Create a Gaming HVM

[apparatus]

@Zamm

So you mention boot a live distro, now by this booting into a different linux distro like say tails or line mode Kicksecure?

Use some standard Linux Live distro: Fedora/Ubuntu/Debian/etc. Tails/Kicksecure may work as well, maybe it won’t work because of some the hardening there.

@Zamm

Also it is my understanding that GRUB can be accessed by using the shift key when booting and also access config files via the command line so not sure which approach I am suppose to take?

Add the kernel command line options temporarily in the GRUB menu.

@Zamm

From what Im understand with this read is that we are suppose to boot into live distro, access GRUB and add the parameters which will enable iommu(?) and then pull ithe folder structure t with the script?

Yes.

@Zamm

This part is not quiet clear for, is this something I just do by starting a Qube?

No, you need to boot the Live Linux OS on your hardware instead of Qubes OS, not inside the qube.

@Zamm

Also apologies if I missed it but I don’t see when this is then used later on?

IOMMU groups – security impact

When looking at howtos for GPU passthrough, I’ve seen mentions about checking the IOMMU groups, without much explanation. IIUC, IOMMU is important for preventing DMA attacks. Why are IOMMU groups so important with GPU passthrough? When I assign PCI devices within the same IOMMU group to multiple VMs (especially to dom0), does it mean that all those VMs can affect each other with DMA? And if it is so important with GPU, is it also important with other PCIe devices? If not, what makes them so di…

Create a Gaming HVM

For what it’s worth, on my machine they are in the same IOMMU, I can’t assign one in a hvm without having the qube to fail starting.