commit 4ecd7e0d4427ac86be2669fa2cd529e783e7accb
Author: Massaki Archambault <badjware@massaki.ca>
Date:   Sat Oct 12 18:55:19 2019 -0400

    initial commit

diff --git a/playbook.yml b/playbook.yml
new file mode 100644
index 0000000..6515a6f
--- /dev/null
+++ b/playbook.yml
@@ -0,0 +1,9 @@
+- hosts: all, localhost
+  become: yes
+  vars:
+    pcie_device_ids:
+      - '8086:15b8' # Intel Corporation Ethernet Connection (2) I219-V
+      - '1002:731f' # Advanced Micro Devices, Inc. [AMD/ATI] Navi 10 [Radeon RX 5700 / 5700 XT]
+      - '1002:ab38' # Advanced Micro Devices, Inc. [AMD/ATI] Navi 10 HDMI Audio
+  roles:
+    - win10
diff --git a/roles/win10/defaults/main.yml b/roles/win10/defaults/main.yml
new file mode 100644
index 0000000..01bf06e
--- /dev/null
+++ b/roles/win10/defaults/main.yml
@@ -0,0 +1 @@
+pcie_device_ids: []
diff --git a/roles/win10/files/archlinux_iommu.conf b/roles/win10/files/archlinux_iommu.conf
new file mode 100644
index 0000000..082e6fd
--- /dev/null
+++ b/roles/win10/files/archlinux_iommu.conf
@@ -0,0 +1,6 @@
+title    Archlinux w/ VFIO
+linux    /vmlinuz-linux
+initrd   /intel-ucode.img
+initrd   /initramfs-linux.img
+options  intel_iommu=on iommu=pt intel_iommu=igfx_off kvm.ignore_msrs=1 acpi_backlight=none root=LABEL=ARCHROOT rw
+
diff --git a/roles/win10/files/qemu_hook b/roles/win10/files/qemu_hook
new file mode 100755
index 0000000..f09350b
--- /dev/null
+++ b/roles/win10/files/qemu_hook
@@ -0,0 +1,18 @@
+#!/bin/bash
+if [ "$1" == "win10" ]; then
+    if [ "$2" == "prepare" ]; then
+        systemctl start vm-usb-helper
+        # defrag ram
+        echo 1 > /proc/sys/vm/compact_memory
+        for _ in $(seq 5); do
+            sleep 3
+            # assign hugepages
+            sysctl -w vm.nr_hugepages=8192 && break
+        done
+        sleep 10
+    fi
+    if [ "$2" == "release" ]; then
+        systemctl stop vm-usb-helper
+        sysctl -w vm.nr_hugepages=0
+    fi
+fi
diff --git a/roles/win10/files/win10.xml b/roles/win10/files/win10.xml
new file mode 100644
index 0000000..b5fca6e
--- /dev/null
+++ b/roles/win10/files/win10.xml
@@ -0,0 +1,226 @@
+<!--
+WARNING: THIS IS AN AUTO-GENERATED FILE. CHANGES TO IT ARE LIKELY TO BE
+OVERWRITTEN AND LOST. Changes to this xml configuration should be made using:
+  virsh edit win10
+or other application using the libvirt API.
+-->
+
+<domain type='kvm' xmlns:qemu='http://libvirt.org/schemas/domain/qemu/1.0'>
+  <name>win10</name>
+  <uuid>9d7df055-d6d1-4551-bb25-ef2ddb835c4d</uuid>
+  <metadata>
+    <libosinfo:libosinfo xmlns:libosinfo="http://libosinfo.org/xmlns/libvirt/domain/1.0">
+      <libosinfo:os id="http://microsoft.com/win/10"/>
+    </libosinfo:libosinfo>
+  </metadata>
+  <memory unit='KiB'>16777216</memory>
+  <currentMemory unit='KiB'>16777216</currentMemory>
+  <memoryBacking>
+    <hugepages/>
+  </memoryBacking>
+  <vcpu placement='static'>6</vcpu>
+  <iothreads>1</iothreads>
+  <cputune>
+    <vcpupin vcpu='0' cpuset='1'/>
+    <vcpupin vcpu='1' cpuset='5'/>
+    <vcpupin vcpu='2' cpuset='2'/>
+    <vcpupin vcpu='3' cpuset='6'/>
+    <vcpupin vcpu='4' cpuset='3'/>
+    <vcpupin vcpu='5' cpuset='7'/>
+    <emulatorpin cpuset='0,4'/>
+    <iothreadpin iothread='1' cpuset='0,4'/>
+  </cputune>
+  <os>
+    <type arch='x86_64' machine='pc-q35-4.0'>hvm</type>
+    <loader readonly='yes' type='pflash'>/usr/share/ovmf/x64/OVMF_CODE.fd</loader>
+    <nvram>/var/lib/libvirt/qemu/nvram/win10_VARS.fd</nvram>
+  </os>
+  <features>
+    <acpi/>
+    <apic/>
+    <hyperv>
+      <relaxed state='on'/>
+      <vapic state='on'/>
+      <spinlocks state='on' retries='8191'/>
