Xen GPU passthrough works if the GPU vendor supports VT-d passthrough. Many AMD discrete GPUs work in this configuration, from low end to high end versions. Nv

Xen GPU passthrough works if the GPU vendor supports VT-d passthrough. Many AMD discrete GPUs work in this configuration, from low end to high end versions. Nvidia high end models may work, but low end models are unlikely to work. Yes, the attack surface is widened to include the GPU, with isolation theoretically provided by the VT-d IOMMU. Some recent Intel CPUs support hardware virtualization of the integrated GPU, which likely further widens the attack surface, but enables multiple VMs to have hardware-accelerated graphics. This supports KVM and Xen, but is not (yet?) supported by Qubes, https://01.org/igvt-g/blogs/wangbo85/2015/intel-gvt-g-xengt-public-release-q32015 https://01.org/igvt-g/blogs/wangbo85/2015/intel-gvt-g-xengt-.... If the guest workload is OpenGL, http://www.virtualgl.org/About/Introduction http://www.virtualgl.org/About/Introduction could be an alternative.