system/sandbar: Add vfio for xHCI controller

system/sandbar/boot-config.nix

@@ -3,7 +3,7 @@
 {
   boot = {
     kernelPackages = pkgs.linuxPackages_latest;
-    kernelParams = [ "intel_iommu=on" ];
+
     tmp.cleanOnBoot = true;
 
     initrd.systemd.enable = true;

system/sandbar/default.nix

@@ -4,6 +4,7 @@
   imports = [
     ./boot-config.nix
     ./hardware-configuration.nix
+    ./vfio.nix
     ../../sets/secureBoot.nix
     ../../sets/sshd.nix
     ../../sets/workstation.nix

system/sandbar/vfio.nix

@@ -0,0 +1,17 @@
+{ ... }:
+
+{
+  boot.kernelParams = [
+    "intel_iommu=on"
+    "vfio-pci.ids=1b21:1242"
+  ];
+  boot.initrd.kernelModules = [
+    "vfio"
+    "vfio_pci"
+    "vfio_iommu_type1"
+    "iommufd"
+  ];
+  services.udev.extraRules = ''
+    SUBSYSTEM=="vfio", MODE="660", GROUP="wheel"
+  '';
+}