Note that recovering some performance is possible when the system only ever runs trusted code. E.g., start the kernel with the mitigations=off option. For more, see:

https://www.kernel.org/doc/html/latest/admin-guide/kernel-pa...

https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/i...