diff --git a/hostconfig/thinkpad-nixos/nixos.nix b/hostconfig/thinkpad-nixos/nixos.nix
index 8a3333b..2880eb8 100644
--- a/hostconfig/thinkpad-nixos/nixos.nix
+++ b/hostconfig/thinkpad-nixos/nixos.nix
@@ -13,6 +13,8 @@
     efi.canTouchEfiVariables = true;
   };
 
+  boot.kernelParams = ["intel_iommu=on" "iommu=pt"];
+
   networking = {
     hostName = "thinkpad-nixos";
     interfaces = {