+      <vpindex state='on'/>
+      <synic state='on'/>
+      <stimer state='on'/>
+      <reset state='on'/>
+      <vendor_id state='on' value='whatever'/>
+      <frequencies state='on'/>
+    </hyperv>
+    <kvm>
+      <hidden state='on'/>
+    </kvm>
+    <vmport state='off'/>
+    <ioapic driver='kvm'/>
+  </features>
+  <cpu mode='host-passthrough' check='none'>
+    <topology sockets='1' cores='3' threads='2'/>
+  </cpu>
+  <clock offset='localtime'>
+    <timer name='rtc' tickpolicy='catchup'/>
+    <timer name='pit' tickpolicy='delay'/>
+    <timer name='hpet' present='no'/>
+    <timer name='hypervclock' present='yes'/>
+  </clock>
+  <on_poweroff>destroy</on_poweroff>
+  <on_reboot>restart</on_reboot>
+  <on_crash>destroy</on_crash>
+  <pm>
+    <suspend-to-mem enabled='yes'/>
+    <suspend-to-disk enabled='yes'/>
+  </pm>
+  <devices>
+    <emulator>/usr/bin/qemu-system-x86_64</emulator>
+    <disk type='file' device='disk'>
+      <driver name='qemu' type='raw' io='threads'/>
+      <source file='/home/marchambault/Documents/virtualmachines/img/win10.img'/>
+      <target dev='sda' bus='scsi'/>
+      <boot order='1'/>
+      <address type='drive' controller='0' bus='0' target='0' unit='0'/>
+    </disk>
+    <disk type='block' device='disk'>
+      <driver name='qemu' type='raw' cache='none' io='native'/>
+      <source dev='/dev/disk/by-id/nvme-CT1000P1SSD8_1910E1F03D8E'/>
+      <target dev='sdc' bus='scsi'/>
+      <address type='drive' controller='0' bus='0' target='0' unit='2'/>
+    </disk>
+    <disk type='file' device='cdrom'>
+      <driver name='qemu' type='raw'/>
+      <source file='/home/marchambault/Documents/virtualmachines/iso/virtio-win-0.1.171.iso'/>
+      <target dev='sdb' bus='sata'/>
+      <readonly/>
+      <address type='drive' controller='0' bus='0' target='0' unit='1'/>
+    </disk>
+    <controller type='scsi' index='0' model='virtio-scsi'>
+      <driver queues='6' iothread='1'/>
+      <address type='pci' domain='0x0000' bus='0x05' slot='0x00' function='0x0'/>
+    </controller>
+    <controller type='sata' index='0'>
+      <address type='pci' domain='0x0000' bus='0x00' slot='0x1f' function='0x2'/>
+    </controller>
+    <controller type='pci' index='0' model='pcie-root'/>
+    <controller type='pci' index='1' model='dmi-to-pci-bridge'>
+      <model name='i82801b11-bridge'/>
+      <address type='pci' domain='0x0000' bus='0x00' slot='0x1e' function='0x0'/>
+    </controller>
+    <controller type='pci' index='2' model='pci-bridge'>
+      <model name='pci-bridge'/>
+      <target chassisNr='2'/>
+      <address type='pci' domain='0x0000' bus='0x01' slot='0x00' function='0x0'/>
+    </controller>
+    <controller type='pci' index='3' model='pcie-root-port'>
+      <model name='pcie-root-port'/>
+      <target chassis='3' port='0x10'/>
+      <address type='pci' domain='0x0000' bus='0x00' slot='0x02' function='0x0' multifunction='on'/>
+    </controller>
+    <controller type='pci' index='4' model='pcie-root-port'>
+      <model name='pcie-root-port'/>
+      <target chassis='4' port='0x11'/>
+      <address type='pci' domain='0x0000' bus='0x00' slot='0x02' function='0x1'/>
+    </controller>
+    <controller type='pci' index='5' model='pcie-root-port'>
+      <model name='pcie-root-port'/>
+      <target chassis='5' port='0x12'/>
+      <address type='pci' domain='0x0000' bus='0x00' slot='0x02' function='0x2'/>
+    </controller>
+    <controller type='pci' index='6' model='pcie-root-port'>
+      <model name='pcie-root-port'/>
+      <target chassis='6' port='0x13'/>
