bogdan Dobrelya <bdobreli@redhat.com>
Date: Thu, 28 Jul 2022 15:03:17 +0200
Subject: [PATCH] Enable post-copy by setting unprivileged_userfaultfd

The setting vm.unprivileged_userfaultfd = 1 is required to
make post-copy working for containerised libvirt.

Related: rhbz#2110556
Signed-off-by: Bogdan Dobrelya <bdobreli@redhat.com>
Change-Id: I40cf17a971e5c52e145fc7b760fd64c086284a03
---
 deployment/kernel/kernel-baremetal-ansible.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/deployment/kernel/kernel-baremetal-ansible.yaml b/deployment/kernel/kernel-baremetal-ansible.yaml
index 2725d50e2c..4011a3a8f4 100644
--- a/deployment/kernel/kernel-baremetal-ansible.yaml
+++ b/deployment/kernel/kernel-baremetal-ansible.yaml
@@ -199,6 +199,8 @@ outputs:
                 value: {get_param: BridgeNfCallIp6Tables}
               fs.inotify.max_user_instances:
                 value: {get_param: InotifyInstancesMax}
+              vm.unprivileged_userfaultfd:
+                value: 1
             - if:
                 - fs_aio_max_number_set
                 - fs.aio-max-nr: