trying to passthrough 2nd NIC to pfSense VM. FAILED TO SET IOMMU FOR CONTAINER error

[TheScrantonStrangler]

Hi all,

 

I am attempting to passthrough a 2nd 2 port BCM5709 Gigabit Ethernet NIC to a pfSense VM (wanting to try pfSense on a VM before building a dedicated box for it) and I keep getting this error.

Google suggests that I add 

append vfio_iommu_type1.allow_unsafe_interrupts=1 vfio-pci.ids=14e4:1639 initrd=/bzroot

 to my syslinux.cfg file, but I continue to get errors when attempting to boot the VM.

 

I have also confirmed that my new nic shows up as only one IOMMU group.

 

Any thoughts on what else I can do to get this NIC to passthrough correctly? I have also attached a diagnostics.zip file. 

 

Thanks for any ideas.

tower-diagnostics-20221119-1215.zip

[TheScrantonStrangler]

Amazing what hitting the 'apply' button will do.

 

To anybody else running into this issue, after doing the above, also set PCIe ACS override to downstream. I originally thought I had tried this even though I thought I didn't need to since my NIC was only in 1 IOMMU group, but I guess I didn't press apply.