Input–output memory management unit
40
MENTIONS
17
EPISODES
11
PODCASTS
Search complete. 40 mentions across 17 episodes found for "Input–output memory management unit".
Oct 24, 2026
Chris TitusHOST
Number one, just installing the machine straight out, you need to make sure your BIOS settings are set properly.
Chris TitusHOST
If you're using an Intel processor, make sure that you have a virtual machine dash D or a VT dash D enabled in your BIOS or IOMMU.
Chris TitusHOST
Make sure that is set to enabled, not auto, but enabled.
Chris TitusHOST
And there's also a hidden setting.
Chris TitusHOST
So there's our groups.
Chris TitusHOST
Now there's a lot of IOMMU groups in my system.
Chris TitusHOST
Yours is probably gonna have quite a bit less.
Chris TitusHOST
I have over 140 IOMMU groups.
Chris TitusHOST
So a lot to sift through.
Chris TitusHOST
But the big thing I want to look at is USB.
15 MINS LATER
Chris TitusHOST
So it's going to be 32 visual CPUs on this Xeon.
Chris TitusHOST
We're going to actually pass through some of our PCI hosts now.
speaker_2GUEST
Exactly.
speaker_2GUEST
And hardware isolation mechanisms like IOMMU can be bypassed in certain configurations, making GPU memory easier to tamper with.
speaker_1HOST
Which industries are most at risk?
speaker_2GUEST
Regulated ones: defense, healthcare, legal, financial services.
Mathieu ComandonGUEST
So that means that not every distribution will be supported out of the box, even though you can use a signed kernel if you want.
Mathieu ComandonGUEST
The one that surprised me was that they require also IOMMU, which is often used for virtualization and pass-through.
Mathieu ComandonGUEST
And what they say is you must have IOMMU enabled, but pass-through disabled.
Mathieu ComandonGUEST
So I'm guessing this has to do with VMs, maybe.
Mathieu ComandonGUEST
Or they say it's to prevent the access to the game from cheating hardware.
6 MINS LATER
JillHOST
Yeah.
Mathieu ComandonGUEST
So one thing to note that is pretty important is that they don't support the Steam Deck yet because the Steam Deck lacks some components that they need for EACv2.
Mathieu ComandonGUEST
So it might be like IOMMU or some kind of Secure Boot or something.
JohnHOST
So basically, Epic calls the rebuilt system EAC Linux version 2.
JohnHOST
Its published requirements include TPM 2.0, secure boot, signed kernel and modules using recognized keys, measured boot, IOMMU protections, and non on non-handheld devices kernel lockdown disabled k exec bpf security support epic says it will use this uh use a service and eppf programs rather than installing its own anti-cheat kernel module the service runs while a protected game is running so what that means is k exec is like how you can hot patch your kernel okay i don't know you don't know what that means So a kernel, so the OS boots.
JohnHOST
It boots to a bootloader, then it passes to the kernel.
JohnHOST
The kernel is the abstraction layer between the operating system and the hardware.
Rob CampbellHOST
It also calls for kernel lockdown integrity mode, disable KEXEC, and an active BPF security module.
Rob CampbellHOST
On non-handheld systems, IOMMU must be enabled with pass-through disabled.
Rob CampbellHOST
That may be a lot for some people, but for those who have said it can't be done, I always said it could be with the right restrictions in place.
Rob CampbellHOST
And yeah, I know it's a lot for some people.
Jonathan BennettHOST
Right, because you generally think of that as being like a enterprise feature where you need, well, I mean, like we talked about earlier, you got to meet some weird CMMC certification.
Jonathan BennettHOST
And so you got to turn on kernel lockdown mode to hit it or whatever.
Jonathan BennettHOST
And then the other thing that I don't fully understand is the IOMMU.
Jonathan BennettHOST
That's just, I thought, built into hardware.
Rob CampbellHOST
It also calls for kernel lockdown integrity mode, disabled KEXEC, and an active BPF security module.
Rob CampbellHOST
On non-handheld systems, IOMMU must be enabled with pass-through disabled.
Rob CampbellHOST
That may be a lot for some people, but for those who have said it can't be done, I always said it could be with the right restrictions in place.
Rob CampbellHOST
And yeah, I know it's a lot for some people.
Jonathan BennettHOST
Well, I mean, like we talked about earlier, you got to you got to meet some weird CMC certification.
Jonathan BennettHOST
And so you got to turn on kernel lockdown mode to hit it or whatever.
Jonathan BennettHOST
And then the other thing that I don't fully understand is the IOMMU.
Jonathan BennettHOST
That's just, I thought, built into hardware.
Rob CampbellHOST
It also calls for kernel lockdown integrity mode, disable KEXEC, and an active BPF security module.
Rob CampbellHOST
On non-handheld systems, IOMMU must be enabled with pass-through disabled.
Rob CampbellHOST
That may be a lot for some people, but for those who have said it can't be done, I always said it could be with the right restrictions in place.
Rob CampbellHOST
And yeah, I know it's a lot for some people.
Jonathan BennettHOST
Right, because you generally think of that as being like a enterprise feature where you need, well, I mean, like we talked about earlier, you got to meet some weird CMMC certification.
Jonathan BennettHOST
And so you got to turn on kernel lockdown mode to hit it or whatever.
Jonathan BennettHOST
And then the other thing that I don't fully understand is the IOMMU.
Jonathan BennettHOST
That's just, I thought, built into hardware.
Rob CampbellHOST
It also calls for kernel lockdown integrity mode, disabled KEXEC, and an active BPF security module.
Rob CampbellHOST
On non-handheld systems, IOMMU must be enabled with pass-through disabled.
Rob CampbellHOST
That may be a lot for some people, but for those who have said it can't be done, I always said it could be with the right restrictions in place.
Rob CampbellHOST
And yeah, I know it's a lot for some people.
Jonathan BennettHOST
Well, I mean, like we talked about earlier, you got to you got to meet some weird CMC certification.
Jonathan BennettHOST
And so you got to turn on kernel lockdown mode to hit it or whatever.
Jonathan BennettHOST
And then the other thing that I don't fully understand is the IOMMU.
Jonathan BennettHOST
That's just, I thought, built into hardware.
NickHOST
You will need to use Measured Boot, which is already done by default by systemd-boot or by Grub, so most computers shouldn't have too much trouble with that.
NickHOST
You need to use IOMMU as well.
NickHOST
Most current PCs support that and use it by default as well.
NickHOST
And you'll also need some kernel-related things.
7 more episodes mention Input–output memory management unit.
Create an account to see the whole feed, search across every transcript, and follow the entities you care about.