diff --git a/nixos/boxes/home/palace/vms/cellar/default.nix b/nixos/boxes/home/palace/vms/cellar/default.nix
index 5512821..5396c62 100644
--- a/nixos/boxes/home/palace/vms/cellar/default.nix
+++ b/nixos/boxes/home/palace/vms/cellar/default.nix
@@ -34,7 +34,7 @@ in
         config = mkMerge [
           {
             boot = {
-              kernelParams = [ "console=ttyS0,115200n8" ];
+              kernelParams = [ "console=ttyS0,115200n8" "intel_iommu=on" ];
             };
 
             fileSystems = {
diff --git a/nixos/boxes/home/palace/vms/cellar/spdk.nix b/nixos/boxes/home/palace/vms/cellar/spdk.nix
index aec7da9..b10a931 100644
--- a/nixos/boxes/home/palace/vms/cellar/spdk.nix
+++ b/nixos/boxes/home/palace/vms/cellar/spdk.nix
@@ -13,7 +13,7 @@ in
     my = {
       spdk = {
         enable = true;
-        extraArgs = "--mem-channels 2 --cpumask 0xffff";
+        extraArgs = "--mem-channels 2 --cpumask 0x3";
         debugCommands = ''
           spdk-rpc bdev_nvme_attach_controller -t pcie -a 02:00.0 -b NVMe0
           spdk-rpc bdev_nvme_attach_controller -t pcie -a 03:00.0 -b NVMe1
diff --git a/nixos/boxes/home/palace/vms/default.nix b/nixos/boxes/home/palace/vms/default.nix
index f17515d..61c38ba 100644
--- a/nixos/boxes/home/palace/vms/default.nix
+++ b/nixos/boxes/home/palace/vms/default.nix
@@ -113,6 +113,10 @@
                 hostBDF = "43:00.0";
               };
             };
+            qemuFlags = [
+              "machine kernel-irqchip=split"
+              "device intel-iommu,caching-mode=on,device-iotlb=on,intremap=on"
+            ];
           };
 
           river = {