diff --git a/docs/dictionary/en-custom.txt b/docs/dictionary/en-custom.txt
index 9dcd8745e..6be1c8dc9 100644
--- a/docs/dictionary/en-custom.txt
+++ b/docs/dictionary/en-custom.txt
@@ -464,6 +464,7 @@ ovnkubernetes
 pablintino
 param
 params
+passthrough
 passwd
 passwordless
 pastebin
diff --git a/roles/devscripts/README.md b/roles/devscripts/README.md
index 76eafe173..c4e4a22eb 100644
--- a/roles/devscripts/README.md
+++ b/roles/devscripts/README.md
@@ -56,6 +56,9 @@ networks.
 * `cifmw_devscripts_cinder_volume_pvs` (list) a list of physical disks to be
   used for creating cinder-volumes volume-group. By default, the list contains
   `/dev/vda`.
+* `cifmw_devscripts_cpu_passthrough` (bool) Enable host-passthrough cpu model
+  to virtual machine instead of using QEMU on nested environment. Defaults
+  to `false`.
 
 ### Secrets management
 
diff --git a/roles/devscripts/defaults/main.yml b/roles/devscripts/defaults/main.yml
index effcccdf4..3247581e4 100644
--- a/roles/devscripts/defaults/main.yml
+++ b/roles/devscripts/defaults/main.yml
@@ -74,3 +74,4 @@ cifmw_devscripts_config_overrides: {}
 cifmw_devscripts_installer_timeout: 7200  # 2 hours
 cifmw_devscripts_etcd_slow_profile: true
 cifmw_devscripts_disable_console: false
+cifmw_devscripts_cpu_passthrough: false
diff --git a/roles/devscripts/tasks/135_patch_src.yml b/roles/devscripts/tasks/135_patch_src.yml
index 002d55077..be0c026ad 100644
--- a/roles/devscripts/tasks/135_patch_src.yml
+++ b/roles/devscripts/tasks/135_patch_src.yml
@@ -50,3 +50,12 @@
     owner: "{{ cifmw_devscripts_user }}"
     group: "{{ cifmw_devscripts_user }}"
     mode: "0644"
+
+- name: Force KVM domain type in dev-scripts configure to preserve host-passthrough CPU
+  when:
+    - cifmw_devscripts_cpu_passthrough | bool
+  ansible.builtin.lineinfile:
+    path: "{{ cifmw_devscripts_repo_dir }}/02_configure_host.sh"
+    insertbefore: '.*-b -vvv.*setup-playbook.yml'
+    firstmatch: true
+    line: '    -e "libvirt_domain_type=kvm" \'