vnc into the guest isn't good enough, if the host's compromised it has the same vnc access you're using, defeats the whole point of all the physical isolation.

vnc into the guest isn't good enough, if the host's compromised it has the same vnc access you're using, defeats the whole point of all the physical isolation. That was an already supported way of using the usbarmory from the host btw. I'd be ok with a software-controlled KVM from the host to do the switching however. But the guest machines need to be physically routed into the display/keyboard/mouse and physically switched. It's just about physically sharing the input/output hardware in a compact and secure fashion.