Virtio-nvgpu: near-native NVIDIA GPU access inside a KVM guest
An experimental virtio device lets Linux guests use NVIDIA’s own user-mode drivers while forwarding driver-level ioctls to the host, avoiding per-graphics-API-call translation. The project reports near-bare-metal results for GPU-bound workloads and simultaneous rendering in four guests on one RTX 3060—but those are early, narrowly tested measurements, not a general multi-tenant guarantee.
The big caveat is isolation: the planned per-guest sandbox helper is not implemented, and today the VMM process holds the device descriptors. Hacker News commenters praised the technical approach but stressed that this currently has a much weaker security boundary than ordinary VM isolation; the repo itself labels the work experimental.