+      <alias name='ua-gfx0'/>
+      <address type='pci' domain='0x0000' bus='0x00' slot='0x02' function='0x3'/>
+    </controller>
+    <controller type='pci' index='7' model='pcie-root-port'>
+      <model name='pcie-root-port'/>
+      <target chassis='7' port='0x14'/>
+      <address type='pci' domain='0x0000' bus='0x00' slot='0x02' function='0x4'/>
+    </controller>
+    <controller type='pci' index='8' model='pcie-root-port'>
+      <model name='pcie-root-port'/>
+      <target chassis='8' port='0x15'/>
+      <address type='pci' domain='0x0000' bus='0x00' slot='0x02' function='0x5'/>
+    </controller>
+    <controller type='pci' index='9' model='pcie-root-port'>
+      <model name='pcie-root-port'/>
+      <target chassis='9' port='0x16'/>
+      <address type='pci' domain='0x0000' bus='0x00' slot='0x02' function='0x6'/>
+    </controller>
+    <controller type='pci' index='10' model='pcie-root-port'>
+      <model name='pcie-root-port'/>
+      <target chassis='10' port='0x17'/>
+      <address type='pci' domain='0x0000' bus='0x00' slot='0x02' function='0x7'/>
+    </controller>
+    <controller type='virtio-serial' index='0'>
+      <address type='pci' domain='0x0000' bus='0x03' slot='0x00' function='0x0'/>
+    </controller>
+    <controller type='usb' index='0' model='qemu-xhci' ports='15'>
+      <address type='pci' domain='0x0000' bus='0x04' slot='0x00' function='0x0'/>
+    </controller>
+    <interface type='network'>
+      <mac address='52:54:00:f5:2c:df'/>
+      <source network='default'/>
+      <model type='e1000e'/>
+      <link state='up'/>
+      <address type='pci' domain='0x0000' bus='0x08' slot='0x00' function='0x0'/>
+    </interface>
+    <channel type='spicevmc'>
+      <target type='virtio' name='com.redhat.spice.0'/>
+      <address type='virtio-serial' controller='0' bus='0' port='1'/>
+    </channel>
+    <input type='keyboard' bus='virtio'>
+      <address type='pci' domain='0x0000' bus='0x00' slot='0x0f' function='0x0'/>
+    </input>
+    <input type='mouse' bus='ps2'/>
+    <input type='keyboard' bus='ps2'/>
+    <graphics type='spice' keymap='en-us'>
+      <listen type='socket' socket='/tmp/win10.sock'/>
+      <image compression='off'/>
+    </graphics>
+    <sound model='ich6'>
+      <address type='pci' domain='0x0000' bus='0x02' slot='0x02' function='0x0'/>
+    </sound>
+    <video>
+      <model type='qxl' ram='65536' vram='65536' vgamem='16384' heads='1' primary='yes'/>
+      <address type='pci' domain='0x0000' bus='0x00' slot='0x01' function='0x0'/>
+    </video>
+    <hostdev mode='subsystem' type='pci' managed='yes'>
+      <source>
+        <address domain='0x0000' bus='0x00' slot='0x1f' function='0x6'/>
+      </source>
+      <address type='pci' domain='0x0000' bus='0x02' slot='0x03' function='0x0'/>
+    </hostdev>
+    <hostdev mode='subsystem' type='pci' managed='yes'>
+      <source>
+        <address domain='0x0000' bus='0x03' slot='0x00' function='0x0'/>
+      </source>
+      <address type='pci' domain='0x0000' bus='0x09' slot='0x00' function='0x0'/>
+    </hostdev>
+    <hostdev mode='subsystem' type='pci' managed='yes'>
+      <source>
+        <address domain='0x0000' bus='0x03' slot='0x00' function='0x1'/>
+      </source>
+      <address type='pci' domain='0x0000' bus='0x0a' slot='0x00' function='0x0'/>
+    </hostdev>
+    <redirdev bus='usb' type='spicevmc'>
+      <address type='usb' bus='0' port='2'/>
+    </redirdev>
+    <redirdev bus='usb' type='spicevmc'>
+      <address type='usb' bus='0' port='3'/>
+    </redirdev>
+    <memballoon model='virtio'>
