Devices Passthrough

Devices passthrough to virtual machines (VM) allows us to isolate the device drivers and their memory access in one or several VMs. This reduces the Trusted Code Base (TCB) in the host, due to the passed-through device drivers can be removed completely from the host kernel.

Whether the device platform is x86 or ARM, the passthrough device needs to be bound to the VFIO device driver by the host system before it can be passed through to the guest environment. For more information, see Binding Device to VFIO Driver.

Our current supported passthrough devices implementations:

• NVIDIA Jetson AGX Orin: UART Passthrough
• NVIDIA Jetson AGX Orin: PCIe Passthrough
• Generic x86: PCIe Passthrough on crosvm
• NVIDIA Jetson: UARTI Passthrough to netvm
• Device Tree Overlays for Passthrough