Xen currently has poor support for GPU acceleration, and products like XenServer only support GPU acceleration when guests are trusted. However, GPU acceleration is increasingly a requirement of client workloads, so downstreams such as Qubes OS will need to support it with untrusted guests. In this session, I would like to discuss how to bring GPU acceleration into a state that can actually be shipped and security supported (denial of service excluded).
This references “Reasonably Secure GPU Acceleration” and will be more useful for participants who have attended this talk.