+      <address type='pci' domain='0x0000' bus='0x07' slot='0x00' function='0x0'/>
+    </memballoon>
+    <shmem name='looking-glass'>
+      <model type='ivshmem-plain'/>
+      <size unit='M'>32</size>
+      <address type='pci' domain='0x0000' bus='0x02' slot='0x04' function='0x0'/>
+    </shmem>
+  </devices>
+  <qemu:commandline>
+    <qemu:arg value='-object'/>
+    <qemu:arg value='input-linux,id=kbd1,evdev=/dev/input/by-path/platform-i8042-serio-0-event-kbd,grab_all=off,repeat=on'/>
+    <qemu:arg value='-audiodev'/>
+    <qemu:arg value='pa,id=pa1,server=/run/user/1000/pulse/native'/>
+  </qemu:commandline>
+</domain>
diff --git a/roles/win10/handlers/main.yml b/roles/win10/handlers/main.yml
new file mode 100644
index 0000000..66268fb
--- /dev/null
+++ b/roles/win10/handlers/main.yml
@@ -0,0 +1,14 @@
+- name: regenerate linux initramfs
+  command: /usr/bin/mkinitcpio -p linux
+
+- name: restart libvirtd.socket
+  systemd:
+    name: libvirtd.socket
+    enabled: yes
+    state: restarted
+
+- name: restart virtlogd.socket
+  service:
+    name: virtlogd.socket
+    enabled: yes
+    state: restarted
diff --git a/roles/win10/tasks/main.yml b/roles/win10/tasks/main.yml
new file mode 100644
index 0000000..b813ab6
--- /dev/null
+++ b/roles/win10/tasks/main.yml
@@ -0,0 +1,81 @@
+- name: install required packages
+  pacman:
+    name:
+      - qemu
+      - libvirt
+      - ovmf
+      - virt-manager
+  notify:
+    - restart libvirtd.socket
+    - restart virtlogd.socket
+
+- name: create hooks directory
+  file:
+    path: /etc/libvirt/hooks
+    state: directory
+
+- name: configure kernel modules
+  lineinfile:
+    path: /etc/mkinitcpio.conf
+    regexp: '^MODULE='
+    line: 'MODULES=(vfio_pci vfio vfio_iommu_type1 vfio_virqfd i915)'
+  notify: regenerate linux initramfs
+
+- name: configure vfio-pci device ids
+  template:
+    src: vfio.conf.j2
+    dest: /etc/modprobe.d/vfio.conf
+  notify: regenerate linux initramfs
+
+- name: install boot entry
+  copy:
+    src: archlinux_iommu.conf
+    dest: /boot/loader/entries/archlinux_iommu.conf
+
+- name: configure qemu group
+  lineinfile:
+    path: /etc/libvirt/qemu.conf
+    regexp: '^#?group ='
+    line: 'group = "kvm"'
+
+- name: setup headless audio
+  lineinfile:
+    path: /etc/libvirt/qemu.conf
+    regexp: '^#?nographics_allow_host_audio ='
+    line: 'nographics_allow_host_audio = 1'
+
+- name: setup ovmf firmware image
+  blockinfile:
+    path: /etc/libvirt/qemu.conf
+    insertbefore: '^#nvram = \['
+    block: |
+      nvram = [
+          "/usr/share/ovmf/x64/OVMF_CODE.fd:/usr/share/ovmf/x64/OVMF_VARS.fd"
+      ]
+  notify: restart libvirtd.socket
+
+- name: setup cgroup device acl
+  blockinfile:
+    path: /etc/libvirt/qemu.conf
+    insertbefore: '^#cgroup_device_acl = \['
+    block: |
+      cgroup_device_acl = [
+          "/dev/kvm",
+          "/dev/input/by-id/KEYBOARD_NAME",
+          "/dev/input/by-id/MOUSE_NAME",
+          "/dev/null", "/dev/full", "/dev/zero",
+          "/dev/random", "/dev/urandom",
+          "/dev/ptmx", "/dev/kvm", "/dev/kqemu",
+          "/dev/rtc","/dev/hpet", "/dev/sev"
+      ]
+
+- name: install domain configuration
+  copy:
+    src: win10.xml
+    dest: /etc/libvirt/qemu/win10.xml
+
+- name: install qemu hook
+  copy:
+    src: qemu_hook
+    dest: /etc/libvirt/hooks/qemu
+    mode: '755'
diff --git a/roles/win10/templates/vfio.conf.j2 b/roles/win10/templates/vfio.conf.j2
new file mode 100644
index 0000000..3f20484
--- /dev/null
+++ b/roles/win10/templates/vfio.conf.j2
@@ -0,0 +1 @@
+options vfio-pci ids={{ ','.join(pcie_device_ids) }}